Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9eKlcj-jsGOugKBeUGzfRqCgKg8.roa
File: 9eKlcj-jsGOugKBeUGzfRqCgKg8.roa (raw, json)
Hash identifier: 7DLZdl9eJ7R4ayJr607Q61fJatLUF7YoJuJe4ETQWhU=
Subject key identifier: F5:E2:A5:72:3F:A3:B0:63:AE:80:A0:5E:50:6C:DF:46:A0:A0:2A:0F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019130B57855183428F4458027E68213C160
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9eKlcj-jsGOugKBeUGzfRqCgKg8.roa
Signing time: Thu 08 Aug 2024 06:38:04 +0000
ROA not before: Thu 08 Aug 2024 06:38:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152598
IP address blocks: 2a0a:2d04:1::/48 maxlen: 48
2a0e:15c0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Aug 2024 06:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:30:b5:78:55:18:34:28:f4:45:80:27:e6:82:13:c1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 06:38:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5e2a5723fa3b063ae80a05e506cdf46a0a02a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:82:c1:54:f2:f1:ba:70:9d:8d:aa:f2:b5:
ff:60:8a:e5:18:b0:a7:bc:27:61:81:7f:9a:5f:13:
62:05:82:ff:96:df:cf:81:1c:e1:49:97:8a:34:81:
9c:ea:22:80:5d:89:4b:af:3f:e0:88:a2:1e:88:c6:
b3:fb:ad:77:b7:c6:dd:73:3c:76:21:bf:d2:91:f9:
8d:bf:47:9c:b0:54:41:1d:ae:a6:eb:32:51:aa:19:
5b:0a:d7:0a:98:ee:e1:c8:ab:fa:bf:ce:67:b4:bf:
91:8b:f4:c7:5e:2d:88:15:61:ca:d1:c0:55:95:98:
b6:2c:26:a7:da:d6:1b:80:16:7c:fa:1c:51:cb:5c:
32:eb:4d:d2:5e:1f:14:25:8a:db:d8:cc:44:b9:5d:
6e:4e:9f:bc:a8:d4:62:e5:04:38:06:4f:f5:f5:bc:
99:a3:c8:72:11:12:4e:ec:ca:be:69:b7:b7:86:4e:
99:28:4b:f7:bb:86:3b:de:99:1a:9c:9a:4a:6c:07:
ab:6d:a7:5e:48:07:52:8c:88:db:f6:aa:d3:b7:fb:
85:bd:2d:c7:be:49:be:d3:32:44:9a:4e:e7:21:a7:
0c:0a:0a:ca:05:16:65:0c:20:7c:ce:8d:84:4c:a1:
58:5f:6e:6d:d5:46:c2:62:9a:fb:5d:34:a5:b2:8d:
22:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E2:A5:72:3F:A3:B0:63:AE:80:A0:5E:50:6C:DF:46:A0:A0:2A:0F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9eKlcj-jsGOugKBeUGzfRqCgKg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d04:1::/48
2a0e:15c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
ce:8e:71:fd:46:ad:e0:60:9f:68:ae:c6:34:25:3a:14:23:30:
de:80:fb:f5:9f:16:2a:ed:70:69:46:70:7b:6a:48:79:7f:f0:
32:9a:85:b6:04:ab:4a:df:e7:89:59:d1:3f:31:9a:bc:8a:68:
2b:5e:b9:19:bb:42:ca:19:c8:4a:8f:27:97:81:bb:89:2c:27:
c1:ba:eb:6c:e2:99:68:67:57:b1:8c:a0:50:3f:6d:55:90:45:
1e:87:16:5f:a8:f1:19:a4:2a:c6:da:81:17:13:e3:3c:51:c3:
29:9a:a4:fd:b8:5a:7f:17:e1:78:01:8b:1e:74:2d:24:26:99:
ee:b2:76:ce:0c:aa:2d:ec:8d:c7:06:20:f9:02:53:a0:38:a1:
6f:1c:36:66:01:c9:fa:0b:2c:69:41:f6:30:69:20:55:66:03:
de:bd:51:88:50:a6:52:b8:e2:85:53:6e:19:02:8c:fe:d4:c8:
9c:eb:ae:72:b6:5d:0c:a9:e3:f2:80:ec:2b:e4:01:28:43:36:
b7:ed:cb:48:c3:4f:c3:05:63:b8:c0:cf:53:39:c8:dc:88:bd:
b9:d3:dd:8f:db:7f:98:70:ae:57:6b:e5:10:a0:10:3d:cc:c4:
32:50:b0:11:d1:ab:b4:34:8a:ee:8c:09:af:73:a3:12:fb:d8:
d8:05:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:50 2025 by rpki-client