Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2NO9HA9Cab7NGEiD1g89D_SCuiY.roa
File: 2NO9HA9Cab7NGEiD1g89D_SCuiY.roa (raw, json)
Hash identifier: mWkTBtZGjxExkgf7R+iMe+5RNabtd93HTA0KNpySDvY=
Subject key identifier: D8:D3:BD:1C:0F:42:69:BE:CD:18:48:83:D6:0F:3D:0F:F4:82:BA:26
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191317A4EA3BCF7E6DA9F0CE72C4A661471
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2NO9HA9Cab7NGEiD1g89D_SCuiY.roa
Signing time: Thu 08 Aug 2024 10:13:04 +0000
ROA not before: Thu 08 Aug 2024 10:13:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0a:2940::/29 maxlen: 29
2a10:3240::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 10 Aug 2024 12:25:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:7a:4e:a3:bc:f7:e6:da:9f:0c:e7:2c:4a:66:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 10:13:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8d3bd1c0f4269becd184883d60f3d0ff482ba26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:af:98:58:05:db:c1:50:0d:af:7c:03:57:
0f:42:cf:4d:e4:8b:2d:9f:d9:8e:53:c0:0d:fd:04:
12:86:76:3a:3f:d0:1c:8b:44:91:2d:7b:34:2e:08:
a6:cc:0f:35:d3:6e:ec:51:3e:92:61:d0:89:f1:7f:
e0:6b:99:39:f6:c8:bf:3e:dd:79:27:79:0d:f9:e8:
04:26:ec:b5:6d:81:46:0e:55:b8:a4:9b:64:ed:17:
e7:50:3b:18:8a:05:25:4b:ea:ca:b7:be:77:54:a0:
49:80:f2:cb:fb:dc:34:3e:01:a8:ea:15:18:9c:b5:
94:d3:0f:69:b5:bd:25:6a:8d:52:a2:27:bc:49:21:
18:ff:f6:75:39:32:5a:2b:d5:25:ba:2d:a2:d1:e4:
02:c4:6d:b8:41:bc:55:d4:81:95:6c:0e:60:b9:83:
01:fb:f0:0b:32:83:66:c3:c3:ee:a1:e0:33:e2:5d:
d4:14:51:67:af:72:73:ca:1c:a3:61:d4:dd:fc:15:
03:8b:64:0e:98:15:3f:89:82:f2:59:16:b6:7b:61:
47:9a:4b:ef:7e:be:1b:29:f6:cf:22:21:94:97:22:
a2:69:95:2f:dd:69:6f:33:b1:a2:27:bc:05:c2:e2:
20:c2:4c:5a:4d:4f:06:90:f0:0f:43:ae:98:e9:24:
04:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:BD:1C:0F:42:69:BE:CD:18:48:83:D6:0F:3D:0F:F4:82:BA:26
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/2NO9HA9Cab7NGEiD1g89D_SCuiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2940::/29
2a10:3240::/29
2a10:3340::/29
2a10:3440::/29
2a10:7900::/29
Signature Algorithm: sha256WithRSAEncryption
6f:38:2a:f5:de:05:e6:d9:4d:2b:1b:06:b8:74:50:67:79:55:
a8:63:59:64:37:23:19:0a:df:d8:28:59:a2:55:6d:fe:64:c8:
cb:87:10:0e:69:b7:42:83:96:36:5b:9b:0c:f4:b8:15:f2:17:
0b:82:3b:66:94:c5:ac:f0:25:07:3d:85:38:69:6c:b8:01:19:
b8:84:b4:ab:d7:be:4f:bc:9c:88:20:13:e2:84:a5:98:13:7e:
0e:c6:6f:a5:d4:54:70:b5:2a:39:0a:94:ff:fd:f9:54:c9:4e:
6d:2c:f1:a6:3f:c2:76:b2:a9:37:23:f8:0e:17:6a:7f:71:35:
50:d9:9c:a5:a6:52:bd:7d:0d:3d:0e:3a:01:36:94:67:41:8d:
07:bb:01:2a:08:e6:1a:e6:b8:ac:ee:14:a3:6c:54:38:59:de:
63:31:d2:dc:39:51:c2:da:0e:86:95:67:3b:62:ac:31:e1:ea:
dc:2b:d4:57:f2:d7:1f:d1:cf:fa:08:41:9d:d6:61:d5:f5:e8:
9b:04:1b:d1:51:09:e6:d0:0e:08:10:e0:3e:6f:45:55:21:31:
05:77:ba:91:82:ca:0e:de:6b:83:a6:1a:ab:00:8c:35:34:e7:
c5:70:48:82:77:2b:de:cf:34:51:61:0e:90:13:52:63:4a:6c:
ca:32:86:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:40 2025 by rpki-client