Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CB53TbsO2caR64MTUBt-0TfDdsA.roa
File: CB53TbsO2caR64MTUBt-0TfDdsA.roa (raw, json)
Hash identifier: LBDTHlYCwH3G/C+ouU1VNssPFBqlfuzhNq9ACGkQ+7M=
Subject key identifier: 08:1E:77:4D:BB:0E:D9:C6:91:EB:83:13:50:1B:7E:D1:37:C3:76:C0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190798E1323FC337A8D4A5FF02A8B2C59AE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CB53TbsO2caR64MTUBt-0TfDdsA.roa
Signing time: Wed 03 Jul 2024 17:04:32 +0000
ROA not before: Wed 03 Jul 2024 17:04:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0f:9b00::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 17 Jul 2024 11:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:8e:13:23:fc:33:7a:8d:4a:5f:f0:2a:8b:2c:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 3 17:04:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=081e774dbb0ed9c691eb8313501b7ed137c376c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:cf:ad:43:df:50:79:89:c7:00:ed:db:d5:18:
42:b9:2a:f0:3f:45:89:33:77:2e:c3:57:cf:2a:b9:
29:e1:cd:03:b4:76:7a:c9:9e:96:f8:d2:1a:eb:4f:
a9:c7:69:c7:26:df:9e:0a:6b:f0:77:ba:6d:39:52:
3e:4b:9e:5c:71:c8:d9:b3:4e:d8:88:34:8b:9b:d2:
a2:7e:e9:06:e5:98:2b:84:ab:f8:74:2a:bb:55:74:
f0:26:20:88:1c:31:d1:51:0c:9b:bb:81:93:da:cd:
9b:a6:4e:15:78:e5:8b:a5:87:d2:46:65:eb:55:4c:
ca:58:9d:08:53:39:39:aa:c2:af:5a:f0:42:9b:52:
70:30:ef:00:e9:f2:12:ce:dc:88:da:5c:f4:11:bb:
05:cc:53:e6:40:39:fd:a1:36:ff:21:36:96:17:76:
6a:27:3e:a0:ab:39:e3:d0:7a:2f:97:fa:42:70:e4:
54:82:c3:d3:96:c8:ad:25:55:af:79:86:71:f6:05:
7d:62:a0:2a:f8:ae:05:69:0c:89:98:86:28:3d:e9:
d6:2e:5c:95:de:0a:33:e8:df:03:54:0b:3b:1f:f5:
d9:7b:c6:cb:06:c7:b2:74:ce:04:5e:a2:95:e2:a3:
dc:17:61:29:d7:15:86:c9:26:58:c9:58:e5:d9:59:
71:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:1E:77:4D:BB:0E:D9:C6:91:EB:83:13:50:1B:7E:D1:37:C3:76:C0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CB53TbsO2caR64MTUBt-0TfDdsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9b00::/29
2a10:3440::/29
Signature Algorithm: sha256WithRSAEncryption
86:d5:ec:2b:20:30:63:af:d5:e8:6d:71:94:fb:56:32:4a:43:
c7:d9:ef:32:a3:c0:c9:d6:ae:59:d4:df:7b:43:cb:0d:72:4c:
ec:e1:40:ec:28:3e:e7:5e:3e:06:de:f9:c9:aa:96:b9:c2:3b:
ac:d9:6f:05:8f:b4:e2:51:4a:d7:69:05:31:48:86:25:2d:7e:
2c:e1:b5:71:13:4d:ce:aa:18:a1:a4:fd:54:cb:0d:3a:cc:08:
2c:e3:5a:cd:6f:3b:6a:0b:ae:05:96:41:a9:f4:16:8a:bb:a5:
67:3f:2c:4c:98:56:cf:51:af:fb:14:df:f0:e8:9a:b8:27:1f:
ff:02:d1:58:0a:d4:85:0b:5f:e2:52:3b:f9:b5:17:cb:55:8c:
8d:5f:b2:93:b5:35:40:a5:29:ea:14:52:ed:1f:65:bc:9c:21:
d6:27:8b:f5:d9:e1:fd:ab:4f:8f:11:9d:d6:02:79:b8:46:3a:
8e:9b:1e:0c:b5:cd:7a:9e:17:b6:d7:a5:8f:e5:fa:9e:ca:cb:
49:1c:2b:d1:9d:35:fa:25:48:c3:2d:b9:87:bf:f1:13:b7:c9:
5f:90:4f:9a:e4:f8:7f:f6:8e:7d:3a:ce:7b:93:91:ae:39:0e:
2c:f5:83:8f:00:4c:06:55:49:d9:54:ff:85:c7:9b:f8:2d:aa:
8f:df:82:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:46 2025 by rpki-client