Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-WK9Rjfc1e03nTA6QpM1dIgmxVk.roa
File: 1-WK9Rjfc1e03nTA6QpM1dIgmxVk.roa (raw, json)
Hash identifier: 9GCtmyAfxK5cTVFmcN+B0CNio1LMciWMYISv9VXtVCE=
Subject key identifier: F9:62:BD:46:37:DC:D5:ED:37:9D:30:3A:42:93:35:74:88:26:C5:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019310F796AB96FA318F882305A8D1D147C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-WK9Rjfc1e03nTA6QpM1dIgmxVk.roa
Signing time: Sat 09 Nov 2024 12:48:01 +0000
ROA not before: Sat 09 Nov 2024 12:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:7b00::/29 maxlen: 29
2a0e:8880::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:4e00::/29 maxlen: 29
2a11:1c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 14 Nov 2024 11:06:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:10:f7:96:ab:96:fa:31:8f:88:23:05:a8:d1:d1:47:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 9 12:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f962bd4637dcd5ed379d303a429335748826c559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d3:80:24:47:8e:3e:e3:0d:18:27:3d:4e:1a:
2c:4f:85:d5:5c:18:1b:5d:3c:8c:b1:86:5f:db:31:
ee:43:ac:89:50:42:84:a4:13:f3:76:e2:31:d2:c5:
1e:a3:08:f2:62:19:26:c6:d4:55:13:e1:33:58:ff:
35:2c:47:65:27:3a:bd:0c:02:00:1a:62:79:80:05:
2a:d6:b3:93:65:50:e4:77:72:a8:e8:40:6a:2f:f1:
47:52:9d:be:e9:5d:70:1e:9d:56:bd:6c:32:82:24:
39:3f:b6:6e:d3:ad:f3:57:a8:ef:0f:8f:69:be:eb:
9d:a3:27:c1:4f:b0:4e:50:a4:86:59:6c:56:13:72:
85:f0:6a:d5:5a:80:5a:3e:39:a8:22:0d:df:62:f4:
a4:1b:3a:34:f0:57:e3:18:58:72:5e:af:a4:d3:c1:
c2:5b:02:cb:24:a8:cd:aa:04:f0:98:b2:cc:a3:0a:
f6:86:fa:19:02:17:5a:95:14:7b:07:ef:7c:3a:94:
90:76:a9:6b:0b:90:3c:fb:42:a6:b6:91:74:80:3f:
fe:f9:30:b3:b2:28:a1:e3:17:69:e5:f2:5d:31:e2:
99:79:d6:4d:d5:44:7a:71:62:74:41:a1:7c:6a:a1:
9e:d0:58:5a:d9:8e:0b:db:0f:90:5f:b9:aa:c6:3a:
37:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:62:BD:46:37:DC:D5:ED:37:9D:30:3A:42:93:35:74:88:26:C5:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-WK9Rjfc1e03nTA6QpM1dIgmxVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7b00::/29
2a0e:8880::/29
2a10:31c0::/29
2a10:4e00::/29
2a11:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
0e:1c:da:9f:ac:6a:40:e5:76:af:62:8c:59:90:3a:ae:53:84:
ec:5a:ad:c9:e8:e7:71:9d:d6:e9:a1:87:a7:2d:f6:c8:f2:4d:
5b:2a:28:3a:0e:ba:ae:4c:3e:68:e0:fe:8b:84:a4:85:4a:f0:
fe:13:d9:49:c9:19:79:e6:7c:ca:d5:49:27:24:ec:53:e2:b0:
04:4f:99:cc:bd:16:60:c1:c5:8c:6a:be:01:04:78:46:cc:ab:
5f:3e:1c:c4:d8:d6:7a:39:e8:4c:54:ac:b1:3e:e2:2a:ff:49:
e5:15:1f:2f:8d:70:b5:67:8b:de:c8:c8:87:36:1f:3b:28:72:
5d:96:f2:81:90:9b:5b:03:44:e7:44:e7:eb:50:2e:62:16:7d:
11:11:30:9c:d0:ff:36:58:e4:29:88:55:1b:06:52:ae:59:7e:
4e:2b:2c:e4:88:e5:f9:e9:46:4b:ab:7c:8a:61:c7:60:d7:c9:
d9:3b:2f:02:a3:8e:e8:03:e0:9c:cf:d9:7d:41:6c:ce:ba:21:
d9:7e:2e:2b:65:47:86:ea:5b:8e:8d:91:50:1e:3b:37:f5:a2:
e3:e9:90:32:6e:2d:19:c3:92:c1:07:5f:8d:fd:6d:79:cd:65:
a3:35:e8:d6:b6:e3:0d:34:65:f6:4a:a5:f5:98:ec:ce:fd:fe:
4b:5d:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:37 2025 by rpki-client