Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FH-BzBBb5Momf_lTy00IM_TsqR0.roa
File: FH-BzBBb5Momf_lTy00IM_TsqR0.roa (raw, json)
Hash identifier: otFjZMQaFf25aIDFsI9GUdDy4VyleRUSHplJk0meGOM=
Subject key identifier: 14:7F:81:CC:10:5B:E4:CA:26:7F:F9:53:CB:4D:08:33:F4:EC:A9:1D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019228AB5273D546366370069BB306D13B66
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FH-BzBBb5Momf_lTy00IM_TsqR0.roa
Signing time: Wed 25 Sep 2024 10:12:49 +0000
ROA not before: Wed 25 Sep 2024 10:12:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a09:17c4::/32 maxlen: 32
2a0a:2d06:66::/48 maxlen: 48
2a13:8c84::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 26 Sep 2024 15:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:28:ab:52:73:d5:46:36:63:70:06:9b:b3:06:d1:3b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 25 10:12:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=147f81cc105be4ca267ff953cb4d0833f4eca91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:e6:1d:9c:1e:8b:a1:b7:5d:6f:8b:6a:49:
9e:e6:69:32:b8:b1:3c:71:0c:ec:0b:9f:84:ff:0b:
89:67:0d:c5:33:40:93:03:46:e8:e9:e8:ee:9a:5b:
87:fc:85:5d:18:5d:a9:51:60:f9:83:5e:4f:66:9e:
60:ea:f1:f8:11:4c:27:01:9f:7d:bc:21:60:64:9b:
f8:24:97:d4:2c:b7:bf:d9:fd:e0:cd:5a:8b:d0:59:
16:3b:d3:dc:da:93:60:cd:56:01:75:36:23:d0:44:
cd:1f:f1:42:e6:45:10:7c:52:46:eb:ae:1c:e1:15:
33:b2:7d:d2:5f:b5:21:1b:bb:e8:88:b1:b6:95:cf:
51:71:75:25:a7:d1:68:a9:c5:6f:55:78:bb:46:f0:
00:56:08:3a:87:e1:aa:2c:8f:ea:d2:f2:36:36:26:
2f:17:7f:ad:f7:6b:2c:37:34:6e:b1:5d:d3:3f:a5:
75:08:b2:90:21:72:eb:f9:78:96:a9:a6:3c:df:ae:
e0:3a:bd:2a:87:cc:46:5c:f9:50:0b:58:c6:f8:62:
03:5a:79:13:3f:0d:de:90:18:b0:07:d7:01:65:28:
96:e0:21:b1:71:07:ea:f3:f8:46:81:0d:a3:0b:8a:
5f:40:18:76:73:05:57:d8:5e:ee:4f:bc:3a:1e:55:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7F:81:CC:10:5B:E4:CA:26:7F:F9:53:CB:4D:08:33:F4:EC:A9:1D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FH-BzBBb5Momf_lTy00IM_TsqR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c4::/32
2a0a:2d06:66::/48
2a13:8c84::/32
Signature Algorithm: sha256WithRSAEncryption
1c:01:bb:a3:21:44:26:ef:0c:57:f8:37:f9:cf:dc:cc:78:af:
04:df:4d:c6:9b:90:d8:94:29:3d:7e:fe:c4:91:93:df:9e:1d:
f0:5f:8e:85:20:6c:7c:49:19:32:84:bf:be:88:2d:fa:da:36:
73:72:50:90:df:85:ca:8d:71:54:dd:24:52:52:50:4e:40:cb:
a0:82:64:d5:f2:a0:71:8f:0d:cd:aa:46:48:18:ea:3a:5d:6c:
e5:4c:44:5f:e2:c0:c8:10:ba:84:af:5f:3f:aa:31:5a:d0:60:
7f:13:3a:ba:e4:9d:97:06:4c:30:b1:4b:6c:a4:05:11:08:7e:
a3:93:f1:8f:6e:e1:01:7a:bd:b2:ea:29:03:b2:98:8a:cd:74:
13:ab:19:ec:43:67:83:0c:8f:35:d6:a1:26:83:58:e2:2d:49:
37:09:1d:1c:39:85:51:f8:2f:da:ef:db:f8:e0:2d:b0:e1:62:
38:2b:53:b9:31:17:21:83:ee:6b:5c:39:e1:b5:6d:2c:8a:8b:
d6:ad:54:72:8a:68:87:13:5a:12:15:31:2c:02:4f:94:83:aa:
e3:c8:28:61:d0:dc:80:97:44:59:97:1c:e6:4b:19:2c:41:56:
50:70:34:4e:da:d3:1e:7a:e4:6e:d2:e4:16:11:a2:d1:1b:35:
b6:68:bb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:15 2025 by rpki-client