Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-78y2ACjEFazEZPHFyHe92JxnZc.roa
File: 1-78y2ACjEFazEZPHFyHe92JxnZc.roa (raw, json)
Hash identifier: QXt9fF+7PnbFBDZPi8bWdqeuZRGCkLQ4eOQY0tlA8Ok=
Subject key identifier: FB:BF:32:D8:00:A3:10:56:B3:11:93:C7:17:21:DE:F7:62:71:9D:97
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018EA7F96CE987F1450AEBF944A92A62B4C2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-78y2ACjEFazEZPHFyHe92JxnZc.roa
Signing time: Thu 04 Apr 2024 07:18:45 +0000
ROA not before: Thu 04 Apr 2024 07:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 23 May 2024 13:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:f9:6c:e9:87:f1:45:0a:eb:f9:44:a9:2a:62:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 4 07:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbbf32d800a31056b31193c71721def762719d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:94:7a:7b:64:a3:a1:d4:8f:12:33:e6:19:b8:
19:dd:97:45:65:07:d4:51:2b:5c:68:fa:d9:c7:90:
85:d4:1e:09:ed:17:d4:c9:ed:6c:28:1e:24:28:84:
be:07:45:31:20:96:d7:ab:ab:f5:39:fc:1b:36:aa:
59:b7:7d:30:76:39:b9:29:f1:ed:58:81:26:e9:89:
c5:b0:32:fb:49:3d:b4:8d:69:3f:47:bb:fa:48:ee:
0e:a9:8b:dc:97:5b:17:69:e4:f0:97:e5:26:62:be:
03:e9:76:c8:a0:c3:06:c0:2a:ec:df:98:f2:51:4d:
07:91:eb:75:3d:79:36:ff:5a:ed:9e:1f:45:5f:07:
49:00:da:06:1a:89:1d:4e:2d:c8:6d:94:90:e6:0b:
51:78:47:8c:83:83:41:80:64:c0:c7:0b:bc:8a:3a:
72:a0:5c:fc:6b:ad:a0:d1:39:0a:4e:70:7f:6b:14:
98:63:3b:eb:fb:61:23:d3:10:72:a2:63:d4:79:a3:
44:ad:ad:6b:2d:7f:5d:db:df:2b:88:20:ba:fa:34:
0c:dd:4d:1f:49:b2:d2:de:5f:f5:84:5d:53:8f:eb:
96:be:79:01:67:58:8e:82:c5:a1:3a:9f:1b:5d:18:
d6:4d:f3:56:94:58:43:5a:8f:e7:18:2c:d5:e6:67:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:BF:32:D8:00:A3:10:56:B3:11:93:C7:17:21:DE:F7:62:71:9D:97
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-78y2ACjEFazEZPHFyHe92JxnZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
2a11:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
39:32:7b:c4:5d:ad:48:9f:38:1a:d3:78:24:dc:b9:bf:71:f6:
7d:ec:11:0e:64:f7:a0:5c:b7:cd:4f:f6:28:df:b2:9f:f5:e3:
f1:84:a3:18:6a:fa:3e:47:05:31:8b:9c:a0:41:5b:64:dc:15:
b8:23:64:31:23:18:e8:31:32:b0:d9:e5:bb:1d:a5:e2:86:09:
f2:93:c6:df:34:bd:52:34:3f:74:2a:96:89:ce:4e:6f:59:12:
b7:77:07:53:01:b8:b8:2b:f6:e4:cb:f6:90:52:cb:b5:e4:a4:
ee:b8:d4:39:6b:5e:92:66:8d:0d:3c:11:ee:93:00:69:01:4d:
1a:db:6d:74:e5:65:d8:5c:66:a9:c4:ca:2b:87:69:f8:36:fa:
44:c4:1c:d3:69:be:21:fa:78:09:05:29:94:82:29:8d:0a:e5:
94:f2:fe:b6:70:b5:22:b2:d8:da:d9:ab:f0:fa:5c:88:59:31:
25:2e:b7:91:1d:0c:ff:1f:f8:1d:89:25:a6:1d:8c:08:3d:e3:
96:e8:90:f6:b1:ae:58:83:1e:e2:2a:92:55:c1:ad:8a:d7:e7:
12:9f:c1:47:29:5a:eb:48:6b:34:7d:1a:0e:a7:56:cd:6e:a8:
b1:fb:0d:b4:c8:42:43:7d:5b:65:02:11:2f:ad:37:78:b7:21:
e5:ea:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:56 2025 by rpki-client