Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N69CWpIneauP5E50CODtYGMjoE0.roa
File: N69CWpIneauP5E50CODtYGMjoE0.roa (raw, json)
Hash identifier: Z1ObA02K3UkqOYT8ecEoq+73RBlPjdbQ+0lvkJmyUHQ=
Subject key identifier: 37:AF:42:5A:92:27:79:AB:8F:E4:4E:74:08:E0:ED:60:63:23:A0:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DCD36AA561AC89FE637EB7B804CFC074D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N69CWpIneauP5E50CODtYGMjoE0.roa
Signing time: Wed 21 Feb 2024 19:48:48 +0000
ROA not before: Wed 21 Feb 2024 19:48:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 2a0f:3d80:3::/48 maxlen: 48
2a0f:ac00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 10 Aug 2024 10:15:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cd:36:aa:56:1a:c8:9f:e6:37:eb:7b:80:4c:fc:07:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 21 19:48:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=37af425a922779ab8fe44e7408e0ed606323a04d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:09:ba:67:eb:5a:0f:8d:e1:f3:e5:ba:92:
fe:a7:d4:e4:66:82:0c:ac:41:49:ca:5b:3f:c8:a1:
51:59:f1:f2:f5:34:02:be:b8:7f:ad:b2:a7:25:e7:
28:57:21:3b:4e:bd:52:4e:ce:cc:a0:24:03:c9:fc:
48:65:07:46:4a:b1:58:a9:23:9e:35:e9:05:2f:b2:
fe:d6:65:0d:a8:5d:43:ee:d7:d1:36:54:4e:f6:a0:
93:ee:e3:87:1f:63:28:25:0d:29:71:1a:a9:54:44:
1a:6b:ec:c0:95:e9:57:63:41:3c:cb:13:8e:7b:04:
df:35:36:3b:e0:82:fe:30:83:6b:68:e4:ca:26:0f:
37:0e:57:29:e2:8b:b6:31:87:85:92:57:a1:b3:8b:
ac:2b:eb:c9:66:ff:c4:26:f6:78:bd:18:7c:f8:af:
35:6e:a6:6b:9a:04:65:b0:03:a1:fe:85:75:bd:75:
4d:be:ef:3b:15:8e:58:b1:de:a3:bc:dc:63:5b:ea:
bb:67:5e:38:e0:db:5e:f5:2a:1b:9a:32:1a:a5:2e:
67:b5:fd:00:c5:c3:7d:e7:81:e5:51:5d:31:f2:16:
b7:29:19:a5:c7:38:b2:3e:15:f6:a0:96:9d:ea:b7:
8e:96:f4:0f:1f:5f:13:c9:bc:2e:e0:51:d4:d6:4a:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:AF:42:5A:92:27:79:AB:8F:E4:4E:74:08:E0:ED:60:63:23:A0:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/N69CWpIneauP5E50CODtYGMjoE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3d80:3::/48
2a0f:ac00::/29
Signature Algorithm: sha256WithRSAEncryption
7a:bd:57:39:83:b4:6e:71:0b:42:61:c3:73:87:ad:56:f2:e4:
2a:6f:0e:f2:63:b9:44:8c:77:56:11:f3:9f:30:c7:51:50:b7:
03:5b:c8:77:cc:13:aa:0b:ac:e5:98:c3:15:c9:2a:38:f6:09:
01:f0:d3:8e:c9:8d:f0:09:ff:62:ca:29:4f:9f:bd:f1:1f:ae:
4b:5a:34:a9:26:6e:f9:35:3a:ab:d6:a8:2c:f9:5b:14:7b:38:
44:a0:f5:e4:18:86:22:5e:8b:68:a3:7e:b6:93:38:03:8a:c9:
f1:96:7b:9a:59:4e:78:63:23:39:cb:97:4b:1f:ef:83:f0:12:
4b:81:09:fd:1a:1c:25:68:9b:3b:25:04:f0:4a:e9:7b:20:07:
4f:17:6c:8f:0b:8c:5c:e8:03:ad:d2:44:74:64:a4:4f:51:99:
27:b1:b8:30:67:65:ea:f4:d8:37:26:6f:86:7b:e8:5e:76:5a:
c8:1e:ba:5f:29:5f:72:53:19:31:71:52:8c:4a:35:c6:87:4a:
32:47:22:98:1e:9b:16:a5:ba:6b:37:50:7d:7e:64:2d:59:9d:
ca:d5:cf:4f:7b:31:cd:5b:94:8f:b4:5a:0f:f4:47:f3:8a:38:
84:7a:69:cb:df:e7:45:4e:1d:23:f7:9a:06:43:80:45:e8:27:
84:eb:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:59 2025 by rpki-client