Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4JkqhPLpIkKL2p44iKMIDzCHuDw.roa
File: 4JkqhPLpIkKL2p44iKMIDzCHuDw.roa (raw, json)
Hash identifier: nWEh/eeV3W3waXwkoeTdnTrlQclxoYVUreKDztl5PMc=
Subject key identifier: E0:99:2A:84:F2:E9:22:42:8B:DA:9E:38:88:A3:08:0F:30:87:B8:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019537312691D5F83BDC6C1D4B4491215F88
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4JkqhPLpIkKL2p44iKMIDzCHuDw.roa
Signing time: Mon 24 Feb 2025 09:02:02 +0000
ROA not before: Mon 24 Feb 2025 09:02:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e80:100::/48 maxlen: 48
2a0f:1e80:1986::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a10:67c2:1::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 23 Mar 2025 13:35:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:31:26:91:d5:f8:3b:dc:6c:1d:4b:44:91:21:5f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 09:02:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0992a84f2e922428bda9e3888a3080f3087b83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:58:de:db:87:ae:2d:26:92:84:68:02:40:90:
d1:0e:ab:40:60:89:96:aa:92:82:c1:1a:ba:fe:41:
03:c1:a5:90:e9:64:f8:d7:b7:0b:7f:fe:2a:e6:81:
d5:f5:2b:8d:24:96:10:e5:4a:c1:84:8c:76:a6:87:
1e:a6:67:56:9d:72:68:f1:e1:12:87:77:cb:fc:d2:
6a:5a:f0:5a:5a:a3:cc:7d:85:9f:4c:f6:97:05:de:
6f:f8:77:30:12:66:5a:8d:41:7e:97:d8:5a:52:8c:
94:84:f9:6e:39:08:4d:a5:1c:28:7b:df:20:88:24:
ba:f6:69:17:4e:af:b6:0f:ed:b8:bd:da:8b:96:92:
bd:10:cf:f6:b5:a2:8b:7f:21:d7:56:c6:0f:4a:c1:
2d:77:e0:f5:ec:1c:d5:39:66:6d:45:52:c1:49:a1:
eb:c9:3c:3a:50:14:70:a5:b1:4c:58:ea:34:28:f1:
b4:a6:4b:25:e6:4a:5c:80:48:92:30:37:2e:07:31:
95:7e:74:37:39:15:34:0a:5f:08:1a:a1:96:fa:0c:
46:9f:b8:91:47:1b:60:bc:ca:16:1c:7e:86:69:42:
ae:29:00:54:d9:d3:e1:e0:92:dc:4e:6b:b8:95:a6:
13:e2:24:45:c7:0f:c0:03:f9:4d:40:05:6d:05:6c:
b2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:2A:84:F2:E9:22:42:8B:DA:9E:38:88:A3:08:0F:30:87:B8:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4JkqhPLpIkKL2p44iKMIDzCHuDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e80:100::/48
2a0f:1e80:1986::/48
2a0f:1e84:20::/48
2a0f:3d80:bac::/48
2a0f:7d00:1::/48
2a0f:bc00:100::/48
2a0f:bc00:a1c4::/48
2a10:67c2:1::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
86:34:54:da:72:53:8e:62:8e:b6:0b:bf:c2:4f:ec:c3:07:7f:
0c:54:60:40:d7:f0:6f:39:7c:f5:46:e0:77:36:19:e9:1f:9e:
82:8e:af:fc:d9:c7:a1:69:70:43:ef:36:76:b4:88:66:54:6a:
1e:ec:a6:0b:50:b3:01:ef:36:04:fe:c0:37:00:59:62:da:f6:
29:39:1f:a2:11:0d:f5:3e:05:8b:1e:e6:19:ab:c2:29:c1:89:
16:b3:69:7d:eb:c0:83:17:6f:18:07:d8:25:b3:5f:bc:72:5a:
fa:bc:8c:d6:86:84:cf:6d:fa:45:10:21:85:9c:9a:17:bd:93:
78:ba:3a:9d:80:b1:a5:e5:06:fe:97:8f:a6:66:4c:a6:53:60:
2e:3f:53:b3:6a:3e:21:40:fb:a3:a4:7e:f9:15:a7:1c:6c:c4:
00:e4:09:4f:35:ac:4d:58:25:ac:25:e9:52:a5:e8:d2:be:95:
59:9d:e7:1a:7f:36:72:4a:d7:3c:03:64:90:66:0a:73:26:0f:
5e:2f:5a:d4:35:fa:93:39:09:a8:42:15:dd:d8:bc:bd:94:50:
92:36:87:6e:52:bc:a5:73:87:c1:de:3d:e2:a1:be:41:bc:09:
ca:2d:15:fe:d6:b1:10:aa:2f:09:7f:c8:cb:27:43:c8:7d:39:
28:31:7e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:10 2025 by rpki-client