Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DEw2B5QFiS_2_nifLinEOmPFf8M.roa
File: DEw2B5QFiS_2_nifLinEOmPFf8M.roa (raw, json)
Hash identifier: jy+hKTz3kMeuNLX3O1dUpf1MAqXNRnf9+pqy1L2d/tY=
Subject key identifier: 0C:4C:36:07:94:05:89:2F:F6:FE:78:9F:2E:29:C4:3A:63:C5:7F:C3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195277A541DEC6EAC085265F436C47B8E8E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DEw2B5QFiS_2_nifLinEOmPFf8M.roa
Signing time: Fri 21 Feb 2025 07:48:03 +0000
ROA not before: Fri 21 Feb 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214773
IP address blocks: 2a0f:1f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Feb 2025 08:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:27:7a:54:1d:ec:6e:ac:08:52:65:f4:36:c4:7b:8e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 21 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c4c36079405892ff6fe789f2e29c43a63c57fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:72:6d:ac:77:cb:1e:19:de:18:88:75:53:92:
fa:dc:16:8a:b3:bf:40:37:45:c0:86:41:79:67:29:
66:c7:30:de:ce:9d:05:d5:b2:29:59:57:da:04:be:
4e:a1:46:e8:4d:33:e2:c9:8a:c2:ee:6b:52:b9:fd:
15:34:a0:d8:c5:15:06:84:ec:70:1f:c2:65:bb:61:
2d:4b:37:fa:fd:33:79:6d:f5:b6:61:ce:e6:3b:dc:
8b:5a:ba:ed:06:c1:42:fc:7c:24:28:72:da:d3:69:
69:ba:42:98:01:52:f5:57:5c:15:d6:28:ba:0c:dc:
c2:5b:af:c5:af:ee:15:eb:2f:0a:b7:e2:f2:04:89:
b8:89:97:5f:ef:fe:1f:f3:2d:bd:76:1f:d1:3f:6f:
0c:7f:e8:8f:b2:9f:aa:67:4f:fb:ba:ae:81:da:3a:
88:67:3d:3a:dc:5f:d9:39:da:55:0d:f4:0a:40:c7:
28:0c:d1:3d:f9:13:c1:ff:d6:89:93:0e:18:ae:47:
37:f8:24:75:7c:8f:80:c0:0b:8f:9d:2d:f8:d5:66:
c8:5a:0e:2e:4d:22:c1:a3:fe:38:c1:f7:d9:d8:1e:
09:0e:bc:24:c1:93:81:4e:ba:40:c3:84:75:3c:9e:
e5:09:67:a7:dd:5c:d5:7b:3f:af:91:98:39:81:92:
33:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4C:36:07:94:05:89:2F:F6:FE:78:9F:2E:29:C4:3A:63:C5:7F:C3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DEw2B5QFiS_2_nifLinEOmPFf8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
5a:d3:4f:d2:a0:28:94:9f:35:d4:dc:d8:00:3f:ab:0f:fa:76:
c4:6e:c8:89:ba:f6:26:d0:4d:59:58:9c:4b:47:94:95:ac:a7:
46:b8:60:41:0f:85:5b:0a:5d:16:54:32:4c:0c:c1:86:f3:fd:
68:20:28:60:7f:95:d5:a1:1b:a3:3f:5a:fb:6c:80:b7:c1:24:
46:f4:d6:fb:b5:73:3f:81:3f:77:b4:ef:9c:b4:70:32:34:49:
87:e5:dd:a2:d4:43:72:12:9d:42:66:3d:2e:e4:85:00:17:1c:
10:62:68:e5:e7:eb:79:7f:5b:c7:4f:60:e5:a4:76:ca:33:60:
96:5e:c8:1d:4e:a6:3c:f6:ea:59:55:50:17:fd:9f:9f:c5:c3:
06:43:f8:66:c5:e7:39:9e:04:28:bd:5f:a8:95:60:de:e3:33:
c7:be:d0:14:eb:d9:34:0c:b2:07:ca:bb:6d:37:b5:8a:9d:dd:
f1:95:39:fd:bc:7d:11:99:fc:86:88:6b:d5:57:1d:fb:28:0b:
d9:31:1b:5b:90:bc:fd:10:b7:fb:d5:bb:63:86:5b:b6:80:14:
4c:29:5d:d5:03:35:49:cf:78:4e:a4:7d:33:c3:34:ff:26:f8:
62:fd:f9:31:2e:62:a8:fc:0d:59:05:48:2d:cc:d6:f8:3e:f1:
5b:e8:82:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:26 2025 by rpki-client