Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/T1uFmDhw7Kc-GdB8YGZ23H8Ell4.roa
File: T1uFmDhw7Kc-GdB8YGZ23H8Ell4.roa (raw, json)
Hash identifier: 7RxvUzjfQVc/2yko8c81QzoM2nvQo4tGHGo27sAhy9c=
Subject key identifier: 4F:5B:85:98:38:70:EC:A7:3E:19:D0:7C:60:66:76:DC:7F:04:96:5E
Certificate issuer: /CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Certificate serial: 01941F8C7A35289ED1F64E3AD504176BC13C
Authority key identifier: 3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/T1uFmDhw7Kc-GdB8YGZ23H8Ell4.roa
Signing time: Wed 01 Jan 2025 01:48:07 +0000
ROA not before: Wed 01 Jan 2025 01:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199326
IP address blocks: 2a13:7700::/40 maxlen: 40
2a13:7700:100::/40 maxlen: 40
2a13:7705::/40 maxlen: 40
2a13:7705::/48 maxlen: 48
2a13:7705:a::/48 maxlen: 48
2a13:7705:10::/48 maxlen: 48
2a13:7705:80::/48 maxlen: 48
2a13:7705:90::/48 maxlen: 48
2a13:7705:ff00::/40 maxlen: 40
2a13:7705:ff00::/48 maxlen: 48
2a13:7705:ff01::/48 maxlen: 48
2a13:7705:ff04::/48 maxlen: 48
2a13:7705:ff08::/48 maxlen: 48
2a13:7705:ff10::/48 maxlen: 48
2a13:7705:ff14::/48 maxlen: 48
2a13:7705:ff18::/48 maxlen: 48
2a13:7705:ff1c::/48 maxlen: 48
2a13:7705:ff20::/48 maxlen: 48
2a13:7705:ff24::/48 maxlen: 48
2a13:7705:ff28::/48 maxlen: 48
2a13:7705:ff2c::/48 maxlen: 48
2a13:7705:ff30::/48 maxlen: 48
2a13:7705:ff34::/48 maxlen: 48
2a13:7705:ff38::/48 maxlen: 48
2a13:7705:ff3c::/48 maxlen: 48
2a13:7705:ff40::/48 maxlen: 48
2a13:7705:ff44::/48 maxlen: 48
2a13:7705:ff4c::/48 maxlen: 48
2a13:7705:ff50::/48 maxlen: 48
2a13:7705:ff54::/48 maxlen: 48
2a13:7705:ff58::/48 maxlen: 48
2a13:7705:ff5c::/48 maxlen: 48
2a13:7705:ff60::/48 maxlen: 48
2a13:7705:ff64::/48 maxlen: 48
2a13:7705:ff68::/48 maxlen: 48
2a13:7705:ff6c::/48 maxlen: 48
2a13:7705:ff70::/48 maxlen: 48
2a13:7705:ff74::/48 maxlen: 48
2a13:7705:ff78::/48 maxlen: 48
2a13:7705:ff7c::/48 maxlen: 48
2a13:7705:ff80::/48 maxlen: 48
2a13:7705:ff84::/48 maxlen: 48
2a13:7705:ff88::/48 maxlen: 48
2a13:7705:ff8c::/48 maxlen: 48
2a13:7705:ff90::/48 maxlen: 48
2a13:7705:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 Jan 2025 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7a:35:28:9e:d1:f6:4e:3a:d5:04:17:6b:c1:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d6c2958145f45fad5daeeb38b75b52c09661046
Validity
Not Before: Jan 1 01:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f5b85983870eca73e19d07c606676dc7f04965e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e3:cd:26:34:92:10:11:a4:37:68:72:d8:53:
0f:26:ba:49:0a:17:42:ef:f7:12:86:90:4d:17:57:
c9:24:f2:a8:1b:4f:24:b6:ca:cf:3b:4d:be:6c:4f:
22:41:f9:3b:59:9b:29:ba:a7:2f:6e:d3:b7:24:53:
38:99:8e:f3:77:4a:7e:7b:3d:e1:b6:9a:d0:a5:42:
96:0c:2e:22:62:56:b0:18:a6:2a:95:58:0d:fa:09:
6e:da:a8:93:61:7e:aa:b5:29:50:1f:64:c6:43:e6:
de:4c:c7:b9:e4:c4:a0:fa:c0:a9:e3:6f:5e:c2:fb:
d6:2e:6c:cf:f1:99:b5:d9:b7:77:21:c1:d9:e5:e3:
98:4a:12:9f:4a:65:3f:03:d8:cf:ec:13:f2:be:dc:
bd:66:b2:5b:f0:0c:c5:91:01:f1:4e:c4:a8:7a:0e:
83:57:6e:df:b7:c5:2a:16:06:9a:56:0e:66:fe:92:
ce:3d:8e:d9:fa:66:13:d6:da:ef:f5:42:02:20:12:
6e:26:ce:74:27:f5:b0:99:49:5e:3d:99:06:da:cb:
19:7e:5e:17:2d:6e:b9:96:6c:2c:8d:d5:13:e5:89:
a3:7b:0e:d9:52:d4:90:e6:d6:00:c2:4a:27:c5:be:
c6:82:e3:e8:e4:f0:bb:c9:df:e5:24:d7:6c:56:10:
fd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:5B:85:98:38:70:EC:A7:3E:19:D0:7C:60:66:76:DC:7F:04:96:5E
X509v3 Authority Key Identifier:
keyid:3D:6C:29:58:14:5F:45:FA:D5:DA:EE:B3:8B:75:B5:2C:09:66:10:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWwpWBRfRfrV2u6zi3W1LAlmEEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/T1uFmDhw7Kc-GdB8YGZ23H8Ell4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2a5574-7b12-4da2-a064-5e1b0788923b/1/PWwpWBRfRfrV2u6zi3W1LAlmEEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:7700::/39
2a13:7705::/40
2a13:7705:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
25:b6:65:45:a1:2d:d4:da:57:86:9b:77:37:16:26:76:d8:3c:
53:dd:44:79:8f:ab:df:35:d2:18:a0:4f:02:f9:52:cd:c6:20:
4e:7a:8a:ca:85:fb:8a:c6:c0:d5:db:e5:4c:73:f8:42:a7:5d:
80:7d:2b:48:a7:31:ea:41:8d:31:ba:4e:50:a3:8f:61:c2:80:
d6:50:54:6b:03:ca:b4:a6:82:33:b2:44:9f:6b:19:71:60:7e:
74:11:be:b0:b9:ad:98:eb:9a:2f:f6:17:60:d1:36:94:32:0c:
49:a5:1e:96:6c:97:04:ba:85:f6:77:ad:dd:af:2f:cb:0a:a0:
a0:c3:da:ed:df:dc:9d:46:0f:3d:9e:60:2c:c8:20:79:a9:10:
57:80:de:ef:59:cc:6e:20:85:bf:7b:8d:cb:a2:2d:13:cc:98:
3f:da:cd:14:97:a8:58:fd:5f:66:64:b9:44:39:c3:28:a9:12:
1c:f0:f3:ba:3e:db:82:5b:3b:80:6a:4e:a1:17:8d:30:65:20:
e9:40:99:06:36:74:01:1b:5c:d4:c1:b7:89:18:38:6f:54:a6:
84:f1:7d:da:07:ce:01:31:7c:86:13:35:53:d6:6b:e0:7b:34:
ce:41:40:2b:8b:d5:c4:d1:e7:1b:2a:dc:24:c6:05:61:88:dd:
16:2f:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:18:18 2025 by rpki-client