Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OPbh_o1CV8XbDkGORJop-2P7_6w.roa
File: OPbh_o1CV8XbDkGORJop-2P7_6w.roa (raw, json)
Hash identifier: 55gxiODTd+wkM+BhfxlEyyU9zvKOrpHYxTgAauHP7MI=
Subject key identifier: 38:F6:E1:FE:8D:42:57:C5:DB:0E:41:8E:44:9A:29:FB:63:FB:FF:AC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01957F347856921F2766D6D52D64F9F3E3B2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OPbh_o1CV8XbDkGORJop-2P7_6w.roa
Signing time: Mon 10 Mar 2025 08:38:19 +0000
ROA not before: Mon 10 Mar 2025 08:38:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:1fc0::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 13 Mar 2025 16:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:7f:34:78:56:92:1f:27:66:d6:d5:2d:64:f9:f3:e3:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 08:38:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=38f6e1fe8d4257c5db0e418e449a29fb63fbffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e7:60:98:05:c5:57:2d:b7:21:3d:33:13:31:
8d:25:c7:db:c3:1b:8e:06:25:c1:38:4c:f3:62:1c:
8b:cf:ac:e4:ab:46:99:f8:ab:6d:24:fe:ed:13:b7:
d6:d6:f6:f3:21:4b:b2:fd:5c:e5:2b:6b:6e:2e:b0:
5a:8a:47:c0:1a:a6:c7:43:59:77:c9:37:eb:ec:ec:
33:55:77:01:64:3b:c7:93:76:c4:73:d3:e4:e0:7a:
bf:71:e9:1b:99:e3:63:29:dd:c2:54:ad:27:d7:1d:
a3:71:32:d0:b9:16:ca:a2:3c:09:be:38:5a:b8:ba:
06:82:0f:e9:a4:2e:11:ac:e0:ae:1a:79:88:fd:35:
e2:d9:08:f7:49:20:42:57:fa:64:00:3e:e3:18:a0:
a0:6f:6d:39:76:92:54:c4:cc:2d:bf:0a:eb:f2:09:
d6:74:4a:fc:47:bc:ee:08:d1:20:95:2f:14:f4:7f:
16:33:e3:cf:44:06:09:f5:ff:21:98:5f:4a:be:99:
17:d2:11:8d:a4:e9:b0:7b:2f:ab:ca:5c:73:f8:f6:
08:88:75:f7:f3:b8:b3:0b:0f:97:b8:42:8b:ae:06:
e1:65:ef:ee:d2:1b:d9:64:97:d6:51:de:c2:66:94:
ef:2d:0b:36:86:ba:16:bd:ac:31:2d:34:3d:ce:33:
bb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F6:E1:FE:8D:42:57:C5:DB:0E:41:8E:44:9A:29:FB:63:FB:FF:AC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OPbh_o1CV8XbDkGORJop-2P7_6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1fc0::/29
2a0f:e600::/29
2a10:7100::/29
2a11:3f80::/29
Signature Algorithm: sha256WithRSAEncryption
59:4b:06:9a:93:d9:e4:1e:ff:95:9d:9a:9b:f5:78:ed:84:47:
b6:38:f4:c9:87:48:b1:c0:55:3e:2c:55:b0:82:3b:dc:ee:4e:
a5:d5:d2:e4:a7:d4:b3:3d:cd:20:63:f3:eb:0f:e4:71:11:30:
bc:3a:d2:65:65:77:64:d9:70:7b:d6:73:04:09:7b:85:f7:2f:
0c:40:cf:6e:0d:f0:7a:8c:02:73:2a:2d:a8:d7:44:dc:75:68:
7b:68:18:db:77:87:63:92:14:2d:f8:c3:fd:5f:5f:52:02:16:
94:04:04:6f:6b:4b:b5:a2:0d:a9:43:8c:6a:14:da:10:bb:8b:
fb:1e:12:d2:b3:53:a3:51:2a:39:c1:93:30:bf:39:58:81:d1:
05:c2:fb:54:ce:ed:85:ec:1e:b7:92:a6:60:47:ea:ac:97:40:
12:fa:30:bc:c9:78:06:3b:29:18:e0:de:f7:25:01:a3:86:c7:
69:ee:cc:6c:2d:27:c9:0a:5e:02:b0:a0:56:07:0f:19:c2:c8:
91:f5:0e:cf:e3:eb:cb:e2:cf:53:11:ab:ac:5c:a2:32:c5:f7:
75:e1:55:b9:64:f2:de:f6:fd:fd:47:59:a8:6a:9c:91:5a:31:
98:08:5b:c3:5d:68:a8:22:b8:7c:b3:c2:1d:41:ae:4b:ed:86:
b7:47:c1:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:11 2025 by rpki-client