Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/fbAWHPHMQ9iD8Yfs9Mtoyh4YtSY.roa
File: fbAWHPHMQ9iD8Yfs9Mtoyh4YtSY.roa (raw, json)
Hash identifier: gDQ5Shi1dVZWCkJJxG/dGOkg2UKmlaH4oFD71BlitXw=
Subject key identifier: 7D:B0:16:1C:F1:CC:43:D8:83:F1:87:EC:F4:CB:68:CA:1E:18:B5:26
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 0194C70A44BC053D7523C0EE556E405A437A
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/fbAWHPHMQ9iD8Yfs9Mtoyh4YtSY.roa
Signing time: Sun 02 Feb 2025 14:22:06 +0000
ROA not before: Sun 02 Feb 2025 14:22:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215420
IP address blocks: 2a0f:e3c0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 15 Feb 2025 21:45:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c7:0a:44:bc:05:3d:75:23:c0:ee:55:6e:40:5a:43:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Feb 2 14:22:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7db0161cf1cc43d883f187ecf4cb68ca1e18b526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4f:6b:da:84:fa:76:f0:9e:40:89:97:3a:ea:
1f:29:39:de:0e:ac:c9:7f:a6:18:0d:78:69:6b:84:
a7:bc:da:c1:6b:f0:da:3c:66:c0:0c:98:55:b0:1f:
4b:6c:64:50:ca:04:73:d1:f6:28:55:8c:b7:7f:1e:
b4:d2:64:c3:ce:f6:d0:00:7f:db:dc:70:95:a9:ad:
3d:3a:85:41:c4:91:37:16:58:47:6d:91:bd:c5:a4:
6e:32:a6:67:32:6e:13:c6:fb:35:d0:16:87:07:7b:
a0:ab:82:07:18:5a:82:22:34:c2:7a:4f:71:83:5d:
33:1a:ee:ab:c4:3d:cc:55:17:c1:fd:62:80:ca:15:
f9:b3:6b:69:f3:e3:31:11:e2:79:d5:a8:bf:65:03:
df:b9:f0:be:a5:a3:b1:bd:4b:33:9f:0f:62:6e:1b:
e4:98:f2:e1:a3:70:45:dc:a5:03:4c:eb:fe:6d:b5:
22:c5:50:09:16:28:69:b9:ae:94:26:ba:1f:c4:54:
da:2b:d9:8d:c8:9c:65:ce:de:b3:c3:dc:6e:0a:60:
f4:d0:09:46:3e:fb:27:a4:f5:fb:ce:3e:f3:56:df:
ad:b7:e0:84:ae:16:e4:1e:27:aa:e4:96:d4:0d:70:
7f:e0:22:94:dc:3c:8f:3e:fa:7e:8f:aa:8a:76:18:
f6:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:16:1C:F1:CC:43:D8:83:F1:87:EC:F4:CB:68:CA:1E:18:B5:26
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/fbAWHPHMQ9iD8Yfs9Mtoyh4YtSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e3c0::/29
2a13:d1c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:9c:db:ed:bb:46:ed:f9:85:ad:94:ac:72:2b:05:20:e6:4c:
81:dd:3e:8f:ca:db:40:00:5b:9d:86:b1:57:63:fd:07:9b:2a:
68:37:e1:39:88:46:c6:3c:ac:53:d1:93:2e:4d:a6:4b:5f:c7:
ba:13:72:b5:8d:89:fd:a2:85:e6:41:2e:0e:00:59:86:d1:a1:
35:3f:4d:ce:78:8a:2a:4b:f5:3d:1a:07:a7:0e:ee:69:1d:86:
43:90:1f:fd:bf:d2:db:41:6c:e0:8a:42:30:f2:99:80:1b:37:
c6:f8:f3:9d:f7:95:f0:e0:34:93:d2:d2:6f:f0:f1:47:54:b9:
d6:01:07:01:ea:e6:f9:06:4e:ed:6d:a7:8a:59:c0:5e:a2:07:
3e:09:18:fd:7d:05:ab:67:68:cb:ca:99:9f:b2:7d:2c:19:05:
62:95:76:4c:50:b1:75:e7:f1:11:68:62:55:af:80:a5:87:0f:
37:03:03:d8:37:de:a8:7d:d7:65:76:3f:9a:24:04:bf:10:b0:
5b:e3:ae:eb:b1:ee:0f:4f:1e:f7:c4:f7:47:c6:28:2b:c5:18:
28:98:fd:7e:c4:36:c8:12:2f:4f:65:5a:40:05:c1:b4:18:7d:
d9:9b:82:44:16:d3:05:fa:2d:e1:f4:ac:f0:2b:4f:fa:0d:d4:
e7:97:7c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:02:13 2025 by rpki-client