Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DaX-NX5BipklTu-IO9L_gZ79nHY.roa
File: DaX-NX5BipklTu-IO9L_gZ79nHY.roa (raw, json)
Hash identifier: +As3h+tPAiZQL83GDZpZy7b7k2M1GUjLc9YEBvo4Ukg=
Subject key identifier: 0D:A5:FE:35:7E:41:8A:99:25:4E:EF:88:3B:D2:FF:81:9E:FD:9C:76
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190A19B18859071892D1A8CCEDAB645F826
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DaX-NX5BipklTu-IO9L_gZ79nHY.roa
Signing time: Thu 11 Jul 2024 11:43:34 +0000
ROA not before: Thu 11 Jul 2024 11:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60647
IP address blocks: 2a0f:1201::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Jul 2024 07:14:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:9b:18:85:90:71:89:2d:1a:8c:ce:da:b6:45:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 11 11:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0da5fe357e418a99254eef883bd2ff819efd9c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:24:7d:24:d4:01:e5:22:84:b8:5a:b2:2f:d4:
c3:98:d1:43:96:62:67:bf:08:bc:c3:fe:7e:6e:32:
c0:cd:90:16:70:5b:fb:35:fd:24:4b:50:c3:1a:72:
0d:ca:6c:0e:b6:74:11:0a:77:0e:33:61:b6:6e:0c:
2a:bf:98:c2:b9:f0:c1:3b:68:bc:8e:72:ec:e5:4e:
81:d5:ce:68:47:77:77:81:e6:2b:d7:ce:26:51:0a:
8a:92:06:53:22:bb:03:b8:1c:91:ae:c3:4b:24:ab:
87:1a:52:34:8a:1d:83:06:5d:43:61:54:58:01:6c:
3d:de:c0:79:c3:8d:2c:d8:33:c2:da:b2:a8:af:14:
03:6a:af:5a:c3:b8:d6:06:7b:a4:b6:d3:ac:b1:a6:
ab:d3:06:d9:54:6f:d1:65:f8:82:45:b0:60:87:dd:
5b:de:41:7c:59:49:72:f9:b4:c8:15:d3:f2:56:25:
54:2b:a5:43:c2:3f:53:5f:1e:6d:a6:45:47:b3:24:
b0:52:7e:63:d5:b6:73:97:f3:d6:c6:fe:a3:39:33:
40:81:77:37:82:7d:ce:e5:cd:0b:c1:c2:ed:43:16:
09:f2:1c:af:db:c3:19:ba:2a:2f:31:b2:e8:26:3b:
53:24:58:47:2b:4e:7f:60:5e:0f:9a:d7:f4:55:8b:
50:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A5:FE:35:7E:41:8A:99:25:4E:EF:88:3B:D2:FF:81:9E:FD:9C:76
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DaX-NX5BipklTu-IO9L_gZ79nHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1201::/32
2a0f:3d84::/32
Signature Algorithm: sha256WithRSAEncryption
2b:29:12:b1:26:81:9f:56:08:dd:97:83:76:49:17:7d:e5:a1:
8a:39:98:b4:20:8b:7a:cd:cd:e4:62:b4:a6:cf:e3:7e:32:3d:
0c:2c:99:bf:24:c7:87:0f:02:1e:14:d2:32:fd:8e:5b:30:47:
79:8e:46:e1:ee:73:63:01:a7:de:87:e6:55:c8:49:82:6b:26:
0f:7a:44:57:c3:30:88:77:3c:80:0f:f6:16:f6:1e:51:f5:e6:
01:23:ad:df:e0:f1:4b:ea:38:be:db:96:ce:1e:f3:83:e8:f8:
ba:93:62:f9:56:6e:98:9a:54:a0:3f:14:02:42:11:a8:7e:25:
de:03:40:b4:82:cb:71:c8:51:20:47:24:b0:f0:db:44:05:3d:
6b:73:85:04:3f:ac:80:c6:f6:65:43:c5:45:b1:fc:54:85:45:
33:ac:fc:51:fd:8b:01:6c:c4:07:6d:41:b6:68:fa:20:92:09:
49:0e:fa:3d:3e:8d:5c:8e:f3:a0:aa:a3:30:8c:55:22:dd:0e:
c0:f5:3c:e4:2d:d1:98:dc:fd:8b:81:60:32:73:d8:74:69:68:
0d:21:2e:e8:b2:5a:0b:45:5a:6a:6f:f8:c9:87:c5:77:76:84:
92:7d:b1:8c:71:52:74:6c:bc:d6:8d:c4:3b:01:92:6d:8b:76:
8d:9e:57:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:19 2025 by rpki-client