Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C0_XMfYiGseUo4SAaVTE4YQboVk.roa
File: C0_XMfYiGseUo4SAaVTE4YQboVk.roa (raw, json)
Hash identifier: iZ6BAV23GScwmPIYmM1LmGIlOIfKYxX+g2JGrBfE1I8=
Subject key identifier: 0B:4F:D7:31:F6:22:1A:C7:94:A3:84:80:69:54:C4:E1:84:1B:A1:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01912C3DF9A98E29DF38091A0CC9E2641096
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C0_XMfYiGseUo4SAaVTE4YQboVk.roa
Signing time: Wed 07 Aug 2024 09:49:04 +0000
ROA not before: Wed 07 Aug 2024 09:49:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0a:2940::/29 maxlen: 29
2a10:3240::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 08 Aug 2024 10:13:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:3d:f9:a9:8e:29:df:38:09:1a:0c:c9:e2:64:10:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 7 09:49:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b4fd731f6221ac794a384806954c4e1841ba159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:36:a3:4f:20:e9:50:3f:6b:f8:ea:5d:9a:21:
e5:c6:59:ba:39:04:06:78:12:3e:29:d3:ba:2b:7a:
47:e5:2f:05:ac:b5:2d:e3:01:7f:f6:f0:38:49:8a:
29:4a:50:9d:bc:49:98:f6:25:dc:87:7f:37:1c:30:
26:1a:12:fd:4c:52:47:7f:c3:c3:fb:d3:b4:de:24:
2f:1b:b3:96:88:6c:60:1a:1a:8f:c4:74:03:0d:61:
96:67:d8:d1:23:a9:a3:81:2b:1b:26:2a:b0:9e:d8:
27:62:a6:3a:45:a7:0a:49:bc:a0:31:02:33:21:35:
43:b9:c2:66:89:90:32:67:71:6d:ba:05:95:83:6b:
a3:1b:b6:f1:f8:31:f5:71:85:ce:54:6d:35:f4:93:
30:94:b0:0a:dc:c2:ae:45:4c:78:b9:ba:31:bf:ec:
11:40:0f:e7:41:0f:ec:f2:45:c4:1c:06:09:f8:c4:
5a:9e:c7:8a:04:0f:2f:a6:ca:3b:3c:53:e2:6f:df:
a4:a3:d8:7a:24:5c:a2:a4:84:7b:bd:d5:f4:80:8d:
d9:62:94:a2:c2:f9:35:45:ea:ba:f1:b1:87:00:13:
cd:2a:5e:4e:b2:fa:ce:72:2a:e0:2f:e6:8a:3d:17:
d1:b0:cd:48:ad:d7:27:2d:20:61:dd:e8:f9:5b:ce:
a8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4F:D7:31:F6:22:1A:C7:94:A3:84:80:69:54:C4:E1:84:1B:A1:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C0_XMfYiGseUo4SAaVTE4YQboVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2940::/29
2a10:3240::/29
2a10:3340::/29
2a10:3440::/29
Signature Algorithm: sha256WithRSAEncryption
3d:d9:c3:da:b7:35:0c:3f:f4:e4:fe:f6:c0:f3:9e:73:6c:d5:
67:51:a3:47:e5:4d:a9:00:ce:88:ff:e0:7a:6c:7e:99:3b:65:
e6:a3:5d:2c:9e:e0:26:c3:6a:e1:91:c4:30:20:67:9d:04:ea:
d6:86:a9:b5:f3:21:6b:44:62:5f:93:0b:63:17:00:7a:c5:5c:
09:7b:8e:37:25:09:02:d0:17:c2:72:0c:ee:d6:f6:86:53:71:
1d:25:c6:e6:66:d8:14:06:3b:b8:2d:c2:68:b4:1f:b4:8e:65:
d2:9b:7c:6b:b2:71:b7:22:83:a3:5b:fc:bc:af:5a:4d:6d:d8:
f8:c6:05:2a:a0:79:5a:64:f8:cb:50:01:de:bf:bc:c7:ed:06:
a5:9a:cb:ca:98:ea:6e:68:dd:4b:0a:50:4c:f2:8d:25:57:df:
c3:2c:d5:40:2c:c8:a5:5c:4c:08:6f:3d:53:ec:65:ca:17:0a:
74:9c:40:de:b2:b1:47:28:33:e6:09:3b:f3:9c:59:41:87:64:
66:ac:12:8e:5a:56:39:a2:87:11:25:d6:c3:99:55:08:0d:ef:
02:9c:cf:b4:f8:60:04:e5:95:33:d0:2f:d8:99:e7:bf:51:42:
42:ed:be:ee:a8:a6:40:c8:d3:45:e3:d8:9f:fd:bf:01:c1:42:
41:3c:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:38 2025 by rpki-client