Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9mCmuKG2K_mUx2z1sltdLgbWQvI.roa
File: 9mCmuKG2K_mUx2z1sltdLgbWQvI.roa (raw, json)
Hash identifier: Aq87SLL4tyYis/3u6eFnQm0gpa/+ExqbA932cIcVtCg=
Subject key identifier: F6:60:A6:B8:A1:B6:2B:F9:94:C7:6C:F5:B2:5B:5D:2E:06:D6:42:F2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F87799ABE4B1B3F61D41E478AD569D5CA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9mCmuKG2K_mUx2z1sltdLgbWQvI.roa
Signing time: Fri 17 May 2024 16:54:04 +0000
ROA not before: Fri 17 May 2024 16:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:15c0:4::/48 maxlen: 48
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
2a0f:e847:1::/48 maxlen: 48
2a12:d6c0::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 09:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:87:79:9a:be:4b:1b:3f:61:d4:1e:47:8a:d5:69:d5:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 17 16:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f660a6b8a1b62bf994c76cf5b25b5d2e06d642f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:14:b8:2d:cb:30:83:ba:f8:c5:c0:10:99:
7b:95:a4:48:c9:e3:1b:e8:6e:87:36:37:8f:1f:b3:
0e:d1:0d:56:8f:16:ed:2b:18:c2:23:1f:2d:0d:71:
d0:d3:d2:d5:a0:31:dd:a2:47:b4:2f:35:15:ec:fd:
27:4c:f1:18:f0:f3:ac:aa:68:b9:54:48:50:18:15:
1c:b2:de:a5:d3:6e:9f:b9:93:29:58:4e:bf:e9:48:
8c:6e:6c:dc:66:74:82:72:4e:74:ab:6e:13:f4:18:
57:4d:7b:59:f6:91:54:ab:eb:5e:8e:0a:ea:c7:72:
50:b9:11:00:d6:9f:65:e8:b5:fb:53:82:d1:e0:d5:
84:42:c6:87:cd:6b:f8:81:4b:b2:7a:4b:ba:50:24:
95:09:62:89:30:35:f5:0c:12:56:ec:06:75:04:28:
b0:0c:c3:97:e7:3d:2d:a1:c2:dd:33:b3:7a:ee:f2:
ef:33:50:50:f4:a6:f8:37:62:7c:87:90:a6:9d:0a:
53:da:bd:fc:39:07:58:43:3e:76:fd:fb:fe:b6:79:
8b:ba:2f:80:3c:31:4d:37:4e:8a:9f:f8:95:ac:85:
34:fc:16:00:b4:f7:7a:06:b6:bd:70:4e:54:a5:a9:
83:0c:e4:94:c1:50:36:d0:aa:f0:ea:64:1f:8b:c7:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:60:A6:B8:A1:B6:2B:F9:94:C7:6C:F5:B2:5B:5D:2E:06:D6:42:F2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9mCmuKG2K_mUx2z1sltdLgbWQvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:15c0:4::/48
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:e7c6:1000::/48
2a0f:e847:1::/48
2a12:d6c0::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
07:b9:88:34:0f:e0:85:e8:7c:37:56:c7:f7:5a:03:b8:d1:5a:
51:e6:62:14:1b:59:2b:5e:49:4e:6d:9d:06:f2:12:a7:9b:e7:
06:8f:94:b2:90:e2:0e:f7:a6:65:24:f1:fb:d5:96:f1:3c:f2:
6f:da:86:45:db:05:ca:81:9c:75:8d:be:6b:73:43:8e:d8:96:
23:13:92:65:b8:1f:44:b9:a6:03:76:0b:c5:99:1c:4d:ee:84:
da:a7:ce:b3:43:73:9b:58:d2:1b:0f:56:99:91:fa:b2:29:d6:
bd:b0:22:fb:7b:d4:d1:8b:ff:9d:54:72:26:7e:4d:38:85:ae:
45:dd:6e:63:8c:fc:a9:88:55:c3:8f:92:b4:2f:db:08:69:7a:
63:20:af:71:9e:c8:52:ae:3b:fc:b9:ea:bb:57:ef:91:bc:ec:
0c:49:0e:c1:ba:10:89:29:82:4f:1f:fd:ad:3d:2e:6a:f8:b2:
3a:ff:2d:be:ed:ca:7d:0d:9f:f8:fd:8b:1b:9e:8b:2f:ad:c5:
4f:ec:a6:e6:cd:20:c8:bd:82:e8:4e:18:40:6a:f1:41:60:dd:
13:46:0c:19:fa:c2:ca:22:a3:84:54:1e:9c:c6:69:3f:ab:98:
ad:42:cd:92:df:53:b5:58:68:50:5e:1b:2f:dc:4f:8a:20:ca:
6b:82:97:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:41:39 2025 by rpki-client