Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MDASz4finxCpYS8b6ycqEWWHX38.roa
File: MDASz4finxCpYS8b6ycqEWWHX38.roa (raw, json)
Hash identifier: 6T2Xso3WDXhPh5Ur5PQvlFa5Yro3tnKH6Dc/rM9BbVM=
Subject key identifier: 30:30:12:CF:87:E2:9F:10:A9:61:2F:1B:EB:27:2A:11:65:87:5F:7F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D16E049C158EA1340F7C2F1488F12459F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MDASz4finxCpYS8b6ycqEWWHX38.roa
Signing time: Wed 17 Jan 2024 10:03:34 +0000
ROA not before: Wed 17 Jan 2024 10:03:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:a5c0::/29 maxlen: 29
2a06:a600::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0a:1400::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0e:2240::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:1380::/29 maxlen: 29
2a0f:1580::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:bc00::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:dd40::/29 maxlen: 29
2a0f:e0c0::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:7d80::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 21 Feb 2024 11:08:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:16:e0:49:c1:58:ea:13:40:f7:c2:f1:48:8f:12:45:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 17 10:03:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=303012cf87e29f10a9612f1beb272a1165875f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:04:75:78:85:ab:e0:cd:e5:70:cb:4e:bf:ce:
68:63:56:2a:e2:63:c2:a2:df:41:6c:54:f6:a6:fa:
79:6b:24:af:42:bf:5c:14:ef:18:30:61:46:4b:aa:
99:63:1b:21:ae:ae:cf:bc:3d:91:c3:45:0a:d4:9c:
9d:df:1a:da:14:d1:a1:48:18:c7:f1:c1:67:e7:fa:
d0:99:45:5f:5b:4b:d2:59:7b:bb:e9:06:4b:bb:6a:
03:e8:80:7e:5b:36:a1:51:c2:b9:e9:5e:95:cd:69:
14:de:18:66:81:e9:62:fd:96:97:b7:04:25:ce:9e:
67:c2:1e:76:50:ab:0f:70:73:a5:37:c9:80:f3:0b:
8d:6a:46:83:40:73:df:4e:47:a8:4a:1f:30:fd:e9:
c4:62:3f:09:eb:07:d8:d6:97:b0:1b:61:73:3f:9e:
c6:70:09:64:9e:0b:c3:4a:db:f6:7c:4a:ec:55:e2:
d3:71:85:27:c7:9f:96:b5:7c:b0:eb:c1:f7:d9:55:
92:9f:8b:45:9a:40:6b:04:70:1e:57:54:6f:f9:53:
d9:6e:4c:23:67:9d:7d:8f:21:85:c2:3d:dc:16:01:
2d:34:75:bf:d0:e1:b3:15:9f:a8:e0:19:3b:ff:b6:
1c:a6:0a:ca:9c:a6:6a:c1:bb:7a:35:0a:4c:29:4d:
d4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:12:CF:87:E2:9F:10:A9:61:2F:1B:EB:27:2A:11:65:87:5F:7F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MDASz4finxCpYS8b6ycqEWWHX38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:a5c0::/29
2a06:a600::/29
2a06:dfc0::/29
2a0a:1400::/29
2a0c:4880::/29
2a0e:2240::/29
2a0e:5a80::/29
2a0e:9b00::/29
2a0f:a00::/29
2a0f:1380::/29
2a0f:1580::/29
2a0f:2300::/29
2a0f:3f80::/29
2a0f:7f00::/29
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:b400::/29
2a0f:bc00::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:dd40::/29
2a0f:e0c0::/29
2a0f:e140::/29
2a0f:e540::/29
2a0f:e640::/29
2a0f:ec00::/29
2a0f:ee00::/29
2a10:67c0::/29
2a12:d540::/29
2a13:200::/29
2a13:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
1b:39:1b:a8:fc:7b:ce:38:c0:45:2c:bb:89:a7:eb:c6:92:90:
34:3c:28:f6:00:cb:ed:01:62:07:45:25:30:f5:34:25:ba:d6:
d6:37:3e:cf:bf:db:e7:1c:cc:f5:e4:df:c6:49:e8:d7:3e:a8:
69:63:c3:ac:06:95:33:4d:63:66:44:a6:b3:12:48:ea:96:1f:
88:ad:3a:ef:8f:0a:44:99:8b:8a:07:49:b3:2a:7a:f4:d0:e8:
a9:bc:5a:68:56:1d:94:ab:3a:1f:13:ca:06:da:7e:e9:31:01:
e9:f6:25:0d:20:d7:1e:be:3f:5e:2e:24:02:cf:a0:17:fe:3e:
08:63:da:27:26:c1:9f:63:95:13:3f:4f:74:03:ec:26:8d:e6:
83:d3:80:5a:6b:3a:89:ba:25:58:4b:8b:5e:52:3c:e8:1c:57:
60:7a:f2:45:30:de:b1:a0:23:78:f7:46:93:69:98:13:f9:f4:
48:7d:9f:85:75:7a:ca:43:35:90:a7:c8:90:10:6d:09:00:23:
86:16:9d:f1:06:4b:be:f4:77:16:db:25:f4:c0:fb:a4:1a:10:
7b:92:e4:cf:19:3d:c2:66:54:bb:fe:ff:03:9b:6f:87:e4:9d:
cf:ba:d5:74:1c:0f:a1:af:98:ae:67:af:37:83:43:0f:51:55:
76:37:f3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:12:15 2025 by rpki-client