Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1cWSRjt-k0RAUl8L54C4bBCQJkk.roa
File: 1cWSRjt-k0RAUl8L54C4bBCQJkk.roa (raw, json)
Hash identifier: ZFP4NCVktGyozjM+o40SoEi+YlCDv0OZIxaK281A88w=
Subject key identifier: D5:C5:92:46:3B:7E:93:44:40:52:5F:0B:E7:80:B8:6C:10:90:26:49
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195B9780082ACFBF00B87D92111716CA4EF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1cWSRjt-k0RAUl8L54C4bBCQJkk.roa
Signing time: Fri 21 Mar 2025 16:10:04 +0000
ROA not before: Fri 21 Mar 2025 16:10:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0e:c783::/32 maxlen: 32
2a12:ac45::/32 maxlen: 32
2a13:e103::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 23 Mar 2025 13:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b9:78:00:82:ac:fb:f0:0b:87:d9:21:11:71:6c:a4:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 21 16:10:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5c592463b7e934440525f0be780b86c10902649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3a:10:15:f7:9e:eb:91:da:ba:1d:aa:0e:da:
be:bc:5b:cb:f6:46:17:61:17:ed:b5:0d:ec:c5:64:
48:44:c0:d9:dd:6d:d4:3c:fd:e5:7b:12:68:8f:46:
22:0f:f3:5c:c6:e2:43:0e:4f:38:dc:05:55:79:c0:
9c:41:25:78:42:09:02:d9:b1:f2:29:30:2a:7e:e7:
af:53:b9:f8:fb:1f:f7:93:04:a5:e0:f8:3a:08:58:
15:9e:07:e5:0f:a2:1c:78:32:f7:bd:0d:21:64:46:
3b:9b:5b:bf:ad:8d:53:3d:75:89:36:08:4e:0b:1d:
6f:a7:f4:59:09:35:20:0e:51:1a:a8:dd:2c:0a:8e:
00:99:99:23:46:fe:29:12:1e:a6:bb:d7:4d:a6:1d:
6f:0b:bd:94:58:e5:61:02:45:c8:70:da:5a:e9:5b:
48:0f:1a:75:3e:9b:67:49:08:31:84:09:a9:ac:46:
f2:ef:9a:c6:7e:03:ff:d0:bc:ae:c4:64:ce:b0:d2:
97:12:7c:fd:c5:e6:69:d5:59:45:78:ca:a7:2f:de:
46:9b:22:6b:9c:15:de:96:cd:ea:84:78:89:bf:a0:
4e:31:32:37:3a:35:71:74:20:c9:31:85:e5:94:8f:
88:b4:2a:f0:19:cd:ba:df:29:42:65:59:81:30:46:
49:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C5:92:46:3B:7E:93:44:40:52:5F:0B:E7:80:B8:6C:10:90:26:49
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1cWSRjt-k0RAUl8L54C4bBCQJkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0e:c783::/32
2a12:ac45::/32
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
b9:90:20:5b:06:6e:63:5a:2a:ad:b4:44:9f:89:ae:33:0b:63:
a3:57:12:22:93:2d:9c:ea:d0:d5:5c:49:0c:3b:0a:41:28:ed:
a3:b7:af:28:79:45:1c:a8:3e:78:5d:62:3f:c4:b3:dc:aa:ff:
20:86:49:0d:7c:f9:37:1e:0e:4a:a1:b1:17:a0:29:7f:2a:e4:
4e:a8:0b:5d:c0:7f:08:35:3f:55:71:68:ab:78:bb:a1:c5:3a:
b8:12:44:01:4b:02:95:db:69:22:13:b9:cf:4a:46:73:e8:82:
99:34:dc:e5:85:dd:51:4b:56:db:c9:3f:ae:92:4a:db:82:82:
9d:cf:a6:aa:87:c1:32:66:a8:4e:09:d5:20:eb:97:ac:fa:7e:
1c:74:f2:6f:68:df:f3:96:0d:f3:ac:21:d7:b5:f1:1e:e9:c0:
c9:79:84:ee:a8:ea:e6:49:6b:b9:40:cc:c7:a2:ab:60:8a:55:
5a:72:ed:ed:3d:7c:18:8e:2c:ea:fc:a5:26:47:89:c5:50:5b:
36:82:66:5f:d6:08:57:8e:6a:88:a0:88:d0:2b:31:47:55:46:
62:91:92:cb:ac:0f:94:42:18:c2:19:f2:d0:b0:52:62:59:1f:
de:d9:c1:ce:dd:f1:94:6c:82:af:73:0b:2b:3b:77:e2:7d:99:
fc:5e:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:52 2025 by rpki-client