Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9ZPEgf8PS3aJFOEeZu0bfDGZHS8.roa
File: 9ZPEgf8PS3aJFOEeZu0bfDGZHS8.roa (raw, json)
Hash identifier: nVniw6OoNgp6WLuBDrKAjeOzK+ZRVBAYNg/u8F1P6/w=
Subject key identifier: F5:93:C4:81:FF:0F:4B:76:89:14:E1:1E:66:ED:1B:7C:31:99:1D:2F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01954D40622FB33911225245AC2985F162E8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9ZPEgf8PS3aJFOEeZu0bfDGZHS8.roa
Signing time: Fri 28 Feb 2025 15:50:19 +0000
ROA not before: Fri 28 Feb 2025 15:50:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a0f:9e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 10 Mar 2025 14:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:40:62:2f:b3:39:11:22:52:45:ac:29:85:f1:62:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 28 15:50:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f593c481ff0f4b768914e11e66ed1b7c31991d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:06:33:f0:12:84:94:ea:e1:a1:d5:82:fc:
2f:39:b4:f1:c1:98:89:1d:d6:80:de:bb:07:b0:ef:
4f:74:d8:c1:32:1b:f8:09:f3:bd:3b:e0:fd:eb:78:
48:4b:16:06:03:7f:d4:86:b8:a1:fc:06:ef:13:9f:
0d:85:f6:80:be:53:05:f7:ca:a6:f8:0c:39:76:bc:
93:c0:91:2f:e1:80:62:5b:aa:6b:6b:5d:0d:b9:76:
a1:3e:b7:9b:5c:e5:fd:b0:0a:1d:b1:99:e7:25:0b:
7d:23:d9:d4:10:c2:b1:d1:b1:85:cd:94:ca:8a:48:
76:cb:aa:15:09:3a:a7:be:6c:e3:d8:81:d4:2f:c7:
45:b2:4b:17:90:13:5b:90:3f:3a:63:c0:49:f1:3f:
ff:e6:f0:5d:39:77:2f:b6:8c:c6:7e:4d:e1:c1:49:
fb:6c:3d:1b:a8:5f:a6:fd:87:17:12:55:ca:54:6e:
24:0a:c2:cf:36:a4:8b:3d:15:30:f1:b4:65:4b:01:
2c:c1:12:c9:5a:d2:7b:ae:8e:0c:a4:2d:fc:f2:ef:
ed:3a:42:de:8d:1c:17:f5:1d:a7:cc:e6:ab:be:f8:
22:6d:31:bc:3a:93:1a:6a:40:e6:16:3e:95:f4:d8:
43:72:2f:fb:48:02:1a:49:2e:0a:18:50:d0:d1:8d:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:93:C4:81:FF:0F:4B:76:89:14:E1:1E:66:ED:1B:7C:31:99:1D:2F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9ZPEgf8PS3aJFOEeZu0bfDGZHS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
2f:3f:c2:63:91:02:66:7c:b6:45:82:17:92:fa:d7:c8:33:f4:
d6:6c:14:0d:2d:89:92:63:9a:99:8e:ec:77:f4:62:a4:b6:d7:
d9:02:e0:dd:94:c6:9d:fd:e6:08:d5:90:ec:55:7e:fc:61:ef:
3c:24:53:93:db:16:d6:70:8b:27:ff:a3:1e:53:16:2b:b8:70:
20:41:c2:0b:aa:b7:a8:1a:0c:22:8d:6c:93:16:1c:a2:33:ad:
c2:53:40:a3:80:28:2a:d7:9a:84:ba:5e:41:1b:7b:cc:51:04:
12:48:bf:b6:c2:1a:11:14:eb:50:34:c8:ba:19:e9:8c:75:8b:
71:87:db:cc:d7:29:3b:34:28:e9:94:6b:4d:5f:c4:20:c9:8c:
94:5f:4b:cb:93:ba:c1:d5:9c:b4:15:17:bb:f9:2c:5e:a4:ad:
45:28:b9:ab:f3:db:66:41:52:2d:9d:0f:de:53:85:65:de:7c:
b9:64:fd:c1:31:62:fa:d3:67:d7:63:46:78:d5:ba:15:7e:1b:
a1:8a:69:3f:fb:96:e9:3e:49:40:5a:19:c1:22:41:ce:c0:11:
e7:1d:a4:6f:c5:72:75:8f:99:d5:13:af:0a:51:d0:3f:d4:bf:
2a:f8:3f:42:b8:0b:72:ea:fb:05:b3:d0:57:bd:2d:df:e7:99:
a5:74:5a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:15:01 2025 by rpki-client