Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/7CGtSUp8IG5FFCvodjgJf9hlK_I.roa
File: 7CGtSUp8IG5FFCvodjgJf9hlK_I.roa (raw, json)
Hash identifier: BmM40Cz994qbfwNEUVrFdBscMCegcFupMqmxNNlcgPY=
Subject key identifier: EC:21:AD:49:4A:7C:20:6E:45:14:2B:E8:76:38:09:7F:D8:65:2B:F2
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 018ED75D6943E87BECFE03BDD3AD573218A8
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/7CGtSUp8IG5FFCvodjgJf9hlK_I.roa
Signing time: Sat 13 Apr 2024 12:10:06 +0000
ROA not before: Sat 13 Apr 2024 12:10:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 2a07:5900::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 14 Apr 2024 15:56:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d7:5d:69:43:e8:7b:ec:fe:03:bd:d3:ad:57:32:18:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Apr 13 12:10:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec21ad494a7c206e45142be87638097fd8652bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a0:99:4a:83:30:51:98:48:b6:29:a9:12:fc:
b3:f4:d3:7e:ee:2b:39:ba:b6:0b:13:b8:c9:7a:ba:
4c:68:56:40:f5:03:3e:03:59:f2:2b:63:2a:ed:34:
7a:b4:e9:a1:32:28:66:3c:93:48:db:92:5c:f9:e3:
4d:be:6d:5e:ef:48:0d:07:d4:3e:0f:de:05:e8:51:
30:5d:ce:65:f5:62:a0:25:b1:70:1c:c2:51:80:0c:
7f:a8:ac:d7:05:3f:e3:18:10:7b:9c:7a:a5:96:71:
40:a7:1d:a4:ff:1e:c2:ec:97:47:82:cc:f7:24:eb:
d6:7e:b4:19:13:07:a8:ff:dc:c9:4a:d9:13:92:04:
de:ed:98:9e:e5:0a:bc:c1:fc:d0:e3:e9:55:98:bf:
87:23:25:60:c3:2c:46:83:05:5a:3f:12:91:1f:e7:
e4:1f:08:d8:8e:66:1b:14:61:ef:ad:df:28:e2:c2:
9b:22:83:c7:23:c7:40:27:9e:4e:05:8e:08:bf:f9:
9c:32:d6:3c:2f:cf:5a:13:bb:cf:47:d4:8f:7e:83:
7b:f9:b3:20:dc:69:0c:52:04:c8:8a:94:17:9d:41:
27:62:99:6b:b0:61:b4:d2:df:ee:70:c3:4f:77:d4:
8a:85:02:64:2a:54:30:43:9e:90:9c:22:3b:2b:f1:
22:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:21:AD:49:4A:7C:20:6E:45:14:2B:E8:76:38:09:7F:D8:65:2B:F2
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/7CGtSUp8IG5FFCvodjgJf9hlK_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
89:9d:a8:22:ae:39:b4:f1:ba:36:a1:9f:e3:96:c1:4b:a4:79:
99:ff:df:7b:e6:09:5a:b0:29:6d:37:03:ac:6c:ad:5e:41:bf:
46:58:63:b0:33:c8:33:f4:c9:aa:ab:9d:ab:d0:38:a5:da:60:
12:96:52:1e:78:db:e2:e3:91:4a:3c:5f:bd:b6:fc:40:83:69:
c3:5a:51:e4:99:c4:bb:72:0c:c9:a0:db:c0:3b:a4:df:05:70:
3b:96:67:77:b8:10:7a:8e:ee:0c:03:70:e0:8a:6f:00:d0:68:
52:8f:51:22:33:e9:b5:27:c4:08:ab:86:41:09:be:d8:8a:6f:
a3:40:71:91:b7:4a:ff:7e:10:00:56:27:6d:62:f5:7d:67:ee:
4e:ba:c5:c0:e5:f7:3f:2c:67:71:f6:28:6b:0b:cd:16:74:bf:
7f:34:2c:e9:a6:55:78:93:c5:b6:67:ba:f7:d3:1f:a9:6b:1d:
74:29:85:84:75:d3:46:1c:85:35:1c:df:31:67:5b:21:7b:39:
e8:14:d1:2d:90:30:e9:9c:f5:74:c3:2f:94:60:4b:0b:1c:64:
e6:51:db:12:05:c0:6e:d7:8b:01:4e:21:9a:62:96:7e:d0:9e:
d6:d4:bc:37:ba:6b:3c:6b:83:a1:a6:51:99:9d:25:9e:70:59:
a7:a3:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:10:18 2025 by rpki-client