Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/666R7yD-7vvn1ZoveHl6lfN5gQM.roa
File: 666R7yD-7vvn1ZoveHl6lfN5gQM.roa (raw, json)
Hash identifier: fC+S4FwmfgTSTY7cOrGwlTgsktzJXX5fucEpW5nAV6o=
Subject key identifier: EB:AE:91:EF:20:FE:EE:FB:E7:D5:9A:2F:78:79:7A:95:F3:79:81:03
Certificate issuer: /CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Certificate serial: 018CC6B90959983A8C943E87C810EA298935
Authority key identifier: EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/666R7yD-7vvn1ZoveHl6lfN5gQM.roa
Signing time: Mon 01 Jan 2024 20:31:04 +0000
ROA not before: Mon 01 Jan 2024 20:31:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203055
IP address blocks: 2001:678:25c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 14 Nov 2024 09:22:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:09:59:98:3a:8c:94:3e:87:c8:10:ea:29:89:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec3ce4e2b1ad290867ddc77f31e5f153e9b20887
Validity
Not Before: Jan 1 20:31:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebae91ef20feeefbe7d59a2f78797a95f3798103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:53:90:f7:03:95:46:a9:23:63:59:97:17:
a8:8b:1a:e5:d1:f7:fb:85:4e:57:69:3c:25:81:04:
02:61:8a:77:bf:42:e6:32:35:3f:9c:d1:d2:b7:a5:
7b:cf:25:04:d8:8c:00:1d:94:c6:43:e7:6f:af:77:
b1:c6:68:17:0f:bc:7d:d6:bf:e9:f6:12:94:60:2f:
dd:c6:1c:7f:7e:41:df:45:6b:a6:d9:87:73:77:79:
ef:68:99:4c:2c:dc:86:5b:b6:27:fa:48:ad:13:98:
02:5e:26:bf:4d:22:f6:bb:9a:6c:75:4b:4d:54:63:
21:d2:c0:1b:a8:ab:d6:3b:7f:54:3a:75:b2:f8:3f:
ef:13:81:7e:c8:2b:36:60:e3:89:b3:a4:bf:d6:aa:
d2:f5:64:ef:71:2c:62:d5:6b:60:fb:14:f6:7f:31:
5b:7f:dd:93:fe:5c:17:eb:4c:eb:a4:4b:87:b6:8f:
6d:bc:e9:8a:e7:e4:e9:6f:34:a5:b1:4b:60:9c:ad:
90:09:bc:2a:cb:fa:fe:b6:68:d8:46:43:ee:d0:ed:
e5:92:05:5a:b5:14:29:01:8a:d2:f5:e5:49:b9:24:
04:50:56:5f:b7:6d:68:7c:d8:01:c1:82:3c:52:ea:
98:64:6e:27:af:cf:af:12:db:f5:b9:66:7a:f4:28:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:AE:91:EF:20:FE:EE:FB:E7:D5:9A:2F:78:79:7A:95:F3:79:81:03
X509v3 Authority Key Identifier:
keyid:EC:3C:E4:E2:B1:AD:29:08:67:DD:C7:7F:31:E5:F1:53:E9:B2:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Dzk4rGtKQhn3cd_MeXxU-myCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/666R7yD-7vvn1ZoveHl6lfN5gQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ef2216-7c1f-4f6d-85c5-f53ad46caf3c/1/7Dzk4rGtKQhn3cd_MeXxU-myCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:25c::/48
Signature Algorithm: sha256WithRSAEncryption
33:60:cb:c7:96:48:8d:ba:b9:06:b4:29:1a:4f:81:11:83:28:
ce:cb:49:09:f2:78:7e:0d:9c:01:f6:17:56:8f:2a:7d:60:e4:
fd:00:8c:83:e2:ee:e1:5f:70:eb:78:8d:1a:d8:ac:47:69:e0:
eb:55:fd:71:a4:22:04:76:ff:14:e6:87:1a:48:88:67:81:1d:
1f:bf:7f:f0:8a:4d:1e:a7:8e:bf:cb:c9:ce:78:82:7e:8d:36:
a8:8e:63:6d:bf:1c:9e:5d:e1:c5:70:a6:2f:2c:99:b1:34:4c:
e9:ab:c0:95:9d:0d:8c:b0:21:1d:1e:42:f5:5c:1f:20:10:1d:
8f:83:57:fe:17:a7:ee:63:f7:3d:0f:c2:08:35:f1:83:6e:2c:
68:db:89:54:53:0d:ff:c2:ef:62:ce:15:9c:07:0b:c5:04:ab:
68:68:4c:e5:6b:e9:ae:23:93:13:41:ab:b9:25:8f:db:b1:ce:
3a:9c:e0:cf:13:97:4c:56:a7:95:96:5b:f8:7a:18:cc:c5:3d:
0c:a6:b1:e3:d8:87:4f:7c:72:04:84:cf:0d:ee:25:a7:a1:80:
05:cb:73:79:3f:cd:1f:32:3d:ff:6b:c6:42:7c:4a:36:6e:94:
6c:1f:1e:1d:d0:e5:de:40:09:19:65:67:b7:bc:b8:58:e2:f0:
6a:6f:d3:42
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGuQlZmDqMlD6HyBDqKYk1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjM2NlNGUyYjFhZDI5MDg2N2RkYzc3ZjMxZTVmMTUzZTli
MjA4ODcwHhcNMjQwMTAxMjAzMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmFlOTFlZjIwZmVlZWZiZTdkNTlhMmY3ODc5N2E5NWYzNzk4MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQhTkPcDlUapI2NZlxeoixrl0ff7
hU5XaTwlgQQCYYp3v0LmMjU/nNHSt6V7zyUE2IwAHZTGQ+dvr3exxmgXD7x91r/p
9hKUYC/dxhx/fkHfRWum2Ydzd3nvaJlMLNyGW7Yn+kitE5gCXia/TSL2u5psdUtN
VGMh0sAbqKvWO39UOnWy+D/vE4F+yCs2YOOJs6S/1qrS9WTvcSxi1Wtg+xT2fzFb
f92T/lwX60zrpEuHto9tvOmK5+TpbzSlsUtgnK2QCbwqy/r+tmjYRkPu0O3lkgVa
tRQpAYrS9eVJuSQEUFZft21ofNgBwYI8UuqYZG4nr8+vEtv1uWZ69Ch/DwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFOuuke8g/u7759WaL3h5epXzeYEDMB8GA1UdIwQY
MBaAFOw85OKxrSkIZ93HfzHl8VPpsgiHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUt
ZjUzYWQ0NmNhZjNjLzEvNjY2Ujd5RC03dnZuMVpvdmVIbDZsZk41Z1FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9lZjIyMTYtN2MxZi00ZjZkLTg1YzUtZjUzYWQ0NmNhZjNj
LzEvN0R6azRyR3RLUWhuM2NkX01lWHhVLW15Q0ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAJc
MA0GCSqGSIb3DQEBCwUAA4IBAQAzYMvHlkiNurkGtCkaT4ERgyjOy0kJ8nh+DZwB
9hdWjyp9YOT9AIyD4u7hX3DreI0a2KxHaeDrVf1xpCIEdv8U5ocaSIhngR0fv3/w
ik0ep46/y8nOeIJ+jTaojmNtvxyeXeHFcKYvLJmxNEzpq8CVnQ2MsCEdHkL1XB8g
EB2Pg1f+F6fuY/c9D8IINfGDbixo24lUUw3/wu9izhWcBwvFBKtoaEzla+muI5MT
Qau5JY/bsc46nODPE5dMVqeVllv4ehjMxT0MprHj2IdPfHIEhM8N7iWnoYAFy3N5
P80fMj3/a8ZCfEo2bpRsHx4d0OXeQAkZZWe3vLhY4vBqb9NC
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:06:42 2025 by rpki-client