Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/7_ha94Tozjz24Kc30zGVo3Mpcn4.roa
File: 7_ha94Tozjz24Kc30zGVo3Mpcn4.roa (raw, json)
Hash identifier: yewKiwOUdsonQH1ih8KMmtpahy4paWiyAQbNz+gMCiE=
Subject key identifier: EF:F8:5A:F7:84:E8:CE:3C:F6:E0:A7:37:D3:31:95:A3:73:29:72:7E
Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial: 0193CA2156F7DF1F86406C4B0845D4311C96
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/7_ha94Tozjz24Kc30zGVo3Mpcn4.roa
Signing time: Sun 15 Dec 2024 11:43:22 +0000
ROA not before: Sun 15 Dec 2024 11:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58036
IP address blocks: 2a0e:e6c7:f000::/36 maxlen: 36
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ca:21:56:f7:df:1f:86:40:6c:4b:08:45:d4:31:1c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Validity
Not Before: Dec 15 11:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eff85af784e8ce3cf6e0a737d33195a37329727e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:3a:0e:e8:72:4f:91:55:d8:e2:1f:ea:e7:
eb:87:71:92:a7:65:ca:b7:4f:94:2f:03:60:ff:11:
e4:25:4c:62:3e:1e:33:c3:f7:5a:e2:b3:ac:a5:b7:
e0:04:36:24:18:18:fc:02:09:c1:12:7a:42:81:a6:
5f:f3:fb:f5:f3:50:71:36:a1:ff:0f:8e:0f:f6:27:
b6:92:d0:7c:4f:50:84:4c:9e:76:d3:14:dd:31:37:
cc:27:0d:b1:e0:a6:b0:47:1d:de:38:0c:ba:0e:6b:
90:50:f5:ca:89:d3:fa:f1:7c:a3:cf:8c:fe:c6:26:
a0:4d:5e:68:3a:19:c1:b6:11:ac:70:f5:c3:46:cf:
5a:7f:e3:ad:50:69:17:02:d0:a3:3c:0a:93:8f:3e:
44:aa:71:4a:82:d8:60:48:fb:87:e0:51:9a:39:57:
16:37:16:c4:c1:c1:65:21:01:70:7c:99:16:68:39:
d5:6c:8c:54:a0:b4:ad:69:92:57:29:49:26:2f:49:
43:8e:e3:76:2a:d1:63:90:4b:7b:67:89:c0:b0:5b:
65:db:b7:d8:cf:b7:25:5f:de:de:59:c0:ba:d2:ad:
a8:73:e6:d0:62:c6:f3:27:7b:8d:06:47:43:dd:54:
23:e4:61:0d:18:a0:da:db:2f:76:8f:a6:87:2b:85:
30:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F8:5A:F7:84:E8:CE:3C:F6:E0:A7:37:D3:31:95:A3:73:29:72:7E
X509v3 Authority Key Identifier:
keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/7_ha94Tozjz24Kc30zGVo3Mpcn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e6c7:f000::/36
Signature Algorithm: sha256WithRSAEncryption
9e:b8:1c:d8:2c:63:25:51:d9:41:2f:63:d3:57:b4:33:58:57:
a5:6e:88:c9:87:9e:aa:df:34:c7:f8:3c:24:54:26:fc:8b:7c:
b4:2a:a0:f8:a4:a8:f1:43:12:c7:ae:ba:78:e8:3f:c9:f8:ae:
05:51:f2:fc:57:58:9a:79:fd:b3:dc:f3:3a:f4:2b:df:01:26:
85:4c:6f:12:6f:13:93:cc:be:28:ea:12:c9:de:5f:21:83:a8:
07:3e:cd:d2:74:9a:13:fc:66:3d:26:22:20:ea:fa:e8:62:a4:
02:85:25:e2:86:1b:4e:e0:d4:e2:85:a8:45:20:ac:00:1c:ea:
8e:76:6d:a2:4f:14:0e:7f:1c:5f:ce:b3:7b:e7:3e:b7:01:88:
e9:ab:48:3a:6f:ba:af:9f:a8:a9:8e:e8:5c:da:e7:a8:4a:9f:
17:ab:ef:41:90:92:33:94:86:d8:21:02:f5:3e:28:c4:73:81:
44:95:02:b5:c2:66:7a:b3:b7:1e:bd:a0:b5:3d:67:77:77:74:
09:b0:3c:c6:5b:95:7c:11:06:64:21:ec:a0:e1:c2:67:0b:e9:
9b:29:a7:d9:91:3d:a3:d0:37:94:04:3c:d0:ad:bd:9a:c4:99:
79:af:ea:43:db:c8:df:c1:a7:c9:32:d3:c8:9d:c3:b7:d5:e3:
67:73:8b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 00:06:19 2025 by rpki-client