Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0q1rz2juVLe_gvR985swwJZsGRs.roa
File: 0q1rz2juVLe_gvR985swwJZsGRs.roa (raw, json)
Hash identifier: E34Ze/0Lcp72gNN/WcG5GEVFqPROLtDKJdC1DOJ2+Ek=
Subject key identifier: D2:AD:6B:CF:68:EE:54:B7:BF:82:F4:7D:F3:9B:30:C0:96:6C:19:1B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194D57B2BE96DE70E042A815CB06D3FFC00
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0q1rz2juVLe_gvR985swwJZsGRs.roa
Signing time: Wed 05 Feb 2025 09:40:06 +0000
ROA not before: Wed 05 Feb 2025 09:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e6c6:5532::/48 maxlen: 48
2a10:67c2:1::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 24 Feb 2025 09:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d5:7b:2b:e9:6d:e7:0e:04:2a:81:5c:b0:6d:3f:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 5 09:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2ad6bcf68ee54b7bf82f47df39b30c0966c191b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d3:94:d6:a8:01:47:5f:e6:19:1a:64:42:3c:
09:c0:5c:1f:67:00:d9:44:38:11:e6:a1:75:91:ce:
95:6a:33:38:02:8c:c9:08:b4:b2:b5:2c:8c:d3:74:
9e:65:11:34:9d:b3:f6:6c:84:27:47:5e:95:83:51:
53:ae:b5:08:13:dc:a5:2e:c5:21:70:4c:d1:f7:3a:
e0:66:47:f6:9e:30:5c:bf:97:36:d5:3e:86:09:1a:
fd:50:5d:ec:82:69:99:0e:17:d6:ac:6d:1b:d6:1b:
95:e4:b9:e4:53:70:67:80:bc:f3:89:d7:37:09:9e:
70:49:af:8b:6f:79:96:7a:cb:0b:a1:7f:55:cd:41:
61:80:8d:93:fe:96:18:8a:a1:d7:a1:c8:b8:07:d7:
cc:e3:3a:b3:a6:2c:80:f8:90:45:66:8d:5c:49:f3:
7b:01:11:6c:f3:6d:79:b3:51:11:13:08:34:42:64:
e7:39:6e:fe:55:c4:1f:df:12:a8:d3:11:61:ce:4e:
90:1a:59:dc:1b:74:79:03:09:a4:c4:6a:bb:d4:7a:
33:cb:f3:0f:80:c8:2a:f7:1d:35:ab:01:17:ad:12:
cf:57:bf:6f:a2:1c:74:03:b1:d4:d7:cd:3c:0d:7d:
7c:7d:af:5b:cb:a2:22:29:27:ad:15:1e:7a:91:9a:
30:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AD:6B:CF:68:EE:54:B7:BF:82:F4:7D:F3:9B:30:C0:96:6C:19:1B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0q1rz2juVLe_gvR985swwJZsGRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e80:100::/48
2a0f:1e80:1986::/48
2a0f:1e84:20::/48
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:100::/48
2a0f:bc00:a1c4::/48
2a0f:e6c6:5532::/48
2a10:67c2:1::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
c8:65:ae:a8:e4:79:a0:8c:77:95:d6:2e:5f:a7:af:43:72:d7:
94:35:4d:6e:03:2e:89:c7:f7:d5:e7:d9:3a:6f:94:7b:f6:fb:
4f:ca:94:b2:be:10:b8:15:64:0f:e3:7a:a4:dc:13:04:9e:e8:
b6:e9:bd:5c:d5:00:33:b5:f3:9d:33:6e:c6:51:98:da:cd:8b:
86:e1:82:ef:b2:0a:94:59:35:56:b0:d5:c2:a1:65:f1:49:03:
b6:95:c3:44:12:4c:74:93:56:39:d2:d3:f8:a5:36:23:b0:be:
87:a2:31:b1:ea:fd:5e:72:e1:ac:49:b3:ea:93:6b:9d:44:8a:
2a:bc:c2:74:21:c1:02:bb:cc:76:cc:cd:c1:db:ea:94:0b:60:
3f:00:00:84:1c:66:76:d2:f1:6b:44:2c:7f:f4:eb:f6:02:ae:
fc:44:9f:57:eb:5e:c8:e7:54:6f:0b:75:fc:4e:d5:7f:cd:37:
b2:04:ac:75:66:bb:9c:f5:ae:ba:ed:fc:1c:e5:f0:4e:ac:ca:
8c:dc:ae:1a:03:6b:4b:f0:af:91:e8:18:cd:a8:c1:3d:6e:28:
9a:96:8a:99:af:79:9c:8c:26:0d:19:03:3e:c3:41:99:5e:93:
c0:bd:31:96:a1:b2:d5:33:b4:f7:19:aa:96:7c:84:c9:9c:35:
f4:3e:bf:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:03:36 2025 by rpki-client