Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/PgoC6oqRr_MWefvbjQ6TLHMwxkk.roa
File: PgoC6oqRr_MWefvbjQ6TLHMwxkk.roa (raw, json)
Hash identifier: tD5blRCpw1lgWD5XY+Wt3SG7pHMKcqMWfoHyPdhy0fk=
Subject key identifier: 3E:0A:02:EA:8A:91:AF:F3:16:79:FB:DB:8D:0E:93:2C:73:30:C6:49
Certificate issuer: /CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Certificate serial: 0191D81C25187827E5DF23D812F33D4CD0B1
Authority key identifier: 7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/PgoC6oqRr_MWefvbjQ6TLHMwxkk.roa
Signing time: Mon 09 Sep 2024 18:46:48 +0000
ROA not before: Mon 09 Sep 2024 18:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214328
IP address blocks: 2a10:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d8:1c:25:18:78:27:e5:df:23:d8:12:f3:3d:4c:d0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a8bae923305a71c526a6fcf57c29d6c16a4269e
Validity
Not Before: Sep 9 18:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e0a02ea8a91aff31679fbdb8d0e932c7330c649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:09:a1:5f:e1:51:32:e3:7c:7a:9c:c4:6e:
a0:63:eb:d5:e9:75:6d:26:cf:3c:05:49:6e:7c:97:
34:68:f8:a0:3b:7d:5b:b8:29:cd:aa:44:eb:de:95:
8c:8a:e2:52:24:91:29:4a:e0:d8:54:99:30:0c:61:
04:56:c2:57:f6:49:7f:f7:94:5a:dd:8c:37:bb:e3:
ff:1b:77:73:fc:39:ac:d8:05:5e:6c:6a:d3:e8:e0:
96:63:ff:8e:bc:26:78:51:96:ae:96:38:54:8a:b0:
31:82:98:f3:1b:63:9e:09:8b:f0:85:d0:27:7a:87:
4d:49:a2:ab:48:e5:fc:af:be:70:9a:5f:21:1b:81:
71:74:04:5a:09:a7:7d:18:a2:43:74:87:17:ff:c3:
3d:9e:a2:77:9f:7b:d3:98:25:d3:22:04:a4:6e:de:
6e:3b:c2:c6:ce:ca:79:2c:03:c5:93:89:ab:a6:db:
5a:44:21:e8:5f:41:55:c8:9d:e1:2f:f2:38:31:64:
6b:04:2e:95:bb:c6:27:84:75:25:36:47:22:f9:f3:
c6:f2:2c:4a:53:40:fd:3c:71:25:d0:25:55:bf:a0:
e6:a3:0d:f6:16:f1:d3:e7:ce:34:92:ce:fd:0e:fd:
0a:4c:76:63:d2:9c:8a:19:74:61:ab:1a:25:ff:87:
74:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0A:02:EA:8A:91:AF:F3:16:79:FB:DB:8D:0E:93:2C:73:30:C6:49
X509v3 Authority Key Identifier:
keyid:7A:8B:AE:92:33:05:A7:1C:52:6A:6F:CF:57:C2:9D:6C:16:A4:26:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eouukjMFpxxSam_PV8KdbBakJp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/PgoC6oqRr_MWefvbjQ6TLHMwxkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2a1e5c-1010-4098-94c9-de0c570ba850/1/eouukjMFpxxSam_PV8KdbBakJp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:f900::/29
Signature Algorithm: sha256WithRSAEncryption
8a:91:d7:d5:61:4e:68:57:78:44:0c:f3:8d:b6:32:e8:69:40:
49:d4:de:49:63:d3:7a:0d:a2:dc:e6:50:b4:bc:09:5c:4b:3d:
90:c0:fb:49:93:8b:1e:2a:2c:de:77:96:d3:f5:ec:22:4f:d2:
2d:bc:58:cc:0a:98:4a:a5:8e:69:f8:e0:30:30:df:9f:41:c9:
a5:ff:fe:36:08:bf:1f:c3:2c:a1:06:50:5f:f0:e8:2c:19:dd:
26:7c:6f:c0:6f:10:7d:a6:2f:8f:ec:ae:98:91:90:57:b6:cb:
b2:b9:3c:15:6f:e2:86:24:59:e6:bd:97:94:0f:03:24:16:0f:
ed:f5:5e:f4:3d:52:06:e9:27:ac:43:11:07:b0:cb:45:a2:53:
98:cd:59:c0:0e:98:6b:77:19:60:d7:bd:b8:b3:92:63:ee:fe:
5c:39:99:96:f7:91:e1:25:ae:8a:16:ec:af:53:4a:99:51:3a:
58:60:80:8c:fb:b0:f7:e8:bd:4d:9d:73:1f:28:f1:1d:12:2a:
86:67:6c:8e:f9:f5:b6:9a:98:24:14:b6:1a:13:31:3c:01:56:
2a:7e:bf:cc:be:92:f5:55:ba:45:7b:bb:ab:8d:44:26:ad:41:
67:fb:0f:96:cc:09:e0:00:4c:89:c2:98:20:df:5a:ba:2e:97:
bd:56:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:43:40 2025 by rpki-client