Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9L2emo_Nu7EhZTsFzLqtZHyy59g.roa
File: 9L2emo_Nu7EhZTsFzLqtZHyy59g.roa (raw, json)
Hash identifier: HM3YkKWY5M14V0widV0bkjE8rE71kQZC/Tyq+fRv0K4=
Subject key identifier: F4:BD:9E:9A:8F:CD:BB:B1:21:65:3B:05:CC:BA:AD:64:7C:B2:E7:D8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC27C7FC42E6DD5CED882FE1EDB439
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9L2emo_Nu7EhZTsFzLqtZHyy59g.roa
Signing time: Tue 02 Jan 2024 10:33:20 +0000
ROA not before: Tue 02 Jan 2024 10:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151814
IP address blocks: 2a0f:2100::/29 maxlen: 29
2a0f:1440::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 18:46:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:27:c7:fc:42:e6:dd:5c:ed:88:2f:e1:ed:b4:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4bd9e9a8fcdbbb121653b05ccbaad647cb2e7d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e5:69:a4:50:bf:32:ad:fd:9c:3d:16:cd:7f:
73:13:49:50:d5:d0:04:1d:70:72:b3:64:38:53:01:
d6:d0:ac:0f:7f:b3:44:30:b9:39:d7:c6:a3:82:5e:
1f:37:85:29:19:fe:08:f1:41:9d:a2:69:c7:52:11:
b0:37:ec:0d:be:ad:98:17:eb:6d:b1:7f:15:fc:44:
bf:bd:34:ad:d7:0a:65:0c:94:4d:e3:d8:ea:a0:24:
d3:6c:67:9b:ea:e1:26:3e:a0:6b:ac:3b:ba:15:4f:
11:22:6c:4d:20:06:40:12:b1:ad:5a:fa:6e:4a:2b:
7b:5b:14:98:10:c3:eb:76:cd:15:7a:c0:80:cd:6f:
69:f9:b4:b7:0f:d6:df:f7:f3:93:45:fd:11:ed:f7:
5e:06:7c:6d:17:0f:ff:09:14:9d:bf:8b:2f:93:7e:
81:87:74:0e:3e:5d:d4:13:09:a4:86:e1:7f:9e:d9:
b2:b4:47:a3:87:82:15:e8:4a:06:3e:ba:a9:35:cd:
17:a9:40:80:58:52:4f:01:e0:8c:80:14:17:49:fe:
1e:9a:6c:d6:6f:ff:a5:e3:4c:b9:bc:69:a6:0e:90:
7f:1d:13:ac:6b:31:5a:33:76:e1:7f:50:58:7f:f5:
3f:2e:43:49:ff:45:5d:71:6b:ad:03:d1:a0:4c:7f:
ce:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BD:9E:9A:8F:CD:BB:B1:21:65:3B:05:CC:BA:AD:64:7C:B2:E7:D8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9L2emo_Nu7EhZTsFzLqtZHyy59g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1440::/29
2a0f:2100::/29
Signature Algorithm: sha256WithRSAEncryption
35:5b:2f:ac:a7:70:f8:09:97:37:6e:a3:e9:7b:c0:5d:de:66:
9c:fb:ee:87:96:46:4f:3f:c2:7a:75:12:3d:05:ec:b2:2c:d5:
b8:13:1f:87:33:cf:bb:89:b7:6d:43:e5:b7:47:20:f1:f9:65:
cd:2d:40:39:83:9d:33:d7:fe:6d:86:72:39:7f:f0:76:d4:aa:
80:90:c6:93:c5:12:0f:11:76:65:f9:88:0e:7b:10:03:41:9e:
de:d8:fd:6e:ef:cf:e3:38:8a:c3:01:3b:7e:83:62:af:54:eb:
e0:32:e9:ce:b5:a4:55:ab:4f:8b:7c:27:ea:e6:0f:6f:33:8c:
df:c7:40:46:a5:96:0f:ea:db:64:32:f1:8e:cb:7b:b5:1d:63:
89:1e:9d:12:49:45:d6:e3:8e:eb:73:0b:31:ba:2a:fc:2e:d7:
6b:53:61:a8:ab:f8:85:b7:16:cd:f6:7d:fd:87:56:74:2f:bb:
1f:b6:cd:3e:4d:72:55:48:3e:29:1a:94:19:38:55:b0:82:10:
f5:6d:04:98:12:4a:7d:c8:84:40:92:f4:db:9d:15:cf:a8:cc:
0e:77:9a:77:14:79:6a:d1:72:1a:eb:c6:6e:c8:6d:85:ae:af:
fc:cf:fa:1f:af:b3:df:ff:0e:c7:a3:b4:5c:fc:c9:ab:e7:71:
c5:b5:96:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:55 2025 by rpki-client