Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L8zAaEQV13Acievdu3-Z9zYaXi4.roa
File: L8zAaEQV13Acievdu3-Z9zYaXi4.roa (raw, json)
Hash identifier: MNMm4XPZaDHyHMdQbFlieJ52wTAlhq8UFOhbFuIOpmo=
Subject key identifier: 2F:CC:C0:68:44:15:D7:70:1C:89:EB:DD:BB:7F:99:F7:36:1A:5E:2E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190792927B95B05395C0F0A6B4AAF3EB2CA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L8zAaEQV13Acievdu3-Z9zYaXi4.roa
Signing time: Wed 03 Jul 2024 15:14:18 +0000
ROA not before: Wed 03 Jul 2024 15:14:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214800
IP address blocks: 2a0f:1201::/32 maxlen: 32
2a0f:3d84::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jul 2024 19:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:29:27:b9:5b:05:39:5c:0f:0a:6b:4a:af:3e:b2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 3 15:14:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fccc0684415d7701c89ebddbb7f99f7361a5e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:6e:96:e6:22:a5:ba:d1:34:c2:6f:0a:2d:
78:a7:6f:87:d5:25:9c:07:58:5a:2a:90:04:6f:4f:
e9:13:c4:a4:97:39:2e:c2:85:26:6f:98:d7:8e:d1:
5f:0e:42:44:fb:c7:0b:0f:6b:25:a9:23:96:5d:43:
90:e9:fd:63:8c:3b:8d:02:87:34:cf:75:7f:f1:7d:
8e:67:c7:d7:5f:37:e2:9d:e4:d2:30:e1:3e:b6:bc:
3d:f4:a2:ab:d6:64:59:5d:fd:c2:b7:46:58:1c:b1:
c9:4b:8b:3f:8f:f4:62:ee:32:e3:7c:c0:c3:10:32:
36:46:6e:31:55:32:dd:c4:80:a1:66:9b:d1:6f:a0:
ec:ec:f6:02:c4:fc:6a:dc:ba:64:07:d0:97:04:e7:
2d:6d:03:7a:6e:4c:30:bc:42:4f:18:f8:a5:80:fb:
d2:fa:e4:06:99:16:81:45:dc:c3:f1:a4:5b:7e:0e:
11:6c:5a:15:96:21:c6:6f:98:7b:ac:8c:95:4e:91:
63:a9:f8:f9:e6:f6:0b:68:26:a2:b2:f3:94:2b:cc:
d4:fb:56:6d:2d:96:8e:3a:f9:5b:54:6e:08:5b:81:
67:85:c1:b2:04:3d:2b:ba:9e:d5:9f:7c:20:d0:f3:
69:14:9e:65:d3:df:79:c3:68:ca:9c:6c:99:aa:3a:
8e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CC:C0:68:44:15:D7:70:1C:89:EB:DD:BB:7F:99:F7:36:1A:5E:2E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/L8zAaEQV13Acievdu3-Z9zYaXi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1201::/32
2a0f:3d84::/32
Signature Algorithm: sha256WithRSAEncryption
39:46:7d:b4:8e:e9:71:ba:ac:45:7f:c8:71:f1:42:4a:56:8c:
70:e6:54:16:70:e6:b7:4e:5b:cb:8a:25:e4:43:f2:65:86:ca:
e9:ad:dc:c7:72:6e:03:93:3d:98:45:3a:2e:cf:7b:de:e6:1c:
39:0e:34:10:e7:89:60:45:48:42:67:2e:6a:14:5d:63:c6:6f:
94:dd:1e:56:ac:f6:d5:63:f0:d9:78:3a:34:47:66:f2:d7:a9:
db:e7:8a:c6:d9:18:ca:c1:25:03:b3:91:74:5e:47:03:41:b9:
b5:c4:8e:ec:ec:0c:f3:0c:f1:5a:ad:03:03:a4:24:2d:98:cd:
42:d6:35:48:2d:c5:91:43:2b:00:80:29:24:7f:d7:d5:59:de:
d5:af:c3:48:38:0b:24:6e:bd:9a:6a:5a:f9:82:cc:06:d6:33:
2a:b8:b9:c4:97:65:38:eb:04:c4:27:c5:e2:0b:ee:68:0e:6e:
28:e2:28:45:11:26:3f:b9:d9:5f:4b:03:b4:86:9f:f6:99:3e:
46:03:41:d0:e3:01:ef:ef:86:23:a1:45:50:3b:36:7c:e1:c6:
88:fc:b6:ab:31:9e:06:bc:ce:7c:33:e0:ec:76:a9:9d:53:bd:
91:9f:ee:99:27:f0:2f:22:e4:6f:7c:43:6f:1d:0b:84:c5:11:
ab:e1:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:54 2025 by rpki-client