Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/42OzQ0Ok784ANRyvq-_I1DqIB44.roa
File: 42OzQ0Ok784ANRyvq-_I1DqIB44.roa (raw, json)
Hash identifier: f4ZDDEzjiwPu1DOMUxQECe0caSacvObvWcuKBApFhV4=
Subject key identifier: E3:63:B3:43:43:A4:EF:CE:00:35:1C:AF:AB:EF:C8:D4:3A:88:07:8E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190D9EDCE9339A0EA09A8546D89D2B85C55
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/42OzQ0Ok784ANRyvq-_I1DqIB44.roa
Signing time: Mon 22 Jul 2024 10:12:39 +0000
ROA not before: Mon 22 Jul 2024 10:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:3bc0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0e:f500::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:6d80::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:5200::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:eb40::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 06 Aug 2024 08:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:ed:ce:93:39:a0:ea:09:a8:54:6d:89:d2:b8:5c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 22 10:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e363b34343a4efce00351cafabefc8d43a88078e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:44:ca:f5:1a:9a:cd:b6:4b:c3:25:b6:b6:
c8:a6:e7:d8:b8:9a:88:2d:dc:9d:00:c4:7b:62:96:
9d:b6:f1:a6:1f:a2:48:96:d1:dc:69:2f:f5:77:7b:
db:16:0f:3a:20:d2:5a:bf:5e:9a:49:cb:9b:2c:f0:
b4:80:84:48:88:00:4a:92:ee:a4:bd:42:5f:f2:10:
ba:4f:5a:10:3e:43:d5:83:10:f8:be:f0:4c:a2:f6:
34:22:58:37:11:cd:a2:d2:da:9d:9a:ed:16:bb:43:
2c:14:aa:a7:ce:f0:39:05:3b:64:80:d8:8d:6e:ce:
25:69:74:f7:cb:ba:42:f9:70:9b:d4:1c:f6:f1:5a:
fc:52:7d:32:42:3a:79:be:27:3b:d8:ca:2f:dc:b4:
49:07:80:c9:d5:9c:92:f1:cf:ce:91:a0:6b:b2:b1:
f9:5c:4c:d1:72:f5:0d:e2:a3:b4:45:06:be:e7:58:
6d:83:c1:ab:55:f0:ee:3a:91:0c:f7:07:13:84:b7:
ce:ca:4f:04:52:f2:f6:57:50:49:00:6f:49:3e:54:
db:f2:b3:87:59:80:33:99:5c:aa:e1:3a:31:a3:f7:
9b:4e:11:fc:a9:aa:8e:b7:d0:82:1b:58:04:f4:15:
bf:2d:c5:3d:79:5c:67:c9:a3:c9:5b:04:cf:13:d6:
50:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:63:B3:43:43:A4:EF:CE:00:35:1C:AF:AB:EF:C8:D4:3A:88:07:8E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/42OzQ0Ok784ANRyvq-_I1DqIB44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3bc0::/29
2a06:dfc0::/29
2a0d:a9c0::/29
2a0e:5a80::/29
2a0e:f500::/29
2a0f:2300::/29
2a0f:6d80::/29
2a0f:7f00::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:cc00::/29
2a0f:de40::/29
2a0f:df40::/29
2a0f:e4c0::/29
2a0f:e5c0::/29
2a0f:e940::/29
2a0f:e9c0::/29
2a0f:fc00::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:5200::/29
2a11:8880::/29
2a12:d540::/29
2a12:eb40::/29
2a13:200::/29
2a13:2dc0::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
47:3e:01:4d:bb:f7:6d:5a:a3:25:29:ea:b1:89:00:78:42:c9:
36:41:3a:05:e2:fb:9e:c2:dd:60:34:b3:10:71:70:06:e1:68:
33:10:a0:11:f2:5f:bc:36:95:74:33:5f:9c:7c:a2:c4:f7:88:
8a:36:a6:79:a2:6f:91:08:3e:ef:cc:81:54:62:0a:bb:28:ec:
c1:84:44:d8:b4:64:a8:b2:6e:95:eb:2a:6e:22:9a:44:18:c3:
c6:de:76:ad:a6:7d:d5:dc:8a:d4:5f:d5:e3:a0:ec:fa:9a:b1:
89:43:5e:72:bb:32:f8:fd:b9:e1:ca:6d:e1:8a:20:8e:1c:5a:
7d:38:e1:51:b3:2f:c2:2b:30:77:c9:4b:a4:7b:a6:61:f4:47:
0f:a2:65:26:bf:88:d2:a8:83:a5:8a:09:cd:93:08:0a:06:1b:
ed:0d:de:2f:37:a4:05:01:b3:2e:7d:b1:33:41:98:b9:7e:a6:
e5:4e:3f:dd:64:5f:09:29:18:e4:a9:ef:76:6a:07:04:d3:e8:
0d:d6:1d:ce:d7:0f:08:57:a3:a0:78:00:30:e0:c3:c0:e7:9f:
5d:56:48:64:95:29:69:66:dd:8d:d8:62:47:7d:30:cd:a7:4f:
60:77:73:7a:e4:b0:a3:6b:76:32:ba:4b:36:00:cd:fd:37:7b:
63:ca:0c:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:35 2025 by rpki-client