Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7d9Q3L27G82X3lmDv4jcFMTVzEU.roa
File: 7d9Q3L27G82X3lmDv4jcFMTVzEU.roa (raw, json)
Hash identifier: XjeEBwF/UGylC2A+DQV7NCpAp79Kg615liDL+Rd2TNk=
Subject key identifier: ED:DF:50:DC:BD:BB:1B:CD:97:DE:59:83:BF:88:DC:14:C4:D5:CC:45
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193016F745832C83FAEC650CFACC28BBB4F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7d9Q3L27G82X3lmDv4jcFMTVzEU.roa
Signing time: Wed 06 Nov 2024 12:25:01 +0000
ROA not before: Wed 06 Nov 2024 12:25:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:7b00::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:4e00::/29 maxlen: 29
2a11:1c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 09 Nov 2024 12:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:6f:74:58:32:c8:3f:ae:c6:50:cf:ac:c2:8b:bb:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 6 12:25:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eddf50dcbdbb1bcd97de5983bf88dc14c4d5cc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1a:61:8f:fa:59:d8:8f:90:29:c3:2f:aa:65:
fa:52:e3:6a:00:8f:a8:55:8c:50:2e:e2:cc:1f:83:
1a:e1:c4:d2:53:f0:6a:b5:44:16:95:1b:fc:6c:ca:
5b:89:42:b2:65:50:1a:4e:c3:f5:a3:c2:f2:7c:45:
74:c0:a4:12:52:04:3a:0f:18:0c:9d:61:b6:27:35:
26:cb:dd:12:43:c8:3f:c1:4b:6a:7f:5b:3c:37:27:
fa:13:46:16:27:27:75:d2:1e:d7:b6:e0:fa:df:4c:
1a:a1:c6:29:9e:9b:ae:dd:a6:01:82:15:fb:c4:78:
57:e8:95:16:23:62:ef:6e:83:81:34:9e:fc:0a:9a:
c6:28:c3:97:0d:8c:26:6a:3a:ea:d5:9a:32:b3:53:
86:bd:cb:09:04:26:64:6d:e4:1d:01:11:2f:2c:5e:
ef:72:3b:ae:e6:9e:3b:9b:ff:59:5c:34:e0:b1:d8:
99:53:b8:aa:4e:30:13:7f:d2:85:89:93:5c:f8:98:
16:49:86:06:c7:a5:05:93:6b:d2:47:ec:32:33:40:
34:d1:2a:80:b2:76:ce:6e:8c:03:23:41:46:45:cd:
ee:3c:a0:11:41:1d:1b:4b:c0:69:cb:8b:30:65:71:
76:4f:3a:a8:28:33:88:a5:d8:80:9b:7c:57:cb:8b:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:50:DC:BD:BB:1B:CD:97:DE:59:83:BF:88:DC:14:C4:D5:CC:45
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7d9Q3L27G82X3lmDv4jcFMTVzEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:7b00::/29
2a10:31c0::/29
2a10:4e00::/29
2a11:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
4f:09:32:ea:92:18:93:2b:9e:e0:9a:ed:a0:63:d0:7a:e5:76:
c4:35:fe:8a:80:fe:07:e2:95:c9:65:16:5e:31:b0:41:f6:4a:
3b:2b:c7:af:3c:5e:fe:e0:ec:86:02:80:24:de:dd:01:80:56:
71:98:07:3a:61:21:23:2c:63:b9:1a:d4:b3:98:e4:12:2a:74:
77:d5:8f:2a:81:b7:09:c8:c0:70:1c:37:48:37:8e:2e:58:bb:
ad:17:3f:7c:f1:4f:90:f2:3e:2d:6d:9b:c5:92:88:dd:8e:a3:
35:00:c7:d3:1e:62:88:5a:44:a7:3c:2c:40:38:c7:91:72:f8:
9a:b6:64:66:75:bb:67:bb:2b:5d:cc:21:cf:c3:45:ce:e0:79:
91:6c:f4:f4:80:bf:08:a3:aa:8b:4d:f3:81:3d:57:25:91:1d:
65:2e:04:02:2b:70:47:d0:c0:37:78:6a:b0:c7:9f:b9:cc:a8:
7c:b3:11:c8:6e:4d:43:a8:7b:3e:f1:f4:d7:14:d9:f5:0d:5b:
0d:18:6e:50:eb:a7:51:4b:72:a9:7b:c4:a4:d9:1d:37:95:3e:
89:5f:d5:31:53:ed:29:c7:fd:ce:04:af:98:c7:91:5e:23:8f:
e0:70:88:d2:ae:42:a2:af:43:69:17:c4:85:5e:eb:0f:34:bc:
96:11:65:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:00 2025 by rpki-client