Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5-PWSjayTxnq_w78dGXsXznvHxI.roa
File: 5-PWSjayTxnq_w78dGXsXznvHxI.roa (raw, json)
Hash identifier: +JgBGv4Ls/J3BkWsd5JDo9XiP+g3wQ4bYQRJxGulxMI=
Subject key identifier: E7:E3:D6:4A:36:B2:4F:19:EA:FF:0E:FC:74:65:EC:5F:39:EF:1F:12
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CEEA72218E552BD7D61ED37EEBE0F95CB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5-PWSjayTxnq_w78dGXsXznvHxI.roa
Signing time: Tue 09 Jan 2024 14:36:19 +0000
ROA not before: Tue 09 Jan 2024 14:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e6c6:1::/48 maxlen: 48
2a13:e101:1::/48 maxlen: 48
2a09:17c0::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a12:ecc0:f::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a13:e101:2::/48 maxlen: 48
2a0f:e1c0:2::/48 maxlen: 48
2a12:ecc6:1::/48 maxlen: 48
2a0f:e1c0:1::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a09:17c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 26 Jan 2024 10:51:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:a7:22:18:e5:52:bd:7d:61:ed:37:ee:be:0f:95:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 14:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7e3d64a36b24f19eaff0efc7465ec5f39ef1f12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3f:e1:dd:03:3a:3d:0a:ba:a9:a4:18:85:01:
51:89:54:b0:90:4e:d3:af:c1:6d:d1:17:24:bc:8f:
d1:70:26:ab:ab:83:d2:b3:9f:f9:0f:d0:a2:23:a8:
ae:71:dc:e0:91:14:dd:d6:80:1f:77:80:9c:0f:7c:
e6:22:67:4f:d4:5a:7b:fb:d0:e2:b0:64:55:62:3b:
78:21:97:84:aa:18:a0:3a:6a:39:67:51:f7:fd:2e:
4f:39:a4:a8:61:be:20:cb:07:cb:c5:30:f4:35:89:
63:75:05:24:c5:9d:02:67:12:bf:2d:64:8d:e9:58:
6f:bb:7a:45:9e:d4:00:66:9a:46:76:4e:0b:18:5d:
c5:d5:6a:ef:55:2b:ed:9e:a5:19:96:86:95:3e:17:
07:d4:d2:c2:bf:7b:4f:f9:82:74:c3:d1:17:c7:93:
2a:5b:52:de:6f:1d:33:21:bf:c0:98:a0:9d:b4:66:
70:1a:98:cd:2a:78:5e:d8:e0:f5:e0:ff:93:2d:13:
f5:90:d9:d2:94:88:eb:ad:4e:3d:1d:96:c2:e3:00:
4a:4c:09:e0:e0:5d:bf:f4:d5:9f:ae:4b:b8:b2:e1:
71:e2:32:42:18:f0:89:59:ca:f4:96:34:07:a9:84:
3f:1e:bb:55:62:6d:82:d6:f2:c5:55:c5:97:c8:fc:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:D6:4A:36:B2:4F:19:EA:FF:0E:FC:74:65:EC:5F:39:EF:1F:12
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/5-PWSjayTxnq_w78dGXsXznvHxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0::/48
2a09:17c1::/48
2a0f:e1c0:1::-2a0f:e1c0:2:ffff:ffff:ffff:ffff:ffff
2a0f:e440::/29
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a12:ecc0:f::/48
2a12:ecc6:1::/48
2a13:3380:1::/48
2a13:c700:1::/48
2a13:e101:1::-2a13:e101:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4b:5e:f6:8e:9f:9b:f9:f9:ad:bd:32:6c:84:3c:bf:8e:40:44:
4b:e9:2b:90:97:e0:4f:25:85:cb:a1:1b:09:ed:11:28:b7:3f:
d5:d2:c2:73:24:60:d6:f1:55:4e:71:ce:09:d1:84:c9:c1:93:
24:34:89:42:80:78:db:24:83:c3:b1:01:53:4e:69:2b:ed:73:
92:b9:cf:bb:cf:03:38:02:4b:ef:c1:57:0d:d7:5f:8f:4d:e0:
5c:ae:f0:49:98:99:08:d3:cd:4b:8d:8b:17:70:ab:82:4f:c5:
7f:8d:c2:96:69:51:ab:79:32:af:50:a6:4c:ca:a3:d9:09:80:
d3:db:35:5d:9a:e2:22:5f:73:e0:af:6f:ca:0f:af:06:8e:9e:
ef:24:13:66:85:78:ca:ae:c9:4e:10:9d:c3:8b:93:3d:d4:7d:
5c:ed:05:f6:ad:b9:92:b2:5a:6d:4f:3f:17:6a:83:3d:a4:65:
c6:7e:9f:58:2a:de:0a:78:28:0c:78:49:fb:e5:65:44:96:00:
1f:cf:bc:70:9c:ed:d9:2b:07:e8:c4:0c:a7:6a:1a:7c:c5:00:
04:d7:6b:54:9c:e7:79:e7:f5:b9:c8:29:24:cd:15:94:9a:d9:
26:f8:3b:83:7d:6e:90:06:d4:00:1f:b9:06:fc:29:65:43:1d:
05:b3:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:39 2025 by rpki-client