Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JX_YxmdmrQe6lCxYE4tm6q47fVg.roa
File: JX_YxmdmrQe6lCxYE4tm6q47fVg.roa (raw, json)
Hash identifier: pNXpLqxzX80EwAHtTsRe8167teTljM82SmTy/tB9YGA=
Subject key identifier: 25:7F:D8:C6:67:66:AD:07:BA:94:2C:58:13:8B:66:EA:AE:3B:7D:58
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01918E8E196171686CE6C0542F94699F8385
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JX_YxmdmrQe6lCxYE4tm6q47fVg.roa
Signing time: Mon 26 Aug 2024 11:59:22 +0000
ROA not before: Mon 26 Aug 2024 11:59:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152631
IP address blocks: 2a0f:3f80::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 23 Oct 2024 17:41:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:8e:19:61:71:68:6c:e6:c0:54:2f:94:69:9f:83:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 11:59:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=257fd8c66766ad07ba942c58138b66eaae3b7d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:03:37:e6:55:6a:5a:96:3c:39:ed:3d:b0:3f:
17:49:1f:3b:68:91:0e:93:36:87:d6:47:fd:61:1e:
0a:3f:bb:b6:b9:05:c3:c2:bc:4f:2f:ea:9f:a4:42:
3a:9b:8f:88:db:19:b6:f3:b2:0a:a7:b9:14:68:18:
d9:17:6c:cf:e7:52:1d:70:d1:0f:a0:d8:80:92:c6:
f4:e3:ca:63:c9:10:d5:1c:04:8c:16:f6:e8:d0:9e:
bb:70:f6:8d:b4:82:89:fd:d8:1d:4d:a4:52:aa:35:
cf:1e:59:17:3a:7d:b6:db:87:af:3a:fd:79:98:e8:
f4:82:99:2f:0c:06:32:58:d5:f0:a2:e3:9e:89:b1:
f7:18:4c:fe:42:05:4c:4b:63:52:be:5e:61:50:56:
a2:b6:5a:db:84:83:51:e2:7b:ba:7e:07:03:d6:d6:
29:aa:d4:91:00:d6:8a:3b:76:8c:c0:60:9a:70:0a:
dd:2e:b0:25:28:e1:61:ee:7f:41:a9:37:99:ff:03:
1a:ff:50:e3:52:a7:c0:5a:26:0f:db:de:4d:8c:25:
6a:fe:19:82:9a:c3:3a:26:2f:64:00:07:d0:42:69:
d7:25:50:03:bb:22:88:da:de:de:4d:eb:fd:fe:84:
4a:6c:4e:a6:e4:1c:69:70:26:b4:9f:5b:b7:10:82:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:7F:D8:C6:67:66:AD:07:BA:94:2C:58:13:8B:66:EA:AE:3B:7D:58
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JX_YxmdmrQe6lCxYE4tm6q47fVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3f80::/29
2a0f:8100::/29
2a0f:9e00::/29
2a0f:b400::/29
2a10:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:50:54:6a:f5:ed:39:bc:23:f1:25:31:14:a7:61:50:40:0a:
66:3b:42:8c:47:ef:54:11:17:80:43:29:74:56:96:ce:8b:e2:
5f:23:2f:db:6e:97:fb:c7:5a:2b:c5:aa:83:40:71:4f:71:c4:
90:8d:bb:30:36:e0:07:6b:0f:2f:d3:8b:6b:60:fc:46:ef:b6:
de:ae:a6:e1:09:72:61:e9:9d:79:db:55:87:4a:4f:63:93:8d:
c0:93:6f:5a:65:4b:8f:db:83:a9:b3:cd:6e:f8:67:12:01:59:
bb:54:a3:3a:8c:b0:d1:10:d2:ea:95:6b:65:d7:46:3d:cb:62:
37:e2:6b:98:c3:13:e5:b4:2d:09:08:ee:99:aa:2e:24:d0:0c:
60:98:fb:7e:02:4c:57:d9:90:74:1b:ae:06:2e:23:42:1b:1b:
bc:0f:99:bb:58:2f:34:20:d4:9d:69:5d:5f:5e:73:68:fc:71:
fb:d3:2d:7a:3c:e6:f7:6d:9b:ff:77:b9:bd:3e:e3:3b:15:f1:
fc:63:d7:b2:a0:87:ae:fd:37:8d:89:2a:70:b5:ab:f9:72:a2:
1f:57:37:37:3c:e5:f3:7d:65:56:1f:9c:6b:8b:46:d4:c2:b1:
f3:70:cf:51:68:d0:90:b2:6d:2e:b9:00:86:5a:2b:6b:28:8e:
e5:f2:25:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:49 2025 by rpki-client