Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Jt7sJ-P34XZB5gqiXZ0k2MFKj0.roa
File: 6Jt7sJ-P34XZB5gqiXZ0k2MFKj0.roa (raw, json)
Hash identifier: 0vv/lnGZRKwEQ6Pefb5C8sB3KOedWLxBZn7eJauG3Lw=
Subject key identifier: E8:9B:7B:B0:9F:8F:DF:85:D9:07:98:2A:89:76:74:93:63:05:2A:3D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01950537921A650AF5BEAFCEA22783066460
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Jt7sJ-P34XZB5gqiXZ0k2MFKj0.roa
Signing time: Fri 14 Feb 2025 16:08:02 +0000
ROA not before: Fri 14 Feb 2025 16:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213542
IP address blocks: 2a0f:df45:25b::/48 maxlen: 48
2a0f:e7c3:1::/48 maxlen: 48
2a0f:ea43:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 03 Mar 2025 15:51:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:05:37:92:1a:65:0a:f5:be:af:ce:a2:27:83:06:64:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 14 16:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e89b7bb09f8fdf85d907982a8976749363052a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:23:f6:6b:8d:f3:a8:2e:6b:14:bc:a6:8c:0d:
64:03:9d:46:5c:6e:a1:81:ed:49:49:49:1c:ab:31:
ee:5a:2d:86:53:f7:a4:bd:18:f2:39:7c:f6:3c:5c:
b3:04:8f:4d:7c:6e:44:78:18:6a:32:e5:e1:d1:62:
3f:ba:e3:55:60:01:c4:7f:50:20:44:55:e1:a2:3a:
d3:52:66:91:e5:98:d8:11:e2:c1:80:e6:50:38:5d:
a5:59:f3:0c:25:56:8b:41:13:c3:dd:b7:10:b3:01:
28:cd:53:2a:82:d2:1e:48:73:27:88:78:d9:b9:2a:
c4:f2:e0:f3:51:0a:3c:f6:1a:cf:6e:6b:bf:f7:55:
c2:1e:11:37:a0:8d:06:ce:04:40:b1:1b:08:f4:a1:
71:67:a2:d8:69:9e:f9:59:80:fe:9e:c8:f2:18:6d:
e9:70:36:d0:cf:cd:93:35:19:b8:02:56:96:37:03:
78:df:8b:c6:af:31:4a:a9:d6:b3:d3:92:fd:62:2c:
6e:89:d2:62:3a:c7:75:8c:99:ae:7a:21:94:b8:23:
9c:0b:1f:0f:c4:4d:a2:7b:b0:67:91:dd:02:8e:6f:
53:14:2b:ca:5a:33:e9:86:4a:74:04:88:0f:a7:a9:
07:c1:42:5b:7b:9f:35:75:3e:79:b3:d0:5f:9e:b0:
28:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:9B:7B:B0:9F:8F:DF:85:D9:07:98:2A:89:76:74:93:63:05:2A:3D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6Jt7sJ-P34XZB5gqiXZ0k2MFKj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:df45:25b::/48
2a0f:e7c3:1::/48
2a0f:ea43:1::/48
Signature Algorithm: sha256WithRSAEncryption
24:9c:30:31:e6:ad:01:0e:b8:f5:e1:77:ee:c0:61:8c:9a:12:
0f:87:06:2a:a8:e2:a8:da:65:17:a7:61:7a:03:42:f7:6a:a5:
0e:dd:54:97:f8:78:9a:de:b0:3f:1b:4e:8d:bc:49:a6:28:3d:
c3:b3:01:61:4f:40:f8:ed:5e:a2:fa:b8:b3:b2:58:ca:a2:0d:
0f:ff:f4:2c:5f:47:11:1d:c4:c5:3a:05:d8:a0:ca:a0:2b:9e:
80:7a:a5:f6:c6:bd:f3:4d:45:75:b2:9d:ab:5f:67:40:b6:64:
13:95:54:c0:bf:d7:ef:f4:ce:e4:90:4a:21:46:62:17:d8:a7:
2b:e7:46:f6:97:be:19:73:b5:1a:86:1f:3f:e8:f9:88:00:fd:
14:41:41:2e:41:0e:65:d5:fe:98:55:4f:b2:40:fd:b5:45:7a:
6e:fd:6c:6c:fe:8e:27:8f:91:67:6a:11:fd:88:c0:03:6d:32:
e9:cf:71:a5:2f:e5:1d:14:f0:d1:d7:47:68:a9:27:6d:ac:8e:
3a:49:32:4b:e8:8c:56:0a:0c:2d:f1:68:a8:a7:42:1f:02:ff:
82:66:a7:45:d3:6f:7c:cc:6c:45:0f:23:d0:a3:79:fe:3b:7f:
ee:fd:a0:04:ca:ca:23:39:19:19:5c:75:71:62:bb:41:b8:cc:
08:11:5a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:16 2025 by rpki-client