Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-Keh1KBZbS1xEd4F30PlSIog0sA.roa
File: 1-Keh1KBZbS1xEd4F30PlSIog0sA.roa (raw, json)
Hash identifier: 5VDuFG89Rm6R1Zx18cGbu8hcyWC6d99pwwNv5bXcgRo=
Subject key identifier: F8:A7:A1:D4:A0:59:6D:2D:71:11:DE:05:DF:43:E5:48:8A:20:D2:C0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193B66CC9935B8091A44951BEAD3EF8F0D2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-Keh1KBZbS1xEd4F30PlSIog0sA.roa
Signing time: Wed 11 Dec 2024 15:53:23 +0000
ROA not before: Wed 11 Dec 2024 15:53:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0d:8f80::/29 maxlen: 29
2a0e:f500::/29 maxlen: 29
2a0e:f602::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 20 Dec 2024 13:47:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:6c:c9:93:5b:80:91:a4:49:51:be:ad:3e:f8:f0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 11 15:53:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f8a7a1d4a0596d2d7111de05df43e5488a20d2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:cd:d8:0b:4a:81:5a:bb:b0:55:31:6b:69:
53:b2:97:e7:11:63:bb:f0:42:27:d7:f2:e4:b2:6b:
22:7f:bc:eb:c7:e5:a7:c9:b3:12:6d:a7:f6:72:43:
ef:64:d2:de:c1:a9:89:94:a9:35:de:15:cb:b2:20:
85:19:7e:c3:c2:b3:8f:e2:a9:3b:14:dd:74:d7:54:
e9:40:fb:01:19:e1:0a:d6:19:e3:da:cd:f4:48:e4:
ef:e6:a5:5f:68:19:3b:48:fa:55:18:f6:11:6c:09:
76:93:dd:43:52:c5:44:0c:78:e7:47:e8:62:a9:5d:
00:c4:14:15:95:71:d9:b4:b8:19:78:ec:72:d4:ff:
de:c5:76:69:ef:73:46:c2:ea:be:af:77:1f:9d:55:
b4:b4:90:05:cf:ab:27:fa:04:a3:a1:f7:59:b1:d1:
f4:cd:87:97:75:7c:25:35:f7:57:12:81:3d:5a:6f:
a6:bb:cb:0c:be:7d:fe:e4:17:af:e7:12:37:69:c8:
e4:06:59:bd:0b:a0:63:ab:0b:c0:28:64:db:48:15:
5b:5e:2f:13:7a:db:32:db:1c:be:e7:c3:f5:51:fb:
57:4b:77:e7:8c:7b:d3:ed:69:78:6e:90:32:f1:67:
39:7a:a7:ce:d0:aa:9a:e1:ff:31:b0:dd:98:4c:f7:
64:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:A1:D4:A0:59:6D:2D:71:11:DE:05:DF:43:E5:48:8A:20:D2:C0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-Keh1KBZbS1xEd4F30PlSIog0sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0d:8f80::/29
2a0e:f500::/29
2a0e:f602::/32
2a10:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
3a:26:d8:68:bc:64:b8:be:5a:1f:39:ae:e0:e5:01:b1:6e:19:
50:67:ba:d5:d8:1e:f8:9f:9f:d3:44:ea:81:df:04:12:42:3e:
b5:03:cd:21:a8:3a:ba:4d:ea:f2:b2:ca:c8:4c:bf:2c:62:cf:
0f:74:13:b8:62:4a:db:94:9d:0d:84:37:bf:da:a4:a2:62:6c:
8e:93:e4:e7:03:e0:ee:91:80:07:b3:52:76:9b:eb:ed:6a:78:
25:94:41:12:ec:6c:4b:71:fe:cd:40:84:f7:77:da:1a:cf:9e:
7a:39:a8:67:e7:84:ed:4a:1d:60:fc:59:38:ae:a4:3c:fe:ed:
db:fb:06:7c:1d:b7:3b:5f:57:19:ff:a0:bc:07:0e:54:01:c0:
ef:49:47:85:94:06:ce:ef:de:b1:45:1e:ca:2d:aa:8c:ab:33:
ec:95:ab:2d:1e:8f:05:24:6e:78:5f:0a:10:4d:be:56:e4:7c:
fb:8a:7c:a2:2b:2d:2a:14:d0:35:67:52:77:57:12:4b:90:1f:
22:34:55:c7:c6:81:ef:1e:16:be:65:de:08:3c:3f:b5:e8:5e:
af:02:b2:e9:fe:01:e9:9d:d6:de:d9:11:03:c6:5c:11:e4:8d:
b7:91:5c:48:54:9d:e7:e1:70:ae:eb:8f:70:23:d9:62:8a:55:
0b:65:ea:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:32 2025 by rpki-client