Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EV40akCVbDvgTjXPDblePc0IjZ8.roa
File: EV40akCVbDvgTjXPDblePc0IjZ8.roa (raw, json)
Hash identifier: UJf7CgMrhe3LLlUkCuwjfx1oE6D4y8NylWm0l7doKPc=
Subject key identifier: 11:5E:34:6A:40:95:6C:3B:E0:4E:35:CF:0D:B9:5E:3D:CD:08:8D:9F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01920903FCBF934E4794F075E5F7475B130B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EV40akCVbDvgTjXPDblePc0IjZ8.roa
Signing time: Thu 19 Sep 2024 06:41:49 +0000
ROA not before: Thu 19 Sep 2024 06:41:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151814
IP address blocks: 2a0f:dec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 16 Dec 2024 08:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:09:03:fc:bf:93:4e:47:94:f0:75:e5:f7:47:5b:13:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 19 06:41:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=115e346a40956c3be04e35cf0db95e3dcd088d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:12:ec:f4:b1:72:44:ab:43:45:dc:c8:67:09:
eb:b7:a7:ee:d1:38:5c:ac:fe:65:11:2f:da:cc:36:
4f:ce:6e:d0:2e:10:55:57:b9:d8:1b:e8:62:c6:3a:
59:f7:47:cc:57:86:3d:00:61:c6:7e:66:2b:f6:17:
d1:39:8d:a3:23:f5:5f:e9:46:2a:33:9a:9a:8a:f7:
e4:ad:ca:6c:25:95:38:94:fa:50:9d:30:24:d5:04:
7c:29:38:03:a1:37:69:ef:7e:34:23:09:9f:cc:96:
03:c8:16:42:18:d8:40:72:d6:e1:e2:b8:b5:e6:c0:
bc:cf:b9:11:b3:6a:03:2a:18:a2:f5:3d:e9:5a:3d:
06:4d:ad:a5:51:23:6b:c8:51:8e:09:84:b6:37:c7:
6f:b4:03:52:ff:a4:e7:7e:fe:8b:f7:f1:52:8f:58:
e7:fd:77:5a:c6:18:65:7b:3c:be:25:27:47:62:07:
5e:26:b3:e9:44:4b:6c:ae:cf:80:44:9f:03:01:23:
04:53:75:08:44:7e:b0:d5:3d:7b:f7:e1:3e:4c:6b:
12:19:78:78:24:45:ee:e1:90:c2:2a:e8:09:77:c3:
fb:ff:3b:84:14:dd:7e:c7:dc:58:71:95:f6:40:a6:
06:74:d3:14:fa:78:c5:9a:01:49:a4:6e:32:8c:23:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5E:34:6A:40:95:6C:3B:E0:4E:35:CF:0D:B9:5E:3D:CD:08:8D:9F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/EV40akCVbDvgTjXPDblePc0IjZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
0b:a8:1b:f8:da:72:4c:17:5e:f6:5e:21:43:6d:60:de:e7:be:
f0:2d:6c:42:24:67:f2:2b:be:21:aa:f9:37:e9:30:df:bd:8e:
f0:51:6a:c1:5c:46:c4:e1:3c:b2:4a:62:59:e2:2a:16:95:45:
df:33:b2:09:58:0f:05:86:23:93:01:5c:93:2c:40:33:a3:e5:
bc:97:b6:94:e0:da:65:c1:4c:9c:69:2a:98:08:2d:94:fa:04:
7a:12:0f:f7:2a:ad:2b:77:17:7b:dd:e5:15:96:7e:8b:f0:1e:
e9:f2:ae:42:f7:68:28:be:06:a1:cd:58:ad:c8:79:53:a3:9a:
3d:15:e0:e1:97:f0:64:c0:e9:c9:52:6b:f1:bb:f9:d6:c4:c1:
15:65:e0:5a:56:f4:2f:39:fe:9e:f0:13:8b:0d:86:8d:13:1f:
17:b9:f0:4f:8f:d5:67:7b:11:7d:de:4c:a3:4f:9d:a0:01:2d:
2a:7e:13:61:54:07:c2:a1:6c:3f:44:4b:77:dc:ef:bc:4f:bb:
b2:ed:63:af:ea:ee:20:21:c0:2a:bf:e8:01:2d:41:ac:97:09:
36:70:00:1c:9d:51:89:87:3c:28:b7:31:c4:6d:7b:ac:5a:97:
c7:81:e4:2f:d8:52:a3:01:bd:4c:5f:82:09:f3:e0:1f:bb:09:
c0:21:36:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:55:30 2025 by rpki-client