Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D1hLbQYtRtTa622ERRkediE-H6I.roa
File: D1hLbQYtRtTa622ERRkediE-H6I.roa (raw, json)
Hash identifier: MFUNm/mSNEe/1AZ9j1wEsaaVMGmi8cP20xPDzo8qgKU=
Subject key identifier: 0F:58:4B:6D:06:2D:46:D4:DA:EB:6D:84:45:19:1E:76:21:3E:1F:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01959043141EF13861E3178FB373B22B1D8F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D1hLbQYtRtTa622ERRkediE-H6I.roa
Signing time: Thu 13 Mar 2025 16:07:49 +0000
ROA not before: Thu 13 Mar 2025 16:07:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:1fc0::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Mar 2025 14:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:43:14:1e:f1:38:61:e3:17:8f:b3:73:b2:2b:1d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 13 16:07:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0f584b6d062d46d4daeb6d8445191e76213e1fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:dd:4b:5f:0b:d8:50:89:b0:a2:7c:b5:cb:
63:bf:41:24:ba:fa:3a:63:b4:e2:73:5d:8c:31:83:
a5:b7:c1:a6:c7:53:f2:43:f9:e5:68:4f:a4:c6:14:
df:ae:cd:00:9c:24:4e:10:c4:e5:ce:0a:73:c3:ca:
59:7f:3b:be:93:f6:76:50:1d:8d:2e:8b:56:d5:82:
ae:c4:ad:f1:77:6a:06:09:2c:a3:9e:40:3f:b2:be:
6e:9c:17:76:ab:dd:ef:ff:2d:57:43:60:e7:0a:3b:
3b:02:f9:44:ef:bc:53:5d:e4:aa:62:52:51:6e:68:
63:6f:62:d2:7f:c8:ba:ac:d6:fa:e1:39:1c:01:6d:
97:67:c9:27:f9:50:19:f8:59:a8:33:ea:52:43:81:
11:20:c2:d7:d0:4b:cc:45:1a:39:39:df:9c:be:95:
97:73:ec:a8:c9:d0:2d:10:40:3d:7b:91:77:23:b4:
6f:2e:6f:57:fa:4f:13:cc:e8:c2:09:3c:7b:c6:85:
ae:3e:ed:76:bd:82:9b:55:e0:1e:41:6f:c5:67:ee:
ea:26:c0:12:7b:4d:8c:a9:bc:54:a9:4b:ff:5f:b2:
db:73:b8:78:9b:21:55:56:80:b1:08:aa:62:c6:97:
f7:09:3e:46:eb:08:c4:49:53:b3:ac:7f:e2:ea:da:
c1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:58:4B:6D:06:2D:46:D4:DA:EB:6D:84:45:19:1E:76:21:3E:1F:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/D1hLbQYtRtTa622ERRkediE-H6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1fc0::/29
2a0f:e600::/29
2a10:7100::/29
2a11:3f80::/29
2a13:8f00::/29
Signature Algorithm: sha256WithRSAEncryption
96:e3:07:03:85:4d:9e:fb:01:d7:b2:1a:13:03:da:ee:44:e2:
36:9a:7e:cb:61:aa:7b:42:f0:d5:45:9d:86:4c:13:21:95:1c:
6a:ba:ef:43:ba:75:68:c7:d9:87:4e:a2:90:01:e2:c0:de:2a:
ac:4e:61:9e:fa:da:a3:97:1d:80:ab:4f:83:43:21:d7:9b:aa:
5a:f2:c6:c2:7d:ad:c1:9b:fb:93:77:51:29:3d:c6:e9:5f:1d:
e9:09:b4:74:35:95:11:d3:d2:29:0b:ae:15:f0:a8:e4:02:e1:
33:f2:e6:02:7f:6e:fc:4e:03:29:54:7a:0b:00:b1:3e:8d:d4:
3a:53:06:52:e7:12:09:6e:60:e7:c9:7b:2c:de:76:aa:92:3e:
93:a2:6c:dc:df:99:0e:4d:b5:12:27:41:62:6e:1d:64:e9:a9:
b9:95:5d:21:6a:ae:ea:24:66:ca:65:8a:d6:51:9f:6b:6a:3d:
5c:c7:f7:4a:16:e0:f8:0c:d7:60:33:57:96:26:d6:b6:e4:17:
8f:8e:b9:81:b1:68:09:08:d5:9b:08:f2:d3:f9:e8:55:1f:10:
84:cb:7c:c0:e0:7e:ce:62:86:7b:4f:ff:ac:fa:64:68:c9:4c:
b0:7b:cc:cb:d9:46:85:86:2e:a2:8d:aa:1e:c0:ca:64:5f:e1:
2b:24:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:27:13 2025 by rpki-client