Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7bRrfeOZKqa8RLaU_iOswaR2DVU.roa
File: 7bRrfeOZKqa8RLaU_iOswaR2DVU.roa (raw, json)
Hash identifier: duI6UVs/xeIhHnOx/2GjXIuqNzf68R+ja58RqUgwPrE=
Subject key identifier: ED:B4:6B:7D:E3:99:2A:A6:BC:44:B6:94:FE:23:AC:C1:A4:76:0D:55
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01904FA50A62FEE916EC2BD7DA3F2B995046
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7bRrfeOZKqa8RLaU_iOswaR2DVU.roa
Signing time: Tue 25 Jun 2024 13:45:34 +0000
ROA not before: Tue 25 Jun 2024 13:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 2a0d:1140::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a11:3500::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 25 Aug 2024 15:59:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:a5:0a:62:fe:e9:16:ec:2b:d7:da:3f:2b:99:50:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 25 13:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edb46b7de3992aa6bc44b694fe23acc1a4760d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a4:e0:d1:c9:fb:05:94:ee:05:d4:d5:39:bc:
80:4d:f0:c1:40:a0:2f:04:61:23:30:56:b4:5a:59:
4c:3e:0c:72:4c:6e:47:a4:6a:a3:a7:59:b2:c7:6b:
f7:e4:a9:1e:b4:59:23:4d:cf:61:2b:d1:aa:ba:93:
6e:29:4b:92:49:72:64:98:0f:99:bc:36:72:3d:f6:
39:d4:16:2c:fa:e1:d4:ad:74:ce:50:fb:4d:34:c3:
36:2d:5b:51:e5:f0:ee:a4:12:32:4d:96:59:d7:12:
45:53:08:73:9f:32:f4:9a:1e:03:8a:e8:bd:2b:f2:
59:2a:cc:9b:32:d2:86:63:87:5b:ab:e0:7d:dd:c3:
5c:0a:a8:c8:b1:28:cc:05:0c:d3:1e:b9:34:38:f4:
81:c8:0c:b3:1c:37:33:7b:d6:5c:fc:7a:42:72:41:
b1:7a:6d:a8:53:af:cd:6d:c2:6f:d5:1e:8e:f6:3f:
6f:ac:4a:c3:b1:f2:a2:25:d1:88:6f:4c:86:9a:92:
33:4b:9b:0e:a9:cf:da:c1:f5:73:ea:55:33:f9:99:
f4:f9:41:b0:9c:ff:76:b1:ca:7f:c4:65:78:f7:99:
b2:72:7b:04:58:0c:33:c2:71:0b:e5:e7:d3:39:0d:
eb:30:39:12:22:d2:74:02:f9:12:90:85:98:15:05:
c2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B4:6B:7D:E3:99:2A:A6:BC:44:B6:94:FE:23:AC:C1:A4:76:0D:55
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7bRrfeOZKqa8RLaU_iOswaR2DVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
2a0e:5800::/29
2a0f:2500::/29
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
3f:52:c8:86:b0:87:3b:f4:6a:5e:a3:08:91:b4:df:a6:09:91:
8b:4a:ea:2b:fa:53:f7:3c:c0:d2:c3:5f:17:80:32:34:6f:fc:
5d:9e:60:89:72:fa:90:19:96:d3:9c:2f:70:7c:19:81:4c:29:
d6:e0:cb:ff:0a:56:73:1b:1b:c8:f8:91:32:eb:33:92:0e:f2:
71:cf:08:58:cf:f4:54:2a:c6:72:a1:46:0e:59:5a:8c:dc:45:
de:5c:3b:11:3c:90:5d:b7:81:1f:18:fd:ec:66:28:ca:ec:4c:
8a:b9:26:36:bc:15:14:ae:19:9d:ed:3f:1b:4a:f3:15:13:f2:
9d:ee:f0:58:00:55:55:b3:4b:60:95:68:53:56:dd:89:76:0b:
da:0c:c3:ab:64:77:2f:b8:87:5a:9e:17:e2:b8:7e:30:7c:ee:
c9:cd:ed:4e:bd:99:57:88:fe:bc:f1:1f:41:a9:9b:62:7c:6b:
6c:ca:d3:a0:de:96:f4:3b:59:3f:d7:07:25:8c:25:02:02:a8:
59:e3:7f:44:cc:e7:ce:2d:ec:14:e3:a6:d6:a8:f3:9e:46:f4:
86:85:0d:ff:b5:ab:12:af:fa:56:98:a2:a7:3f:da:60:40:2e:
79:bf:5a:ae:9e:b0:23:00:4f:80:bb:71:61:e4:85:ca:5f:b2:
97:d6:02:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:57:58 2025 by rpki-client