Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OEsIJ7QrRJnsWZBCauHjr9Y3WMg.roa
File: OEsIJ7QrRJnsWZBCauHjr9Y3WMg.roa (raw, json)
Hash identifier: zMsZe2d+W0S/UoLWrcbYczB2/KCKXy2EQTEYbNQZmlk=
Subject key identifier: 38:4B:08:27:B4:2B:44:99:EC:59:90:42:6A:E1:E3:AF:D6:37:58:C8
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 01938C47198ACDB4F0283D07146F7B410927
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OEsIJ7QrRJnsWZBCauHjr9Y3WMg.roa
Signing time: Tue 03 Dec 2024 11:28:10 +0000
ROA not before: Tue 03 Dec 2024 11:28:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29226
IP address blocks: 2a09:6286::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 15:49:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:8c:47:19:8a:cd:b4:f0:28:3d:07:14:6f:7b:41:09:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Dec 3 11:28:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=384b0827b42b4499ec5990426ae1e3afd63758c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:82:e9:dc:64:91:b5:5d:9a:bb:94:f2:c4:
1b:bf:88:16:63:f6:d0:7b:27:ac:63:50:95:32:8f:
10:64:b8:b6:b0:64:60:5c:44:ad:f3:57:6b:a9:e7:
24:ac:af:2c:2c:d2:d8:13:fe:3a:ae:e6:32:d2:64:
4d:bb:d5:03:ad:12:f0:ad:d2:eb:5d:39:d6:bd:f0:
20:b2:4a:52:0a:9f:dd:18:ce:17:f3:51:a3:14:48:
aa:ee:e0:8a:32:23:19:03:9e:7b:f6:c3:48:b4:90:
d8:11:83:0b:71:8f:28:17:dc:9b:02:0a:ff:8f:fb:
14:cb:53:ce:5a:74:67:71:c5:9e:7c:d2:f6:61:45:
3c:eb:c6:7a:7d:12:76:65:44:7d:d1:a0:2e:f9:c9:
09:f7:d4:15:8c:40:e2:77:46:dd:f6:76:36:44:16:
60:61:25:17:98:d6:6d:ac:5e:a4:87:d0:a5:d9:df:
40:f4:87:24:ad:71:18:73:ff:4b:3c:a7:0e:e4:b2:
c5:32:aa:22:58:ae:6c:3b:d8:0a:bc:67:df:49:cb:
97:9e:e1:86:2a:8c:05:99:cd:f5:7f:6d:9c:71:da:
94:1a:b7:55:f6:04:5e:c9:aa:f3:21:e5:cd:c6:77:
d3:41:3e:2c:67:55:2f:0f:a8:f9:e1:7a:15:61:62:
1a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4B:08:27:B4:2B:44:99:EC:59:90:42:6A:E1:E3:AF:D6:37:58:C8
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/OEsIJ7QrRJnsWZBCauHjr9Y3WMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:6286::/32
Signature Algorithm: sha256WithRSAEncryption
ba:dc:17:94:79:cf:97:24:71:fe:fd:f7:0c:2b:16:e5:da:4c:
b8:63:db:7a:9a:c4:ab:07:69:da:79:ab:bc:63:2f:73:31:fb:
e7:56:87:ac:0a:37:18:ec:8f:92:86:45:50:bb:b0:0b:6a:42:
9d:dc:dc:da:65:34:85:ba:3b:48:16:bb:d0:3a:4a:e4:65:ff:
1e:4f:49:0b:57:37:6e:68:9c:43:0c:de:a9:04:42:4d:46:03:
76:2c:ee:21:81:fe:91:42:73:5c:63:df:fa:de:9c:96:fb:33:
42:8b:2d:4d:49:b2:61:32:75:ca:84:7e:60:19:2c:b2:b4:45:
83:36:45:df:57:14:c7:58:48:24:d9:7b:05:75:47:cb:d3:dd:
bd:c5:22:82:47:e0:c0:8f:2e:5e:c6:bc:79:05:a2:00:fb:cc:
7e:29:ab:c7:06:a5:fa:3e:17:16:a7:21:8c:23:c0:d4:5c:80:
77:ef:f9:2f:32:93:bd:fd:b3:f9:2c:8d:d7:e9:04:b4:49:8b:
9a:52:81:d1:05:56:cc:aa:67:f5:dd:db:c4:cd:6d:09:72:5b:
d2:71:d7:cc:21:8a:ec:f7:bf:43:f1:47:5f:f5:14:5d:bb:5c:
d8:63:ab:f4:de:d8:a8:36:eb:4a:05:94:be:49:7d:b5:0b:7f:
8b:4b:30:cc
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZOMRxmKzbTwKD0HFG97QQknMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQxMjAzMTEyODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODRiMDgyN2I0MmI0NDk5ZWM1OTkwNDI2YWUxZTNhZmQ2Mzc1OGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxSC6dxkkbVdmruU8sQbv4gWY/bQ
eyesY1CVMo8QZLi2sGRgXESt81drqeckrK8sLNLYE/46ruYy0mRNu9UDrRLwrdLr
XTnWvfAgskpSCp/dGM4X81GjFEiq7uCKMiMZA5579sNItJDYEYMLcY8oF9ybAgr/
j/sUy1POWnRnccWefNL2YUU868Z6fRJ2ZUR90aAu+ckJ99QVjEDid0bd9nY2RBZg
YSUXmNZtrF6kh9Cl2d9A9IckrXEYc/9LPKcO5LLFMqoiWK5sO9gKvGffScuXnuGG
KowFmc31f22ccdqUGrdV9gReyarzIeXNxnfTQT4sZ1UvD6j54XoVYWIa+QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDhLCCe0K0SZ7FmQQmrh46/WN1jIMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvT0VzSUo3UXJSSm5zV1pCQ2F1SGpyOVkzV01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKglihjAN
BgkqhkiG9w0BAQsFAAOCAQEAutwXlHnPlyRx/v33DCsW5dpMuGPbeprEqwdp2nmr
vGMvczH751aHrAo3GOyPkoZFULuwC2pCndzc2mU0hbo7SBa70DpK5GX/Hk9JC1c3
bmicQwzeqQRCTUYDdizuIYH+kUJzXGPf+t6clvszQostTUmyYTJ1yoR+YBkssrRF
gzZF31cUx1hIJNl7BXVHy9PdvcUigkfgwI8uXsa8eQWiAPvMfimrxwal+j4XFqch
jCPA1FyAd+/5LzKTvf2z+SyN1+kEtEmLmlKB0QVWzKpn9d3bxM1tCXJb0nHXzCGK
7Pe/Q/FHX/UUXbtc2GOr9N7YqDbrSgWUvkl9tQt/i0swzA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:34 2025 by rpki-client