Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ABtUgPEwBssNpSSc6REnr4vqpVY.roa
File: ABtUgPEwBssNpSSc6REnr4vqpVY.roa (raw, json)
Hash identifier: epfFNyEMEBcqtjZYdFlVDX2DPbykYnUpvW24iz/yWys=
Subject key identifier: 00:1B:54:80:F1:30:06:CB:0D:A5:24:9C:E9:11:27:AF:8B:EA:A5:56
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D3FD698E095D561CBE37EDE8D96FA2AAA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ABtUgPEwBssNpSSc6REnr4vqpVY.roa
Signing time: Thu 25 Jan 2024 08:57:24 +0000
ROA not before: Thu 25 Jan 2024 08:57:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 29 Jan 2024 08:30:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3f:d6:98:e0:95:d5:61:cb:e3:7e:de:8d:96:fa:2a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 25 08:57:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=001b5480f13006cb0da5249ce91127af8beaa556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:60:39:f4:e5:54:ba:72:3d:ef:48:5a:50:53:
d1:87:85:22:76:9e:85:51:30:19:1e:88:00:2f:1d:
83:30:2e:5c:a4:79:7a:82:d3:41:db:47:93:15:c4:
50:00:8e:bb:9c:d2:f9:e2:29:95:a1:f2:2a:80:74:
fe:ac:d4:c1:97:f4:bd:ca:69:a6:3f:d0:5e:68:18:
de:fe:95:77:cb:28:9b:18:a7:3d:61:c8:05:0f:c9:
46:cb:3d:e1:67:53:47:09:ba:c8:0e:68:26:90:b3:
a5:fd:4a:0c:13:86:31:d7:b1:6e:a5:28:1e:49:98:
62:9b:db:b4:3f:d5:62:28:27:af:04:25:d5:54:eb:
e0:2e:ba:26:ba:59:3c:db:27:d5:5c:16:7f:67:5e:
2f:48:d5:85:dc:6e:db:98:c7:ea:f3:d8:9a:d4:0e:
29:17:8a:86:03:fe:cf:49:8d:91:bf:d7:06:64:59:
b2:bf:bb:97:31:17:1d:cd:5a:de:39:3f:c3:8b:80:
95:c7:3e:7e:19:d5:1a:e6:10:85:87:87:15:f1:48:
40:e0:ce:26:44:a1:98:36:c0:21:55:cc:ca:18:4c:
12:ab:a0:d5:8c:c3:cd:d7:94:3c:bb:3c:b2:ed:0c:
83:74:c4:e7:d8:09:35:fe:7c:88:72:69:b6:65:cf:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1B:54:80:F1:30:06:CB:0D:A5:24:9C:E9:11:27:AF:8B:EA:A5:56
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ABtUgPEwBssNpSSc6REnr4vqpVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
c8:36:5b:3e:97:b6:d8:da:04:39:32:8a:1a:1e:46:f3:01:f6:
5b:ab:a2:0a:00:e9:8a:b1:91:da:ee:63:9e:80:6d:ab:5d:3a:
46:da:d2:c7:98:c9:ba:da:ef:17:0f:0c:9e:42:37:50:ec:4d:
d7:92:f3:6d:5f:11:d4:6b:28:e5:32:70:48:26:76:55:e0:4b:
2d:05:3d:02:9b:bf:b6:41:41:3b:60:4e:75:4b:2a:38:02:df:
64:e8:87:a7:b7:e1:f8:4e:fb:da:49:59:bf:da:96:c6:d3:81:
f4:92:01:02:4f:d5:a2:76:33:0e:4f:3d:31:e1:4d:1d:d4:72:
f3:2d:44:97:33:2d:9c:03:34:c7:c9:43:ac:28:92:d4:1b:95:
19:f4:a9:4b:7c:6b:3d:11:2f:a5:40:c9:96:da:cc:e4:1e:ec:
5b:78:e6:fd:59:45:30:df:8d:47:ac:f7:87:70:29:2d:15:2a:
2e:82:42:17:3d:c7:7a:67:aa:c7:d0:b5:12:b6:32:1e:db:df:
6a:f8:45:c7:ef:37:67:5d:ba:e1:2f:a2:67:a1:b0:09:a9:a1:
65:98:cb:c7:17:22:90:da:3c:c0:e1:22:32:47:6e:c5:c1:be:
0e:f1:a0:24:b9:9e:9b:3e:25:a4:67:54:20:e2:b8:35:62:1c:
ca:ad:ed:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:45 2025 by rpki-client