Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O7evl3vAnvliBzmZApxXqKXNHzg.roa
File: O7evl3vAnvliBzmZApxXqKXNHzg.roa (raw, json)
Hash identifier: f7Psbv7up956kNdmP29nOsrab2VliyYQTOzVZbleDNg=
Subject key identifier: 3B:B7:AF:97:7B:C0:9E:F9:62:07:39:99:02:9C:57:A8:A5:CD:1F:38
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC209C6725AD33F1DDC9718D7DBB2B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O7evl3vAnvliBzmZApxXqKXNHzg.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22439
IP address blocks: 2a13:18c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 29 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:20:9c:67:25:ad:33:f1:dd:c9:71:8d:7d:bb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bb7af977bc09ef962073999029c57a8a5cd1f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:99:dc:60:d6:c2:25:c5:ff:52:05:fe:98:78:
99:81:6b:e9:ca:2f:58:b2:9b:b7:50:ab:38:70:01:
34:17:f7:e3:87:08:f4:32:f9:f9:0c:92:1e:ad:40:
bd:e1:bf:b8:ac:43:0b:7e:91:a0:3d:a8:84:79:a7:
4e:0f:ed:6c:40:4e:d2:21:16:2b:08:16:72:e9:34:
79:96:39:64:66:b5:12:ce:56:58:83:85:4d:9b:2f:
8e:67:62:9f:19:f6:63:bf:5b:99:0a:4c:e5:48:aa:
bd:09:f4:94:43:e0:21:89:96:3f:64:85:d4:f5:5e:
99:41:b1:e4:c6:96:7d:e3:a8:5f:cd:bc:cb:3e:77:
36:f4:d9:43:af:9a:c1:f3:5e:f3:cc:80:31:f2:1b:
93:ed:1f:35:d0:a7:6d:f7:05:6a:05:89:96:a1:75:
49:39:16:f7:37:76:a0:92:28:01:22:c8:00:f1:24:
e0:12:91:15:c1:6a:0f:51:ea:c4:a0:81:78:79:64:
8b:f7:60:37:9a:03:a3:1d:02:82:1f:ab:13:8a:94:
1e:a9:95:aa:a9:6e:16:38:e9:99:d6:49:f0:0e:cb:
e9:f0:51:2e:9d:b2:fe:a8:91:38:2f:2b:6c:99:ff:
5f:cd:d7:93:86:63:ef:09:af:fd:fe:b1:6a:1b:7d:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B7:AF:97:7B:C0:9E:F9:62:07:39:99:02:9C:57:A8:A5:CD:1F:38
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O7evl3vAnvliBzmZApxXqKXNHzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:18c1::/32
Signature Algorithm: sha256WithRSAEncryption
61:cb:55:e3:5c:9e:7a:27:56:07:77:c2:5c:6c:03:c0:ac:ab:
e7:39:fc:5a:66:98:fc:cc:91:d9:d3:a5:a8:9e:c1:c3:8a:d0:
3c:94:08:3c:eb:75:71:91:90:4c:2f:1e:85:9b:a1:0a:6c:92:
26:a0:8a:3e:5e:06:1f:c9:d7:6d:d8:1d:e4:83:f1:ee:70:6d:
0c:98:18:03:ec:46:c1:59:ff:89:61:c1:45:8f:ca:1d:fd:86:
8e:39:de:bb:82:b4:32:9b:22:fa:a2:22:60:22:30:6d:98:83:
3f:5d:b2:88:59:1a:41:9c:8a:da:73:ef:9d:47:aa:f0:fe:b6:
59:80:4f:e4:7e:76:6f:a6:56:ca:4d:6a:52:fe:9b:8a:7e:29:
c4:34:c9:b9:58:7c:4e:85:1b:2a:b8:36:85:5d:97:dc:b1:7c:
45:19:26:b6:05:21:b9:1d:88:67:a2:2c:94:5e:5e:32:34:96:
6f:9b:57:d3:8b:eb:87:22:3e:51:91:c9:a4:0b:15:45:47:9b:
c3:65:8f:8c:18:b2:c6:94:b4:90:f9:41:bc:fb:f7:9f:0a:09:
9b:6b:4f:88:ba:ec:92:37:dd:04:97:9f:7e:37:83:83:14:fd:
72:6b:bd:72:54:78:be:aa:ef:4b:9a:ca:13:45:e8:70:ef:4d:
a5:df:a5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:16 2025 by rpki-client