Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6eVKdCsU7D7wmDGw2bRLJ-UWAiM.roa
File: 6eVKdCsU7D7wmDGw2bRLJ-UWAiM.roa (raw, json)
Hash identifier: gzHrTHyBY9G0I91tg07ZsUSAkSdCcW1XUpWDq/bWFus=
Subject key identifier: E9:E5:4A:74:2B:14:EC:3E:F0:98:31:B0:D9:B4:4B:27:E5:16:02:23
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019246BC2881506496029CFFD1CF492454C1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6eVKdCsU7D7wmDGw2bRLJ-UWAiM.roa
Signing time: Tue 01 Oct 2024 06:19:48 +0000
ROA not before: Tue 01 Oct 2024 06:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21738
IP address blocks: 2a0e:e980::/29 maxlen: 29
2a0f:140::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a10:5200::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 03 Oct 2024 16:56:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:46:bc:28:81:50:64:96:02:9c:ff:d1:cf:49:24:54:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 1 06:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9e54a742b14ec3ef09831b0d9b44b27e5160223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:52:2e:78:71:28:3e:98:34:69:75:de:52:
db:23:26:b2:e7:3e:87:db:52:c8:5a:31:0b:c3:ce:
2c:0d:1a:4b:5c:c3:d3:ed:59:2f:d9:49:02:9f:70:
99:55:00:1c:00:f5:dc:1d:d3:3f:7d:c6:2e:41:d5:
83:71:18:1a:7f:4a:cd:87:ce:2e:e0:ef:64:ca:77:
ba:22:49:a9:c4:30:36:c5:5c:a5:20:7c:08:0b:b1:
92:3c:78:c5:bc:0a:92:d1:28:22:c7:7c:cb:f3:1e:
1f:5f:7c:fd:61:a5:9c:64:5f:77:a5:b3:db:a1:d0:
42:50:f7:e4:de:7c:b6:43:39:4a:ab:b0:2c:b4:61:
ea:11:bd:b8:7e:c4:c7:0d:39:4c:07:8e:54:01:12:
45:53:b5:5c:9f:0a:cf:46:62:31:a3:aa:b7:5f:54:
5c:8e:27:f0:b8:7e:d4:c9:7f:6b:9e:3f:6c:6f:89:
67:77:28:e3:37:43:99:e3:91:c0:f2:8e:d7:1d:cc:
4d:17:a3:25:96:a2:7e:12:9f:e7:bb:b1:ab:e8:4a:
00:8f:13:37:a9:34:14:d4:9c:cf:ee:10:61:3a:50:
33:e0:56:e2:17:42:72:23:5f:b2:0e:ff:e4:71:e6:
86:6e:09:c9:8e:47:4a:be:82:56:4d:7e:02:88:a0:
2f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:E5:4A:74:2B:14:EC:3E:F0:98:31:B0:D9:B4:4B:27:E5:16:02:23
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6eVKdCsU7D7wmDGw2bRLJ-UWAiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e980::/29
2a0f:140::/29
2a0f:e740::/29
2a10:5200::/29
2a10:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
b2:06:a5:77:39:58:c2:c8:2c:16:e3:97:1d:eb:bd:c6:db:19:
15:a9:06:5a:52:da:05:06:10:01:03:65:6c:f7:2c:8a:d8:3d:
7e:38:d2:5d:d0:ab:e9:67:15:46:2b:b4:71:ea:8d:53:ab:ff:
f2:c4:15:53:0c:ae:28:af:dd:ac:df:f3:92:7a:b9:83:14:bd:
b4:50:3d:e9:94:e5:bd:fa:3c:44:7a:87:b3:6e:c9:f0:0b:70:
7c:ee:0f:7d:d6:00:bb:12:93:22:d4:b3:ca:da:d5:02:c8:a2:
ae:b0:64:dc:99:88:52:32:ff:99:5c:77:63:2b:57:e6:be:95:
4a:09:75:28:37:82:37:43:39:bd:90:10:26:ed:11:3e:c5:57:
1f:82:06:ef:60:9e:ba:e3:47:9f:15:59:2c:30:dd:85:a6:7a:
e7:2d:ef:ed:dd:7e:02:5f:06:48:ac:6e:3a:c0:ed:80:fa:a0:
df:ba:73:c3:db:ca:08:a9:18:4d:70:93:fd:3f:77:43:73:2f:
9d:2e:41:51:e2:6f:80:02:35:24:dc:e8:c9:48:45:89:da:31:
b2:87:31:ad:4f:d9:b6:ed:9b:79:ec:db:9e:f0:88:7c:97:dd:
66:ea:2e:91:8f:2d:89:66:fc:cb:ae:ac:b7:bb:26:32:2b:91:
90:1e:9e:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:32 2025 by rpki-client