Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mKKdnzwAmQcJIGNYcS5oYCGne2I.roa
File: mKKdnzwAmQcJIGNYcS5oYCGne2I.roa (raw, json)
Hash identifier: wt5mLbBTa9mpl2n+SSDzgT6R9MTqK/80QN2tLEMMD00=
Subject key identifier: 98:A2:9D:9F:3C:00:99:07:09:20:63:58:71:2E:68:60:21:A7:7B:62
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191B2090B51FFEED047D3FFEEC2DE0C3908
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mKKdnzwAmQcJIGNYcS5oYCGne2I.roa
Signing time: Mon 02 Sep 2024 09:20:22 +0000
ROA not before: Mon 02 Sep 2024 09:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:2d02::/32 maxlen: 48
2a0a:2d06:22::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
2a12:ecc3:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 03 Sep 2024 17:19:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:09:0b:51:ff:ee:d0:47:d3:ff:ee:c2:de:0c:39:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 09:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=98a29d9f3c00990709206358712e686021a77b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:6e:2b:b1:43:ae:70:cf:f9:0e:83:74:a9:e2:
74:da:37:0c:e0:27:33:13:ec:89:22:06:64:8b:50:
46:4c:67:5c:c4:e5:b4:26:dd:0f:fe:9e:e8:5c:c2:
6c:63:d2:8d:42:b0:0b:65:2d:e1:61:f3:94:2f:ed:
7e:c9:f6:3a:0e:31:71:b5:2d:28:c1:5b:ab:65:cd:
c1:a6:2a:e4:fe:3e:e4:70:77:1d:d8:c1:ed:2b:e5:
6f:73:f6:d6:f3:1e:d1:1f:7c:7d:28:b4:10:43:dd:
60:e2:a3:fa:df:82:9f:1b:b9:d7:41:f6:8b:8d:d7:
3e:83:2a:f2:d8:ee:43:7a:1a:d5:84:2e:28:1f:6c:
67:f7:81:25:23:58:9d:a4:10:98:31:b4:74:bb:33:
ac:f4:87:61:ca:e2:fa:9e:1a:f9:49:a0:7d:37:a2:
7a:c8:2a:7e:7c:90:36:7b:86:9d:e8:83:e6:2c:25:
13:8f:e3:5a:72:d4:6d:42:b5:2f:a9:35:21:d8:78:
bd:2a:ba:5d:66:39:77:6c:e8:f2:3f:ff:0f:ca:ff:
52:c9:ea:82:c6:e7:07:ae:83:ca:e4:e7:5f:e9:c4:
0c:9e:50:f2:17:01:3a:d2:45:18:9b:3e:17:e6:4d:
43:16:9a:61:1a:da:e9:f6:1c:b9:07:e1:fa:b2:7f:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:A2:9D:9F:3C:00:99:07:09:20:63:58:71:2E:68:60:21:A7:7B:62
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mKKdnzwAmQcJIGNYcS5oYCGne2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0a:2d06:22::/48
2a0f:3d80:123::/48
2a12:ecc3:2::/48
Signature Algorithm: sha256WithRSAEncryption
8e:97:fd:7b:ac:fb:32:10:84:ee:94:02:e9:a5:1e:f0:18:58:
0d:26:b9:1f:03:aa:95:01:36:e3:ee:ab:1d:24:1d:88:d4:ed:
ba:f5:d2:1a:5c:51:5c:d3:bf:52:dd:a0:1d:c9:1d:7e:37:6c:
8d:b4:d8:49:f5:29:6f:2c:75:ab:a0:88:8d:48:1b:26:11:5c:
e0:e5:dc:00:21:ac:b0:7c:8c:f1:71:23:d7:75:b0:0e:2d:82:
33:30:1d:da:b8:74:ab:c9:c1:c9:fe:a3:a0:6d:82:41:b3:a2:
24:f1:11:bb:14:06:94:d7:17:e9:26:a4:25:ba:ef:ca:75:4c:
d9:43:de:16:c2:e5:75:8b:4f:ef:6a:83:a5:e5:b5:88:5c:df:
74:d2:26:2f:89:8d:3e:7c:a7:e1:02:6d:00:84:2b:f1:64:cb:
4e:2e:90:11:88:7a:90:cb:71:8f:cf:a0:8e:c9:dd:7a:1f:36:
26:a1:a1:df:0a:17:c8:4c:36:33:d1:4b:3b:94:87:13:0e:4e:
85:88:73:b2:d3:6d:e3:cc:d3:3f:6e:59:b1:6b:2b:4d:b6:8b:
93:46:25:da:15:4d:aa:bd:b4:71:0c:eb:f4:f1:d0:77:52:6b:
4d:8a:53:8c:a0:ee:ab:b7:d5:20:f2:38:69:0f:61:ab:d0:5c:
b6:24:81:3e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZGyCQtR/+7QR9P/7sLeDDkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwOTAyMDkyMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGEyOWQ5ZjNjMDA5OTA3MDkyMDYzNTg3MTJlNjg2MDIxYTc3YjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9W4rsUOucM/5DoN0qeJ02jcM4Ccz
E+yJIgZki1BGTGdcxOW0Jt0P/p7oXMJsY9KNQrALZS3hYfOUL+1+yfY6DjFxtS0o
wVurZc3Bpirk/j7kcHcd2MHtK+Vvc/bW8x7RH3x9KLQQQ91g4qP634KfG7nXQfaL
jdc+gyry2O5DehrVhC4oH2xn94ElI1idpBCYMbR0uzOs9IdhyuL6nhr5SaB9N6J6
yCp+fJA2e4ad6IPmLCUTj+NactRtQrUvqTUh2Hi9KrpdZjl3bOjyP/8Pyv9SyeqC
xucHroPK5Odf6cQMnlDyFwE60kUYmz4X5k1DFpphGtrp9hy5B+H6sn8rJwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJiinZ88AJkHCSBjWHEuaGAhp3tiMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbUtLZG56d0FtUWNKSUdOWWNTNW9ZQ0duZTJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiAwUAKgotAgMH
ACoKLQYAIgMHACoPPYABIwMHACoS7MMAAjANBgkqhkiG9w0BAQsFAAOCAQEAjpf9
e6z7MhCE7pQC6aUe8BhYDSa5HwOqlQE24+6rHSQdiNTtuvXSGlxRXNO/Ut2gHckd
fjdsjbTYSfUpbyx1q6CIjUgbJhFc4OXcACGssHyM8XEj13WwDi2CMzAd2rh0q8nB
yf6joG2CQbOiJPERuxQGlNcX6SakJbrvynVM2UPeFsLldYtP72qDpeW1iFzfdNIm
L4mNPnyn4QJtAIQr8WTLTi6QEYh6kMtxj8+gjsndeh82JqGh3woXyEw2M9FLO5SH
Ew5OhYhzstNt48zTP25ZsWsrTbaLk0Yl2hVNqr20cQzr9PHQd1JrTYpTjKDuq7fV
IPI4aQ9hq9BctiSBPg==
-----END CERTIFICATE-----
Generated at Tue May 13 18:33:23 2025 by rpki-client