Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/pVEPWgltS22YYC21seZwb1UkDy0.roa
File: pVEPWgltS22YYC21seZwb1UkDy0.roa (raw, json)
Hash identifier: EOJaXwL4X0zhMz9GAkwUT4Z/huLmYouRfWnYXHiUJvE=
Subject key identifier: A5:51:0F:5A:09:6D:4B:6D:98:60:2D:B5:B1:E6:70:6F:55:24:0F:2D
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 0194172180B7FCB88C23665B55C6845FF0CC
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/pVEPWgltS22YYC21seZwb1UkDy0.roa
Signing time: Mon 30 Dec 2024 10:34:19 +0000
ROA not before: Mon 30 Dec 2024 10:34:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210023
IP address blocks: 2a0f:5707:29::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:17:21:80:b7:fc:b8:8c:23:66:5b:55:c6:84:5f:f0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Dec 30 10:34:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5510f5a096d4b6d98602db5b1e6706f55240f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:02:66:91:72:ea:ce:38:6f:be:a0:27:5a:e8:
7f:e1:f6:13:a3:93:4f:34:23:6c:43:16:a1:28:93:
d0:a6:dd:2a:99:90:b4:3c:e7:13:3d:8f:48:7b:12:
d6:ec:27:d7:b0:83:b6:2c:2d:5a:ff:ef:c8:4e:22:
e0:6e:0f:b7:0e:45:dd:9d:52:65:3e:df:4b:a7:e7:
05:76:37:7a:18:94:d8:72:78:f0:41:49:25:01:e9:
76:5f:c2:a6:76:3a:60:8e:7e:03:da:c8:c6:bb:3b:
2c:a2:bf:48:26:45:85:f1:ed:ab:f0:0a:16:6b:5e:
8d:67:bf:2c:b1:1f:8f:d1:46:bb:ca:18:35:2f:1d:
70:92:4e:4a:14:4a:4c:3c:b3:28:c7:77:fe:98:d4:
28:c2:8b:2d:fc:34:d8:2b:0d:79:9a:2f:94:1e:64:
1f:da:ac:a7:3b:14:a1:b6:9b:94:45:cc:94:23:27:
ec:94:36:c0:5d:13:a6:72:9c:48:4c:7c:9d:60:3f:
af:41:91:1a:5f:0b:42:68:e3:07:d3:dc:20:89:a6:
5d:e9:02:62:e6:7a:c5:d3:f0:28:8d:d8:85:a3:05:
ea:fc:73:6d:1e:12:19:fa:74:fb:f1:74:32:ca:4f:
e9:c5:5d:a6:2e:b2:5a:3e:c1:28:33:90:1d:24:c8:
90:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:51:0F:5A:09:6D:4B:6D:98:60:2D:B5:B1:E6:70:6F:55:24:0F:2D
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/pVEPWgltS22YYC21seZwb1UkDy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:29::/48
Signature Algorithm: sha256WithRSAEncryption
23:a7:e5:24:97:9f:a3:5c:32:9a:22:79:e0:7f:b5:6c:6a:5c:
81:50:46:6e:d0:c4:ca:10:f5:ee:93:4c:26:5f:18:65:77:18:
80:0a:75:c5:ce:5a:d2:27:70:76:2e:a1:2b:c9:37:f0:26:4c:
fa:45:d2:f8:18:ab:5c:e7:e1:53:88:5e:0f:0b:60:eb:ab:f7:
43:88:1b:01:59:32:76:1d:05:9a:67:44:94:9e:91:f3:ca:8f:
2a:28:55:08:63:76:a3:b2:a2:cc:c8:53:6d:e5:79:bc:80:a7:
6d:0f:97:95:34:0a:5f:23:66:23:8e:76:c2:14:6e:72:b7:58:
af:59:03:71:12:34:f3:5f:46:61:a4:e7:7f:9b:21:6e:3d:1e:
37:1f:05:cc:0e:f1:57:3e:83:0a:16:55:3d:3b:db:be:79:5a:
e9:53:48:8c:42:7f:e3:71:73:11:f5:86:fb:bd:71:71:29:82:
7b:41:68:25:6a:10:18:b8:23:00:22:7a:36:6f:f2:18:f3:d4:
fa:d3:1e:7f:22:b0:5a:5b:87:29:9e:0f:f2:81:18:c9:13:f0:
4e:8c:63:1e:03:49:7c:e9:8c:3d:1a:91:29:8c:70:c5:69:84:
ed:76:ed:c8:42:62:a4:90:e2:ae:db:cb:8a:48:2f:90:86:03:
19:eb:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:04 2025 by rpki-client