Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CigEHwhoYt2aysE513sV9k5_fkk.roa
File: CigEHwhoYt2aysE513sV9k5_fkk.roa (raw, json)
Hash identifier: GFKhQs+eiYgViNzm1DkPhAdPd+IKALr90UH+W4IzkdU=
Subject key identifier: 0A:28:04:1F:08:68:62:DD:9A:CA:C1:39:D7:7B:15:F6:4E:7F:7E:49
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193909650A19608417259127B86EF6934D8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CigEHwhoYt2aysE513sV9k5_fkk.roa
Signing time: Wed 04 Dec 2024 07:33:10 +0000
ROA not before: Wed 04 Dec 2024 07:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0f:14c0::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 10:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:96:50:a1:96:08:41:72:59:12:7b:86:ef:69:34:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 4 07:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0a28041f086862dd9acac139d77b15f64e7f7e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:e2:85:7a:f6:ce:51:b9:f8:25:09:94:98:
de:96:54:df:2a:90:a0:0b:c4:68:e2:5d:b2:3a:e5:
bb:60:b3:37:da:c1:4e:a3:41:06:4d:34:f3:f6:a2:
1c:d0:ed:56:f7:ca:5b:12:dd:07:63:ca:13:c3:56:
ce:33:46:2a:32:2d:96:80:b0:9b:05:89:24:fd:4a:
25:ff:08:3e:8b:06:9f:1e:93:78:0e:49:9a:48:ee:
d3:f8:32:80:d6:90:e7:ac:f0:83:76:94:7e:1a:11:
e8:19:13:5c:4e:59:9d:1a:ed:86:49:cf:3e:3a:5a:
d7:25:1f:f0:9b:69:c3:e6:75:3e:82:62:0b:ed:3d:
ef:b5:7e:62:0f:04:2f:64:fe:7e:dd:31:2a:cb:34:
b6:d1:9f:c3:b6:42:26:4c:0b:b2:61:ea:72:6b:97:
c4:e9:27:b5:18:28:7f:1e:0d:1c:e9:e1:62:0e:a4:
b7:71:c8:f7:aa:55:13:16:cd:2a:11:ec:ad:c3:ff:
9d:09:a2:ff:e3:e9:06:54:fa:b3:10:a6:83:3b:ee:
52:86:2b:a6:4e:9c:6d:06:00:25:3e:a7:8a:03:bf:
94:6d:ae:0f:27:4a:fb:cf:94:0a:2c:e1:d2:5e:da:
77:83:0c:c3:89:fd:c0:d8:40:41:8a:83:19:d4:d3:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:28:04:1F:08:68:62:DD:9A:CA:C1:39:D7:7B:15:F6:4E:7F:7E:49
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/CigEHwhoYt2aysE513sV9k5_fkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:14c0::/29
2a10:3440::/29
Signature Algorithm: sha256WithRSAEncryption
8e:94:60:ba:bd:ee:bc:62:d4:1e:18:a5:c7:0c:21:d2:37:77:
ec:d8:5f:4f:e9:d0:93:f8:f9:48:c0:54:e3:b6:08:c9:36:ab:
40:c3:73:d7:5c:08:b9:59:6b:da:1c:04:c0:b1:58:ea:1b:ac:
6e:e7:1a:cd:97:a2:30:3f:3a:49:79:ba:13:14:3a:a9:64:34:
6c:a2:6d:95:31:c1:40:df:28:9f:3a:06:8e:de:6f:09:47:fa:
6b:6a:f1:63:a7:ff:6e:c6:86:8e:43:94:0e:39:f7:ef:f2:29:
2d:fe:88:28:9b:7d:dc:f1:16:ea:c7:8e:d0:ea:ba:95:73:6c:
bd:15:96:2f:a2:13:67:1d:6d:b9:32:39:86:22:b6:7d:3b:0c:
5d:86:31:b0:b3:cc:40:01:70:c2:b5:e8:41:41:27:a3:4b:d9:
f1:61:4a:60:b8:b0:85:71:7a:70:c5:a6:9b:1b:70:fb:9c:34:
91:ce:e2:1d:09:4d:d9:a1:81:43:66:c0:88:ea:17:58:b0:6a:
e4:69:42:af:65:af:c3:06:80:d1:bf:8c:6f:12:9c:df:af:e4:
44:ce:6e:2e:c6:dd:27:cd:ba:6f:4d:b2:5d:f2:6e:9b:24:0a:
7c:6f:91:95:4b:82:82:33:de:78:fa:6b:74:48:9d:87:56:67:
bb:bc:31:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:53 2025 by rpki-client