Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/7xp_12e3z7veKkA1f3rgUOTIGdQ.roa
File: 7xp_12e3z7veKkA1f3rgUOTIGdQ.roa (raw, json)
Hash identifier: 9iyFt5hbSIsQgjlKMf8SbAIKCZENvv47BfCeMtq5AMI=
Subject key identifier: EF:1A:7F:D7:67:B7:CF:BB:DE:2A:40:35:7F:7A:E0:50:E4:C8:19:D4
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 0194244501FFA6E707D32F99962E6202FE27
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/7xp_12e3z7veKkA1f3rgUOTIGdQ.roa
Signing time: Wed 01 Jan 2025 23:48:09 +0000
ROA not before: Wed 01 Jan 2025 23:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47526
IP address blocks: 2a13:ccc0::/29 maxlen: 29
2a13:ccc0::/32 maxlen: 32
2a13:ccc1::/32 maxlen: 32
2a13:ccc3::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 11 Jan 2025 02:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:01:ff:a6:e7:07:d3:2f:99:96:2e:62:02:fe:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Jan 1 23:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef1a7fd767b7cfbbde2a40357f7ae050e4c819d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bc:7b:f9:89:fc:45:77:14:2c:8c:09:cb:1e:
a4:ff:8f:00:bb:67:59:35:a8:74:20:5b:6d:f5:a4:
9d:c1:30:f2:19:37:a9:af:2a:96:32:8f:e9:d0:5e:
4c:80:25:61:f5:c5:6b:fc:c1:c0:1a:be:13:b5:ed:
09:5f:9a:fc:f6:fc:83:e5:3c:a1:7d:60:dd:fd:a9:
f9:ae:12:0b:20:0d:60:6a:34:31:20:9c:c7:71:df:
b3:0f:1f:37:b6:1e:31:53:4c:13:16:6f:d2:46:f7:
02:be:b8:f4:fa:ca:eb:31:14:59:ef:34:82:5a:21:
10:56:71:87:d3:f8:f0:47:29:0d:b3:a8:27:b6:c8:
3a:64:51:ab:c1:e2:12:3c:84:e1:63:b1:77:e2:86:
18:ed:bb:a2:f2:37:3d:81:a6:18:a0:bf:84:cb:c7:
6e:6a:2e:76:9b:97:23:12:5a:46:65:01:b8:42:f0:
00:39:d9:30:20:5a:f2:88:bf:42:bc:da:76:83:0f:
bb:9d:4f:eb:34:09:76:8a:1d:7c:f1:ac:0d:99:1c:
0d:fa:e2:0f:94:af:12:2d:81:7f:59:cf:88:1e:fb:
7f:a8:fa:8b:ec:a6:dd:98:5d:63:e3:f4:ba:24:36:
3c:85:13:d9:a6:f8:92:2b:7f:34:de:9e:13:62:a9:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:7F:D7:67:B7:CF:BB:DE:2A:40:35:7F:7A:E0:50:E4:C8:19:D4
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/7xp_12e3z7veKkA1f3rgUOTIGdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:ccc0::/29
Signature Algorithm: sha256WithRSAEncryption
1e:7c:37:64:91:5e:5d:b1:2b:0b:b5:30:3f:df:75:6a:7c:61:
02:c8:35:48:ae:ae:9c:a0:fc:c3:d0:80:4a:1d:7c:ad:1d:7b:
92:19:72:3b:bb:47:40:15:61:75:08:13:17:1b:a1:0f:6b:ee:
cc:61:b0:c2:aa:7e:af:e3:bb:86:12:69:8d:36:31:ad:66:46:
7a:a5:ec:7f:39:47:8f:3c:cc:54:db:e8:f9:dd:a2:5d:02:96:
8b:c8:2b:2d:b7:f5:fc:1c:e6:95:23:f9:a1:4e:9b:65:83:4e:
89:37:44:bf:07:03:a8:e8:4c:15:06:c9:76:7a:91:a0:5f:7c:
93:02:aa:88:d9:e9:6a:94:e0:85:c0:b8:1e:50:7c:f1:f0:84:
a9:e7:fd:eb:92:02:71:88:b1:a3:39:bc:d0:00:cc:ca:59:2f:
56:aa:01:45:1a:d4:69:54:1a:d9:7b:f9:b5:9e:91:b9:c3:90:
22:70:61:c6:4a:4f:9f:e4:6a:fb:40:5e:70:24:92:e8:5a:b2:
80:4a:01:d8:99:15:86:7c:6c:f4:59:6d:97:bb:00:2c:8d:b2:
31:5c:1b:17:15:7a:1d:f9:10:8b:cf:97:5c:cd:05:b6:9d:62:
d9:0c:7f:f3:59:9d:31:4b:6a:86:15:02:22:b1:0d:8b:cd:3e:
fd:15:da:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:29:13 2025 by rpki-client