Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/4FcXZ3taSsnD1oT1A-9KclmfNrA.roa
File: 4FcXZ3taSsnD1oT1A-9KclmfNrA.roa (raw, json)
Hash identifier: uvpywA1NfB0bW5nmsJ62Uc32QgsTE7qSgp+Gs7aec9k=
Subject key identifier: E0:57:17:67:7B:5A:4A:C9:C3:D6:84:F5:03:EF:4A:72:59:9F:36:B0
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 0192E20E9CF0E96BED25B5EC84B1EFB56B28
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/4FcXZ3taSsnD1oT1A-9KclmfNrA.roa
Signing time: Thu 31 Oct 2024 10:11:01 +0000
ROA not before: Thu 31 Oct 2024 10:11:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3329
IP address blocks: 2a01:830::/32 maxlen: 48
2a01:830:8000::/48 maxlen: 48
2a01:830:8001::/48 maxlen: 48
2a01:831::/32 maxlen: 32
2a01:8c8::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:44:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e2:0e:9c:f0:e9:6b:ed:25:b5:ec:84:b1:ef:b5:6b:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: Oct 31 10:11:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e05717677b5a4ac9c3d684f503ef4a72599f36b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f1:b9:e5:89:d0:b4:0a:95:ad:46:b4:eb:3f:
b9:05:93:1b:16:3f:4a:50:97:c6:82:b2:f3:f6:8e:
16:7e:8e:3d:85:6f:78:e0:59:27:66:22:91:5f:41:
58:90:cf:5b:ea:4a:7b:33:a6:bd:08:0b:d0:a1:37:
9b:9b:9e:d1:f9:52:c6:f6:0a:f7:09:74:ac:44:3e:
bf:a0:25:09:69:83:95:32:1a:e7:6f:a0:85:9b:06:
22:69:c1:35:c5:9a:a1:16:00:71:28:60:7c:dc:5f:
0c:40:52:81:95:2d:98:dc:d0:72:93:fd:51:7f:2e:
c9:f9:ec:9d:79:45:54:1b:60:81:ca:bd:c7:bb:c8:
69:ae:fd:ae:3c:59:a8:b3:17:5e:9b:83:df:23:fd:
14:ac:25:8f:fd:93:f7:b1:69:64:b0:15:27:0e:32:
34:7b:00:e4:55:95:ee:27:d9:47:63:fb:e4:d8:3c:
ec:1e:f7:44:76:27:50:92:86:63:ea:2a:74:a0:e0:
fa:b8:61:88:c7:2c:7a:fb:5d:61:40:20:36:e0:c2:
d6:13:75:46:0e:df:8d:cc:48:5f:61:ef:01:6e:19:
1e:ad:db:3e:82:ed:32:c1:75:9d:b1:06:c9:06:25:
80:83:bb:6b:1b:cd:19:d1:ab:c5:33:bb:80:88:89:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:17:67:7B:5A:4A:C9:C3:D6:84:F5:03:EF:4A:72:59:9F:36:B0
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/4FcXZ3taSsnD1oT1A-9KclmfNrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:830::/31
2a01:8c8::/32
Signature Algorithm: sha256WithRSAEncryption
19:5f:6c:86:99:28:c0:60:d2:a8:e8:79:73:4b:37:92:80:48:
99:6c:79:73:07:91:81:1d:1c:4b:63:7e:b2:e4:ca:0a:6b:18:
47:df:09:37:0f:43:64:87:2f:bb:bd:ba:b6:24:a7:6c:0e:12:
77:73:0c:21:0a:e4:f3:26:3c:9c:00:7c:b7:b8:aa:99:7f:59:
f3:25:d7:f3:1d:6c:be:7c:b2:98:a7:fa:46:6d:5e:3e:24:11:
63:07:a8:b8:c8:01:33:d6:c5:ea:32:ab:2d:54:18:d0:85:fc:
ef:13:c0:cc:49:ff:8a:7c:68:2f:31:59:32:b4:8d:b3:ef:a7:
2d:15:b9:bf:66:b4:4f:5a:f8:fe:96:17:5b:e8:99:94:97:95:
27:d5:c9:19:e5:47:e6:0f:53:32:d0:09:c8:bc:c9:90:db:d1:
ac:96:10:2a:36:73:0b:17:10:22:ce:53:f5:9e:e5:f1:b2:d7:
d3:bd:c0:13:e1:8e:e7:e6:c1:35:1c:ce:be:83:de:7f:37:c7:
c0:32:4c:ef:64:9e:09:48:ee:80:df:8e:89:0d:35:d2:fd:27:
13:95:26:ee:59:3f:7b:e7:fb:da:ac:40:82:14:5d:5a:55:74:
66:55:cb:90:a2:67:f1:1e:85:d3:41:46:bf:1d:64:c4:5c:d2:
9a:88:a4:75
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZLiDpzw6WvtJbXshLHvtWsoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3
NTE1ZDIwHhcNMjQxMDMxMTAxMTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDU3MTc2NzdiNWE0YWM5YzNkNjg0ZjUwM2VmNGE3MjU5OWYzNmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfG55YnQtAqVrUa06z+5BZMbFj9K
UJfGgrLz9o4Wfo49hW944FknZiKRX0FYkM9b6kp7M6a9CAvQoTebm57R+VLG9gr3
CXSsRD6/oCUJaYOVMhrnb6CFmwYiacE1xZqhFgBxKGB83F8MQFKBlS2Y3NByk/1R
fy7J+eydeUVUG2CByr3Hu8hprv2uPFmosxdem4PfI/0UrCWP/ZP3sWlksBUnDjI0
ewDkVZXuJ9lHY/vk2DzsHvdEdidQkoZj6ip0oOD6uGGIxyx6+11hQCA24MLWE3VG
Dt+NzEhfYe8Bbhkerds+gu0ywXWdsQbJBiWAg7trG80Z0avFM7uAiInvVwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOBXF2d7WkrJw9aE9QPvSnJZnzawMB8GA1UdIwQY
MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt
ZWVjNWQ1MGVmYTk0LzEvNEZjWFozdGFTc25EMW9UMUEtOUtjbG1mTnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0
LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUBKgEIMAMF
ACoBCMgwDQYJKoZIhvcNAQELBQADggEBABlfbIaZKMBg0qjoeXNLN5KASJlseXMH
kYEdHEtjfrLkygprGEffCTcPQ2SHL7u9urYkp2wOEndzDCEK5PMmPJwAfLe4qpl/
WfMl1/MdbL58spin+kZtXj4kEWMHqLjIATPWxeoyqy1UGNCF/O8TwMxJ/4p8aC8x
WTK0jbPvpy0Vub9mtE9a+P6WF1vomZSXlSfVyRnlR+YPUzLQCci8yZDb0ayWECo2
cwsXECLOU/We5fGy19O9wBPhjufmwTUczr6D3n83x8AyTO9knglI7oDfjokNNdL9
JxOVJu5ZP3vn+9qsQIIUXVpVdGZVy5CiZ/EehdNBRr8dZMRc0pqIpHU=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:23:26 2025 by rpki-client