Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BFX5IsfsXmr_dQrJD-p6u4aBm7o.roa
File: BFX5IsfsXmr_dQrJD-p6u4aBm7o.roa (raw, json)
Hash identifier: +ObKES0NUCjLVq1GUcGRe+aP0DLGSapby3CjuNsbkmY=
Subject key identifier: 04:55:F9:22:C7:EC:5E:6A:FF:75:0A:C9:0F:EA:7A:BB:86:81:9B:BA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01953734D0FDE34C537F90AB5F02D38259FB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BFX5IsfsXmr_dQrJD-p6u4aBm7o.roa
Signing time: Mon 24 Feb 2025 09:06:03 +0000
ROA not before: Mon 24 Feb 2025 09:06:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:e00::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:07:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:37:34:d0:fd:e3:4c:53:7f:90:ab:5f:02:d3:82:59:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 09:06:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0455f922c7ec5e6aff750ac90fea7abb86819bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:34:f7:ea:4b:d4:c3:b9:b8:a2:c1:ab:91:f3:
f6:e8:7a:61:5b:fc:80:da:9b:7a:f5:67:a1:70:a5:
2c:0b:39:81:e1:ef:86:0a:0a:a8:78:2c:85:8c:ec:
ca:2e:82:3f:05:89:12:19:66:ae:d5:44:0c:98:f2:
24:ba:0c:a7:39:49:d5:84:a9:71:89:56:0f:1d:c0:
11:6a:6b:fd:f8:27:2d:c2:f1:f6:b3:23:4b:a5:a3:
ad:89:7b:ea:50:1a:2b:f6:f7:7f:31:a2:46:b9:e1:
0f:2d:e3:e9:9c:a1:e2:5b:44:18:91:91:54:00:51:
d2:30:fc:f2:d8:57:ce:68:4f:53:ba:e7:58:23:13:
ba:13:57:bf:1a:5d:a6:ea:51:85:2d:2f:8d:30:e6:
e6:20:e0:a2:8b:d8:fa:07:65:05:7b:f4:98:99:12:
51:94:19:69:1a:1d:c3:b5:2d:78:6c:7c:4c:55:c3:
36:b9:57:75:b7:5a:de:8a:33:45:0c:7c:4c:99:9b:
56:73:04:57:94:2f:80:cd:bb:84:0d:b9:60:54:5e:
30:c3:bf:25:da:aa:c8:01:00:ba:0b:95:54:87:e1:
2f:cb:74:2d:c8:09:00:30:4c:cc:22:f0:76:51:0c:
0d:d7:cd:55:96:1d:79:41:41:38:ab:12:41:d8:84:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:55:F9:22:C7:EC:5E:6A:FF:75:0A:C9:0F:EA:7A:BB:86:81:9B:BA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/BFX5IsfsXmr_dQrJD-p6u4aBm7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e00::/29
2a0f:1fc0::/29
2a0f:2f80::/29
2a0f:c400::/29
2a0f:e600::/29
2a11:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
2a:5e:f5:ff:a0:19:90:da:88:d3:0a:1c:a2:e4:13:bf:d9:0c:
49:25:0d:67:8b:d0:d0:48:3b:fb:1f:1d:58:c2:f7:e1:e1:0b:
d2:0b:c7:a3:92:ed:90:09:38:b9:88:12:69:b6:ed:a4:51:4f:
80:47:f7:a8:f1:1a:46:d8:58:dd:b4:fc:88:14:b4:04:08:65:
f2:85:cf:ec:80:0d:eb:08:84:99:23:70:8b:b0:6f:f0:ee:78:
b0:4c:95:24:b1:38:d2:a1:38:1b:88:c7:00:94:de:d8:5d:5f:
da:0e:4a:d3:1d:e8:32:a0:0c:d6:d9:f1:59:f4:7b:e1:d2:e5:
fa:70:f7:73:a3:e2:72:24:47:c4:1f:0b:e6:9a:f0:21:e5:41:
23:34:52:ca:96:bb:de:89:50:f0:5b:33:02:0e:eb:8b:af:ee:
27:ec:48:e8:c4:ff:9f:d9:08:6b:92:ed:35:09:c1:f0:ca:98:
f8:b3:9f:a6:49:98:9a:36:a6:6f:3f:b4:d4:f8:60:ef:d2:49:
36:c5:b3:fc:96:04:2a:f3:6e:97:a9:59:56:ac:8b:82:56:b9:
19:43:4c:e8:26:82:54:23:76:c4:89:2c:76:2e:d3:c2:50:69:
69:4c:a5:8f:d2:a1:4b:9d:a9:6c:74:d8:0a:b1:51:c9:c4:22:
a6:17:fe:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:04 2025 by rpki-client