Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7mFxhplplqb0bpDgSfYakVroqdQ.roa
File: 7mFxhplplqb0bpDgSfYakVroqdQ.roa (raw, json)
Hash identifier: YVAdtb9WdXJHdwBTMaHy/qdJXgEZqncYbGLLzETBYjg=
Subject key identifier: EE:61:71:86:99:69:96:A6:F4:6E:90:E0:49:F6:1A:91:5A:E8:A9:D4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01951E8E1576D5E4E60B36E9C1FFB1D10219
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7mFxhplplqb0bpDgSfYakVroqdQ.roa
Signing time: Wed 19 Feb 2025 14:13:02 +0000
ROA not before: Wed 19 Feb 2025 14:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:e00::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:29c0::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Feb 2025 16:47:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1e:8e:15:76:d5:e4:e6:0b:36:e9:c1:ff:b1:d1:02:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 19 14:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee617186996996a6f46e90e049f61a915ae8a9d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:08:87:2f:2e:46:c9:23:3d:c7:9a:ea:8c:82:
e3:42:fd:e3:1b:b2:e1:53:75:9b:f0:9c:4c:68:69:
28:16:3a:a8:af:ef:d5:31:10:e2:c5:d3:bd:fa:7f:
e0:72:ec:41:77:bf:b2:33:54:40:be:7d:4f:be:03:
22:bc:a8:4e:90:7f:75:c4:7b:f6:72:fc:7c:6c:f6:
29:a0:f9:07:ad:25:65:9e:59:88:1f:89:c3:86:2a:
dc:e6:a9:bc:f9:31:61:a8:6a:88:a4:9b:72:27:ba:
b5:ad:5c:49:bc:c7:df:30:2e:69:7b:8b:98:80:d5:
34:09:cc:3a:ee:6d:c3:79:8e:48:f1:5a:23:dd:d5:
cf:55:76:da:d9:f8:b7:14:58:e6:1a:1d:b8:9e:e7:
24:5b:69:41:a0:b0:8d:c5:51:31:3a:16:a6:13:1b:
57:a4:84:6e:ed:78:d9:4a:3a:a3:84:9f:79:8a:62:
4f:c7:a1:9f:54:c4:6c:47:2f:cc:b9:39:59:42:97:
bf:00:82:65:ce:49:56:9c:37:ef:ae:8e:53:bd:85:
e6:ed:0f:3e:04:d3:ce:0f:31:95:ea:8c:48:21:73:
0f:00:49:80:3f:71:42:4e:4a:91:8d:fb:a1:19:82:
f1:36:0e:05:b2:09:05:8c:f1:af:f7:d4:1f:3f:35:
6a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:61:71:86:99:69:96:A6:F4:6E:90:E0:49:F6:1A:91:5A:E8:A9:D4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7mFxhplplqb0bpDgSfYakVroqdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e00::/29
2a0f:1fc0::/29
2a0f:29c0::/29
2a0f:2f80::/29
2a0f:c400::/29
2a0f:dec0::/29
2a0f:e600::/29
2a11:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
86:48:bb:74:b5:88:54:fd:e7:b4:2d:e3:bc:08:51:28:a8:c3:
80:cd:06:19:b2:fb:29:32:47:ea:f3:80:b9:75:08:81:00:88:
f5:88:1c:96:ab:29:63:03:de:af:e4:3d:c8:65:40:87:f7:79:
dd:2e:16:66:1d:0d:21:9c:b7:16:34:fd:ef:3b:dc:2b:e9:75:
d4:12:c1:eb:62:3a:0f:4d:94:29:69:cb:98:2f:62:d9:bf:13:
70:40:eb:e3:ab:e1:08:94:e7:05:f4:09:3b:0d:fe:2a:db:8d:
86:b5:88:bb:23:ae:9c:63:b9:14:de:c4:25:fb:fd:b7:55:b0:
92:fc:fd:81:6d:c0:86:39:6f:ec:5c:ba:b2:e0:6a:61:60:fc:
d4:c3:c0:7c:35:c5:50:27:12:d8:8b:72:2b:94:4c:17:b7:dc:
0a:9a:c7:fd:69:1c:9a:8d:8d:35:dc:8e:b4:87:46:29:b9:c9:
e6:fb:19:b0:33:fe:f7:64:a8:82:6c:e7:ee:db:00:8d:8b:39:
a5:06:e3:63:ae:ae:44:5f:52:cf:07:f9:7b:ea:6a:04:32:6a:
13:2a:c6:20:e2:8b:53:6d:fa:e3:2c:50:af:f4:34:7e:dd:a1:
b6:ca:5c:af:91:e6:5a:2a:e7:cb:3b:0d:ee:02:6a:56:7f:26:
72:21:fe:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:37:33 2025 by rpki-client