Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/fFLHVgwBGFSnu5YT6XRhOVNsXjs.roa
File: fFLHVgwBGFSnu5YT6XRhOVNsXjs.roa (raw, json)
Hash identifier: bfjFIzCV31/CMdnyNpz31Mc72RPqPfDX72VjDjGdeo0=
Subject key identifier: 7C:52:C7:56:0C:01:18:54:A7:BB:96:13:E9:74:61:39:53:6C:5E:3B
Certificate issuer: /CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Certificate serial: 0193D0A74186FF5D6946ABED54C310AAF573
Authority key identifier: 9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/fFLHVgwBGFSnu5YT6XRhOVNsXjs.roa
Signing time: Mon 16 Dec 2024 18:07:22 +0000
ROA not before: Mon 16 Dec 2024 18:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30788
IP address blocks: 2a07:5340::/29 maxlen: 29
2a12:c0::/29 maxlen: 29
2a12:23c0::/29 maxlen: 29
2a12:2940::/29 maxlen: 29
2a12:3540::/29 maxlen: 29
2a12:4340::/29 maxlen: 29
2a12:b580::/29 maxlen: 29
2a12:e580::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d0:a7:41:86:ff:5d:69:46:ab:ed:54:c3:10:aa:f5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a26657e6b25449425b748645e7420c76ac2b3a4
Validity
Not Before: Dec 16 18:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c52c7560c011854a7bb9613e9746139536c5e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:19:9f:93:49:9e:4a:26:dc:a2:7e:cb:4f:
c9:32:c2:5b:e0:ec:f0:c1:6a:cb:96:8f:f9:3c:f7:
75:87:80:fc:69:c4:d8:dd:a9:36:e6:2f:90:2c:7f:
5e:8a:d0:b0:02:c3:74:5f:3e:dd:12:b1:94:a3:3e:
06:9f:e2:1d:6a:ef:52:1d:3e:60:fb:31:8e:f0:6a:
a6:25:64:d8:4b:1c:2b:0b:fb:c4:af:c5:a2:3b:1b:
f8:db:13:eb:8e:08:70:cc:3f:6a:b4:b4:8e:21:b7:
59:87:64:2a:81:48:64:23:18:2c:5b:30:d5:23:d6:
31:16:6a:56:df:dc:fb:e4:64:30:99:23:91:66:53:
5e:1f:34:b0:94:8e:ea:be:5f:48:b5:8c:f3:d6:53:
da:7b:03:e0:41:7c:33:78:e1:6f:aa:01:5c:5e:0a:
6d:22:a2:d9:1a:38:f4:fd:f7:e0:b4:80:74:1d:f0:
e9:85:22:43:6d:ce:51:a4:52:45:7b:09:64:22:68:
67:a9:5d:05:6e:cd:39:b0:c5:c5:ad:51:80:80:c7:
e6:da:05:4c:c2:96:3f:a2:6d:97:f6:11:d5:3c:4c:
4b:bb:e1:74:e0:07:47:0a:ca:84:26:99:d7:4a:06:
0b:fb:b4:bd:5f:5f:84:5c:20:9f:62:26:e7:e8:7e:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:52:C7:56:0C:01:18:54:A7:BB:96:13:E9:74:61:39:53:6C:5E:3B
X509v3 Authority Key Identifier:
keyid:9A:26:65:7E:6B:25:44:94:25:B7:48:64:5E:74:20:C7:6A:C2:B3:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miZlfmslRJQlt0hkXnQgx2rCs6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/fFLHVgwBGFSnu5YT6XRhOVNsXjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8eddf2-7d7c-44a3-b0fd-110b768bf4c0/1/miZlfmslRJQlt0hkXnQgx2rCs6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5340::/29
2a12:c0::/29
2a12:23c0::/29
2a12:2940::/29
2a12:3540::/29
2a12:4340::/29
2a12:b580::/29
2a12:e580::/29
Signature Algorithm: sha256WithRSAEncryption
96:df:73:8e:58:0e:71:8e:8d:5c:ec:08:8d:b6:85:fe:ef:40:
e2:9c:ed:20:8d:3e:73:25:2f:a6:ef:f3:f0:0e:09:7a:19:0f:
5e:50:2d:6b:f5:e2:af:82:01:95:b8:e8:0c:69:5e:5f:2d:02:
6a:2e:cc:c3:de:3c:7a:ee:7a:82:8e:cb:63:94:90:2b:b9:4c:
53:93:e5:69:df:33:0a:2a:da:a0:fc:19:30:9a:3a:e9:06:68:
c3:da:57:b7:7d:5a:ba:b4:c5:6d:b5:13:86:6c:86:e7:e7:76:
a4:20:83:87:cd:bc:7f:c8:53:b4:14:2f:b2:c6:db:c3:04:b6:
36:45:52:d4:f1:72:f4:d1:57:65:b6:8e:0b:e8:9c:09:45:e7:
48:00:75:b7:3c:c2:e3:25:9b:cf:d1:80:8a:a4:08:59:7a:93:
48:06:32:29:0f:f3:5a:11:2a:f3:02:a4:e7:33:96:18:dc:a1:
7b:e5:bb:ef:56:f8:dd:6a:2d:1d:e2:14:b9:8c:38:09:ee:dd:
30:c7:28:24:5d:b0:2b:72:db:db:a0:5b:75:b7:cd:f2:77:e1:
b0:d6:f3:4f:d4:23:19:c4:dc:bd:5f:00:54:1d:e3:4c:71:27:
c0:39:9f:b1:09:6d:de:05:63:3e:38:00:9e:c9:45:a6:eb:1c:
c1:16:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:57 2025 by rpki-client