Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0yOe7yZhWOmT4spv7DlDFDSUy64.roa
File: 0yOe7yZhWOmT4spv7DlDFDSUy64.roa (raw, json)
Hash identifier: QLUbHt+O4yhRGhSsNb+VQcA1X2SR+c19zpdpHDyKT/k=
Subject key identifier: D3:23:9E:EF:26:61:58:E9:93:E2:CA:6F:EC:39:43:14:34:94:CB:AE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191AF472C40A0A1566935A033424959D0C6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0yOe7yZhWOmT4spv7DlDFDSUy64.roa
Signing time: Sun 01 Sep 2024 20:29:22 +0000
ROA not before: Sun 01 Sep 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 2a0f:e841::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 04 Sep 2024 14:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:af:47:2c:40:a0:a1:56:69:35:a0:33:42:49:59:d0:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3239eef266158e993e2ca6fec3943143494cbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:92:6f:80:e5:09:05:ea:0a:86:ce:87:b0:0f:
da:e9:04:4f:76:d0:ce:b8:0a:02:f8:35:51:98:d9:
da:31:18:06:2d:44:5a:fd:7b:bf:d9:5f:1b:2a:a6:
04:1d:38:18:20:22:15:98:66:e1:1c:eb:e8:34:dd:
fb:97:6d:da:de:fe:f9:d8:68:86:42:9d:00:d1:bb:
c4:4c:9e:42:d8:60:f2:db:86:e1:be:ca:d9:00:00:
06:88:51:74:d9:18:23:c7:b8:60:62:09:60:01:e7:
8a:37:83:c3:18:28:d6:59:b6:89:84:b9:8c:e2:80:
73:03:66:b5:13:d6:dc:fd:eb:da:df:06:ac:80:8f:
4a:74:b6:22:7b:33:e2:85:f5:a6:4a:8b:14:11:21:
46:c8:1a:d7:61:c2:b8:2c:a0:ce:32:ba:21:19:ae:
b6:87:76:3f:c2:d7:48:67:e6:fd:3f:71:1c:34:b7:
91:d1:97:07:ef:ba:f9:8d:24:90:ef:e3:e6:c8:f1:
3e:58:24:40:ae:1f:16:fc:8d:50:07:43:9b:c9:80:
6d:ba:34:86:77:71:94:59:cd:00:a6:b0:0f:65:e1:
34:cd:b8:ca:88:90:44:73:86:06:3f:b4:1e:d5:3d:
d0:e9:a0:ce:80:6d:30:c0:56:eb:cb:c9:b5:91:57:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:23:9E:EF:26:61:58:E9:93:E2:CA:6F:EC:39:43:14:34:94:CB:AE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/0yOe7yZhWOmT4spv7DlDFDSUy64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e841::/32
Signature Algorithm: sha256WithRSAEncryption
86:a0:6e:a8:fb:51:25:6c:5c:8c:1e:22:8a:d3:76:b5:e3:de:
39:06:d3:6c:42:f7:74:2d:73:d5:05:37:d9:10:5d:e5:32:0e:
10:73:8d:43:b5:1e:60:14:32:16:8f:13:cb:47:2e:2a:ee:69:
df:8f:7b:9f:57:96:44:fa:f3:a0:58:a1:8e:ce:6f:98:88:c5:
64:15:a6:da:6b:23:da:84:87:8b:a6:a5:09:82:f4:1e:55:74:
f9:07:bc:44:b5:92:cf:20:33:02:98:31:a6:54:41:0d:4d:55:
d5:71:d5:ca:63:81:03:ef:4f:6d:98:60:7a:41:b8:5b:49:2d:
73:43:c7:ec:d0:ce:60:cf:72:af:e9:c9:b0:c0:dc:9e:c9:38:
61:45:10:94:34:38:d4:73:fa:26:e2:93:e8:29:80:9f:fa:dd:
04:ea:0d:3d:c7:91:f6:6c:96:e8:25:8b:be:88:90:3e:4b:37:
5b:a0:fc:d2:b4:4d:b7:c6:46:46:1f:66:4f:8b:3f:87:e9:50:
b3:1f:da:b2:9a:70:46:a1:a4:e4:2b:bf:96:d2:f5:3b:73:f8:
67:0b:58:6f:a5:d6:ff:72:ee:59:6f:30:f2:5d:3e:3a:49:f8:
a5:e4:b0:a8:d1:82:d5:91:fb:e9:97:1f:ea:2b:7c:26:aa:14:
33:97:4c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:29 2025 by rpki-client