Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1viyN1-WsSC3st9nFX3Z8v_RmXY.roa
File: 1viyN1-WsSC3st9nFX3Z8v_RmXY.roa (raw, json)
Hash identifier: CL4ykJu9bEbRPFPYTbu5eZOJ+UBtnIJ5r8Q9ss8yIZE=
Subject key identifier: D6:F8:B2:37:5F:96:B1:20:B7:B2:DF:67:15:7D:D9:F2:FF:D1:99:76
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192FBC2829A9E7B0943C9F950E57251A1D2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1viyN1-WsSC3st9nFX3Z8v_RmXY.roa
Signing time: Tue 05 Nov 2024 09:58:01 +0000
ROA not before: Tue 05 Nov 2024 09:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b200::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Nov 2024 10:16:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fb:c2:82:9a:9e:7b:09:43:c9:f9:50:e5:72:51:a1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 5 09:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6f8b2375f96b120b7b2df67157dd9f2ffd19976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:95:da:f4:19:c0:66:e7:ff:6e:0c:50:b0:
54:37:1c:ff:29:bd:83:d3:83:ff:7c:a1:72:42:76:
b5:cb:04:c4:49:68:3d:9a:42:cd:e6:23:a1:c3:f5:
58:08:66:c3:71:67:3c:ca:ea:82:7a:d2:04:87:c2:
31:4e:4c:f8:c1:04:e6:73:e5:59:94:b9:e5:e1:25:
0d:42:ed:f5:ae:a6:5d:7e:74:e6:5e:cd:3f:5c:7e:
62:e8:32:73:71:73:0d:1d:49:ed:76:3a:3b:7b:8a:
c5:11:1c:59:fc:31:b0:bf:c1:55:7c:ed:3a:13:39:
08:48:e3:00:f1:ce:84:04:3e:58:84:f5:59:40:66:
f5:75:b5:ca:ee:4e:71:e1:74:20:a9:9f:08:93:00:
7d:85:c7:ff:5e:1c:57:7c:5f:fa:73:34:5f:ec:26:
c5:dc:f6:09:b6:05:4b:06:c0:7a:59:94:c7:7f:9e:
10:1d:bc:32:77:b8:b6:b2:74:bf:cd:e1:fd:0a:56:
95:b9:4d:ed:f8:e6:2c:ea:79:f9:91:52:82:b6:0a:
4f:5b:8b:08:69:79:89:9e:8b:57:ca:fc:22:e4:c4:
ee:e7:25:17:c5:f3:21:82:e5:83:65:24:2c:94:d9:
0e:e4:56:9c:5b:54:c6:32:b0:9e:62:d9:5b:c1:ed:
bb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F8:B2:37:5F:96:B1:20:B7:B2:DF:67:15:7D:D9:F2:FF:D1:99:76
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1viyN1-WsSC3st9nFX3Z8v_RmXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:dfc0::/29
2a07:a300::/29
2a0e:5800::/29
2a0f:1740::/29
2a0f:19c0::/29
2a0f:1ac0::/29
2a0f:e740::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:1200::/29
2a11:1880::/29
2a11:5c80::/29
2a11:8700::/29
2a11:89c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b200::/29
2a11:b740::/29
2a11:e580::/29
2a11:efc0::/29
2a11:f040::/29
2a12:ba00::/29
2a12:dc00::/29
2a13:200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
a1:dd:da:71:4e:db:90:56:61:6b:bb:3e:0e:17:9a:14:2e:9f:
ef:c2:f6:44:12:96:71:9f:96:06:d9:e8:d7:52:b9:8c:1f:82:
20:c9:88:d1:5b:3c:4d:84:11:49:41:c3:d0:8d:7e:ec:3c:e9:
40:25:5b:97:1c:52:3a:30:f7:a0:ba:15:48:73:37:43:36:33:
83:e3:0a:72:e9:c6:1c:57:83:65:80:36:e0:0f:10:b4:37:4c:
a5:ab:a2:a6:fc:5c:f1:d5:08:1a:0a:6b:3e:be:42:73:99:37:
fd:a1:d9:84:43:bc:d9:90:08:85:27:10:78:d8:ef:2f:61:cd:
b4:9d:1a:36:1b:3e:bb:8c:d4:d8:a7:28:cb:cb:83:2d:ca:32:
d4:c1:f2:a7:54:50:09:39:08:c1:c2:dc:4b:5b:46:b9:5d:ad:
bf:30:70:b9:2c:4a:6f:be:98:d1:8b:91:6c:40:0e:ac:5b:ef:
ed:82:ac:d8:a1:f2:6b:67:ff:f6:ba:c9:f4:a5:71:56:fc:f7:
f3:01:66:4e:64:6e:ac:db:73:96:ee:0e:3e:76:51:1a:83:3d:
73:30:de:d2:bb:9b:d7:05:fb:3c:6f:b2:15:b1:93:21:35:7f:
63:d5:2f:b3:05:dc:17:df:ef:48:da:e3:ee:64:cc:32:8b:69:
2b:75:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:24:05 2025 by rpki-client