Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CCHiYjUj0OLj6XI8DUqdEsKIGMM.roa
File: CCHiYjUj0OLj6XI8DUqdEsKIGMM.roa (raw, json)
Hash identifier: 1nJtmBa/3CIZgo8xH2yMKuHTcchNzofO65sRz6lNyn4=
Subject key identifier: 08:21:E2:62:35:23:D0:E2:E3:E9:72:3C:0D:4A:9D:12:C2:88:18:C3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01944686FE121F5A211F476A14A95BCE2B6C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CCHiYjUj0OLj6XI8DUqdEsKIGMM.roa
Signing time: Wed 08 Jan 2025 15:27:19 +0000
ROA not before: Wed 08 Jan 2025 15:27:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 153332
IP address blocks: 2a13:8c80::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Feb 2025 11:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:86:fe:12:1f:5a:21:1f:47:6a:14:a9:5b:ce:2b:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 8 15:27:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0821e2623523d0e2e3e9723c0d4a9d12c28818c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:f7:82:42:1b:8b:df:a5:3a:28:e9:5c:d2:
7b:78:d3:d5:d2:53:ee:ac:78:eb:cd:9a:f8:ae:b9:
9f:67:78:e1:8a:2e:ad:ee:fa:06:8c:c0:66:84:9e:
ab:d1:eb:e7:58:af:a3:4a:41:11:0a:ec:4a:be:4a:
a4:19:87:e0:63:17:bb:c5:06:ce:21:96:75:73:dc:
94:09:5c:77:2c:ed:36:ee:e3:70:a7:57:5a:a1:e7:
f1:ea:16:25:97:10:e6:8a:83:35:36:83:32:a1:a8:
91:15:41:ef:f7:7c:48:15:d1:06:c5:bb:93:89:bf:
4b:74:5d:c0:c4:67:30:5c:d4:b8:ea:16:a1:e3:65:
44:da:16:14:e9:41:25:7c:72:fd:45:6f:78:fe:d4:
30:a9:c0:51:36:c6:52:c7:b1:8c:d7:b2:dc:40:84:
66:ba:38:d0:db:3a:b6:0d:64:1a:83:59:9a:90:dd:
67:87:49:98:95:28:87:0b:87:b4:c6:f7:c0:a2:7f:
ce:3a:0f:20:79:01:39:3d:93:28:a5:77:27:8d:da:
0b:0c:b9:e0:21:dd:7f:15:45:1a:df:48:77:8f:96:
cb:9c:2a:d6:ab:55:87:14:e9:59:c1:f7:c4:81:de:
29:47:17:3b:f5:05:6c:3b:eb:ce:e7:19:d8:b8:38:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:21:E2:62:35:23:D0:E2:E3:E9:72:3C:0D:4A:9D:12:C2:88:18:C3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CCHiYjUj0OLj6XI8DUqdEsKIGMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8c80::/32
Signature Algorithm: sha256WithRSAEncryption
16:75:b1:db:81:c4:cb:43:cb:18:b5:bd:f3:56:42:83:d1:4e:
ed:67:8d:cf:0e:c6:e0:07:c8:57:5c:39:01:12:65:e5:99:8c:
73:dc:c0:59:af:77:16:ee:b6:49:7f:f8:9b:2b:ed:01:02:06:
f8:bc:ba:a6:d1:21:eb:d2:9c:55:b7:20:8a:84:da:61:3a:ba:
70:9f:ef:f2:54:d2:0a:b7:85:32:25:83:8c:59:15:9e:0f:1a:
a8:2a:91:a0:83:c5:87:bd:aa:23:a0:f4:89:39:32:44:f3:18:
ba:ab:46:79:36:f5:48:85:6a:39:cf:99:d8:dd:3f:92:fc:e3:
19:5e:4b:f9:bf:44:95:58:dc:e1:57:6c:6e:88:f8:3d:28:37:
2b:01:b3:24:78:f4:88:2d:48:07:54:1b:e5:36:7f:a4:37:01:
27:96:df:b2:e2:bf:cc:aa:de:86:9e:39:76:71:75:4a:b9:dc:
25:06:65:67:1a:c6:23:40:07:50:00:78:a8:ee:6e:f1:90:12:
88:62:d9:52:98:a1:14:e7:9a:2c:16:85:81:ff:9a:ab:c8:7b:
b3:09:32:2c:66:64:e2:bf:13:3c:00:a9:47:c4:61:73:c9:37:
2e:e4:b0:f7:c7:94:e4:d1:0f:43:ea:9e:0c:91:0e:fa:4c:8e:
56:19:e0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:04:35 2025 by rpki-client