Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wvFD0vh094j6wqseRF5_fyrTpCA.roa
File: wvFD0vh094j6wqseRF5_fyrTpCA.roa (raw, json)
Hash identifier: aI45bLL5A0IiF6vpNJ+K54w5eGO+cN7lIsSshkvObeA=
Subject key identifier: C2:F1:43:D2:F8:74:F7:88:FA:C2:AB:1E:44:5E:7F:7F:2A:D3:A4:20
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 01940D9C5E81B5CB647A0F6687A43604265F
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wvFD0vh094j6wqseRF5_fyrTpCA.roa
Signing time: Sat 28 Dec 2024 14:12:19 +0000
ROA not before: Sat 28 Dec 2024 14:12:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 2001:3380::/29 maxlen: 29
2a0b:3e00::/29 maxlen: 29
2a13:b840::/29 maxlen: 29
2a13:ddc0::/29 maxlen: 29
2a14:35c0::/29 maxlen: 29
2a14:5840::/29 maxlen: 29
2a14:6ac0::/29 maxlen: 29
2a14:72c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 29 Dec 2024 08:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:0d:9c:5e:81:b5:cb:64:7a:0f:66:87:a4:36:04:26:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Dec 28 14:12:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2f143d2f874f788fac2ab1e445e7f7f2ad3a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f0:df:2a:56:0a:c1:6e:f0:2c:f3:24:eb:6f:
25:84:db:99:d9:27:f2:74:29:e9:b0:47:4e:c7:8b:
45:1a:a8:91:99:c3:69:6c:25:91:ca:79:ab:17:bb:
67:17:df:3a:4d:f9:af:26:3e:29:73:b7:c0:a6:c1:
6e:ff:54:6d:81:c5:78:32:94:72:12:17:f2:e1:33:
86:61:c6:5b:11:10:f9:01:b5:be:5b:ac:bc:6d:1a:
d9:51:44:6a:fa:ff:67:8f:f0:48:5d:3a:d4:35:51:
a0:94:b6:d7:e2:49:6b:fe:a7:3a:75:ea:bc:7e:ce:
39:74:aa:46:f3:2f:21:69:dc:e9:f4:b2:1b:4f:de:
10:4f:25:dc:8e:78:af:c7:2a:2e:21:b1:ed:ce:90:
de:67:d4:ff:b2:57:f2:a9:e2:25:9d:58:55:3d:57:
4e:8a:be:e0:d6:50:4d:9e:84:b1:f2:a8:ae:56:b0:
cd:3c:e7:ad:f4:c0:ac:57:ce:14:c4:0c:32:67:2a:
59:f2:6b:f9:01:64:03:09:db:d1:f5:11:65:05:fd:
ef:78:c8:f3:ec:63:f2:43:7b:a6:4e:62:33:5b:9e:
6c:b0:13:d1:a4:7a:4b:e7:81:7d:0a:1a:e1:20:27:
b1:48:91:00:fc:01:91:32:06:73:7d:b7:0e:9d:b3:
f3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F1:43:D2:F8:74:F7:88:FA:C2:AB:1E:44:5E:7F:7F:2A:D3:A4:20
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/wvFD0vh094j6wqseRF5_fyrTpCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:3380::/29
2a0b:3e00::/29
2a13:b840::/29
2a13:ddc0::/29
2a14:35c0::/29
2a14:5840::/29
2a14:6ac0::/29
2a14:72c0::/29
Signature Algorithm: sha256WithRSAEncryption
32:96:16:75:14:6c:16:3e:bf:fc:a2:5a:78:a1:8c:b4:f5:26:
0b:73:4e:04:b7:78:c2:3f:0c:ea:9f:9b:40:ef:52:2f:63:ab:
85:13:73:d5:d6:19:b2:d4:ec:e7:91:61:8c:a5:e8:56:0d:c9:
0c:6a:27:59:b6:8a:0e:0b:43:22:19:e1:f8:4b:85:41:62:1c:
bb:ae:b3:b2:93:c3:6f:39:e8:64:5b:db:23:09:ff:dc:3a:49:
dc:bd:48:d6:b4:86:cc:59:10:78:c3:97:ca:b2:d5:34:9f:13:
8e:b2:3f:db:5f:16:ab:3b:24:f4:31:57:65:47:92:45:30:85:
7b:3d:5b:fe:08:2a:ff:35:cb:53:d9:69:85:eb:41:c5:07:11:
fd:84:81:40:fd:ca:6f:3e:a4:48:5a:cc:8e:77:17:43:00:89:
47:0d:38:4d:8b:96:11:cb:f9:39:af:8c:75:81:f9:1e:8e:8f:
2f:89:a5:80:1d:f0:7c:14:e9:57:c4:47:ec:53:72:34:be:dc:
b6:2d:4b:97:40:59:6a:27:14:67:35:94:d1:5e:33:2d:1c:93:
4a:36:3d:f9:49:78:3e:76:0b:63:91:cc:e4:32:6b:17:99:51:
83:e0:c7:7b:d2:61:f4:c2:c8:db:dc:0d:1b:be:da:b3:5d:c7:
73:51:3e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:19:32 2025 by rpki-client