Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/f7KPpDal6rX7XV_JvCDJ4tJujyU.roa
File: f7KPpDal6rX7XV_JvCDJ4tJujyU.roa (raw, json)
Hash identifier: pF5oPXUSG57I0FolXbxOvxGf6au8TGzaf2vclLp9sR0=
Subject key identifier: 7F:B2:8F:A4:36:A5:EA:B5:FB:5D:5F:C9:BC:20:C9:E2:D2:6E:8F:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019462141AADD2EF51625232CFC405FE68EC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/f7KPpDal6rX7XV_JvCDJ4tJujyU.roa
Signing time: Mon 13 Jan 2025 23:51:12 +0000
ROA not before: Mon 13 Jan 2025 23:51:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207252
IP address blocks: 2a06:de00:400::/38 maxlen: 48
2a06:de00:400::/48 maxlen: 48
2a0e:97c0:db0::/48 maxlen: 48
2a10:cc40:270::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 23:51:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:62:14:1a:ad:d2:ef:51:62:52:32:cf:c4:05:fe:68:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 13 23:51:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fb28fa436a5eab5fb5d5fc9bc20c9e2d26e8f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:50:49:74:b2:40:41:75:fc:24:e1:da:cc:ae:
7f:1a:98:b7:af:f5:0c:f0:fe:33:30:50:05:38:af:
63:cd:4e:69:38:e1:0a:3c:b3:64:c4:37:ad:4c:a3:
c4:04:fb:fa:70:cf:f9:e1:6c:26:1e:0a:7f:5c:ee:
a4:0f:04:63:cb:c8:82:d7:ff:ff:fc:df:0a:d0:f4:
bf:01:b9:30:10:4d:0c:3a:ef:5f:3d:2b:63:21:f5:
9c:5f:56:05:59:58:44:73:0f:f7:50:bc:b3:08:71:
71:fc:ec:e4:dc:71:33:f2:5e:9b:6f:b8:92:80:30:
74:26:f8:db:b0:b8:df:fe:66:ef:a6:ff:2a:f9:5e:
d4:d5:7b:e2:d3:05:2e:08:64:71:1f:f4:b6:08:19:
5c:a4:35:c5:50:c4:dc:3d:08:25:f8:c1:94:bc:3f:
5a:67:81:f1:f6:14:ee:1b:0f:1a:f9:c4:66:53:a0:
7c:a9:e9:3f:93:48:f3:bc:41:d2:af:6c:18:ca:39:
a5:f7:cd:b1:3d:88:1b:36:10:8d:5c:b7:b2:21:84:
fb:b9:d7:68:14:c7:ff:16:1c:63:0c:11:c7:44:2d:
c0:7c:af:62:43:0d:38:77:f2:64:80:f3:78:88:fa:
b6:20:4b:48:37:13:84:3f:81:a1:60:59:09:fc:35:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:8F:A4:36:A5:EA:B5:FB:5D:5F:C9:BC:20:C9:E2:D2:6E:8F:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/f7KPpDal6rX7XV_JvCDJ4tJujyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:400::/38
2a0e:97c0:db0::/48
2a10:cc40:270::/48
Signature Algorithm: sha256WithRSAEncryption
1a:05:7f:d2:be:a2:28:4e:63:17:a9:0f:39:16:79:c3:ef:98:
d3:d7:23:cf:52:fb:a0:0a:e0:a1:8a:dd:09:62:9d:49:cd:43:
23:bb:6b:41:a9:58:02:5c:29:df:d4:7e:60:05:54:f9:11:55:
37:a9:33:6c:99:67:11:de:cb:15:93:da:3b:2d:ea:c5:f8:74:
b7:42:41:a3:60:ce:1d:89:0f:91:66:35:cb:af:c1:8c:69:2a:
50:82:c8:0f:97:ff:9f:35:f0:bc:02:5a:22:d3:16:07:5d:c9:
98:4d:a3:6d:b9:e1:86:3b:1b:27:fc:2a:00:0e:57:13:71:3e:
a9:da:8d:03:59:55:ec:bf:a7:2f:7b:c5:ed:9f:4b:8f:22:0b:
25:04:90:f8:78:2e:74:3c:b5:08:9c:13:2f:a5:1a:56:e1:ff:
eb:b8:a1:00:2a:1d:48:1d:06:e8:31:f6:67:b1:67:af:37:e1:
4a:ab:79:12:27:23:c0:a9:93:e2:49:a7:7e:b4:73:f2:c0:60:
e9:2e:01:31:9a:78:30:a0:b4:db:36:a6:48:38:95:91:20:b5:
dd:2d:5e:ba:48:47:d0:5e:b5:a1:fb:0f:3d:61:c4:69:fe:bc:
d4:63:26:28:20:a4:f0:fd:03:c1:d2:11:19:2d:fd:70:da:96:
11:62:68:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 04:43:10 2025 by rpki-client