Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dc7CDjS4OB73Pw2TwgVFPTmHXo8.roa
File: Dc7CDjS4OB73Pw2TwgVFPTmHXo8.roa (raw, json)
Hash identifier: er/fUCTNanvW5PilZDfwSSXprJZqSYtImsLOKF7AHXg=
Subject key identifier: 0D:CE:C2:0E:34:B8:38:1E:F7:3F:0D:93:C2:05:45:3D:39:87:5E:8F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190C083151968F8AB32174EF8B032ECE8B3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dc7CDjS4OB73Pw2TwgVFPTmHXo8.roa
Signing time: Wed 17 Jul 2024 11:45:34 +0000
ROA not before: Wed 17 Jul 2024 11:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a10:3440::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 18 Jul 2024 07:40:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c0:83:15:19:68:f8:ab:32:17:4e:f8:b0:32:ec:e8:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 17 11:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0dcec20e34b8381ef73f0d93c205453d39875e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:be:46:74:c6:de:48:d4:d7:ab:63:49:0d:a5:
62:56:c3:29:22:c1:1a:d6:1c:d0:5e:4d:81:96:1c:
29:3f:97:3e:11:52:84:64:2a:63:83:36:fe:ba:57:
10:67:f0:f7:93:52:85:0c:dd:fa:f8:d5:41:05:9b:
ea:bd:2f:a8:4e:6e:8f:39:61:f2:4a:78:be:69:9a:
62:01:08:e9:92:67:44:4b:af:7b:bc:67:8b:89:d2:
b6:54:86:45:26:9e:43:f2:7a:3e:54:d0:dd:b6:95:
fa:1f:d3:10:0d:22:25:67:28:f1:86:2a:4f:af:06:
88:b9:66:d5:9e:8d:f4:b6:fe:a7:75:19:7e:c6:ae:
c3:90:d0:2a:51:ed:b3:e4:22:bc:63:82:87:a5:8a:
ae:5a:eb:cb:1c:49:7f:0c:2e:79:d8:5c:d1:e0:f5:
42:2a:ad:fd:db:50:2b:3b:07:c9:3b:23:fe:bf:f7:
eb:ad:70:01:85:fe:27:8c:e5:45:86:b3:80:73:af:
8a:ee:75:a7:07:1d:90:a1:27:1f:fa:55:64:a6:6c:
79:20:13:a4:f5:7a:2f:07:a8:a0:8e:ce:bb:a7:98:
0f:7b:1e:62:f5:56:d9:61:62:a1:fb:84:df:0a:58:
0f:46:bd:04:1c:b5:73:94:77:be:ac:c0:44:ae:54:
4f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:CE:C2:0E:34:B8:38:1E:F7:3F:0D:93:C2:05:45:3D:39:87:5E:8F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Dc7CDjS4OB73Pw2TwgVFPTmHXo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3440::/29
Signature Algorithm: sha256WithRSAEncryption
c5:fb:df:b1:57:30:e4:57:d2:b5:68:60:52:38:78:e7:3b:c5:
6e:67:74:4b:b5:40:aa:83:48:1e:08:f8:2d:aa:e6:5c:5a:14:
de:2e:93:f8:3b:be:b1:2f:23:0e:56:d7:9b:c8:00:b3:15:81:
95:c8:e4:be:8a:4e:f1:f0:2e:a4:7d:65:8e:8d:06:f1:8f:85:
42:6b:e9:26:f6:0b:04:1a:a8:89:bc:0a:ec:40:52:e3:63:56:
2a:71:a3:a1:07:1b:a2:b6:39:c9:fb:87:a8:4c:22:30:a6:43:
97:ac:d2:f6:09:fa:ce:4b:bf:06:fd:09:3b:6f:98:ac:3d:97:
54:d1:86:45:07:fc:8d:ce:3a:b2:80:e6:d6:e3:d9:c0:ba:e5:
65:45:03:63:ac:db:bb:62:be:34:d0:d4:f3:4e:d9:58:68:8e:
6e:f2:e0:01:88:6b:42:d5:a5:b4:43:05:1e:f3:21:82:34:40:
47:57:8a:63:22:bd:f7:00:6b:63:bb:9e:2b:0b:8e:bd:65:bd:
fb:e8:0d:ce:e5:50:3c:59:02:9a:49:95:0a:70:27:76:a1:af:
ff:29:f6:c5:4c:b0:3e:f4:8d:c8:e0:57:56:89:e7:05:7c:2f:
7b:47:12:38:41:f9:cf:33:ee:0b:b4:d4:90:93:63:f5:6f:41:
cd:2e:e0:29
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZDAgxUZaPirMhdO+LAy7OizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNzE3MTE0NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZGNlYzIwZTM0YjgzODFlZjczZjBkOTNjMjA1NDUzZDM5ODc1ZThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7b5GdMbeSNTXq2NJDaViVsMpIsEa
1hzQXk2BlhwpP5c+EVKEZCpjgzb+ulcQZ/D3k1KFDN36+NVBBZvqvS+oTm6POWHy
Sni+aZpiAQjpkmdES697vGeLidK2VIZFJp5D8no+VNDdtpX6H9MQDSIlZyjxhipP
rwaIuWbVno30tv6ndRl+xq7DkNAqUe2z5CK8Y4KHpYquWuvLHEl/DC552FzR4PVC
Kq3921ArOwfJOyP+v/frrXABhf4njOVFhrOAc6+K7nWnBx2QoScf+lVkpmx5IBOk
9XovB6igjs67p5gPex5i9VbZYWKh+4TfClgPRr0EHLVzlHe+rMBErlRPBwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFA3Owg40uDge9z8Nk8IFRT05h16PMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRGM3Q0RqUzRPQjczUHcyVHdnVkZQVG1IWG84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhA0QDAN
BgkqhkiG9w0BAQsFAAOCAQEAxfvfsVcw5FfStWhgUjh45zvFbmd0S7VAqoNIHgj4
LarmXFoU3i6T+Du+sS8jDlbXm8gAsxWBlcjkvopO8fAupH1ljo0G8Y+FQmvpJvYL
BBqoibwK7EBS42NWKnGjoQcborY5yfuHqEwiMKZDl6zS9gn6zku/Bv0JO2+YrD2X
VNGGRQf8jc46soDm1uPZwLrlZUUDY6zbu2K+NNDU807ZWGiObvLgAYhrQtWltEMF
HvMhgjRAR1eKYyK99wBrY7ueKwuOvWW9++gNzuVQPFkCmkmVCnAndqGv/yn2xUyw
PvSNyOBXVonnBXwve0cSOEH5zzPuC7TUkJNj9W9BzS7gKQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:48 2025 by rpki-client