Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OTUYgRxsN3y5YZDGTKU7g3SVlMU.roa
File: OTUYgRxsN3y5YZDGTKU7g3SVlMU.roa (raw, json)
Hash identifier: lrWDJ8zQYXyZaM03nndUPSJjCpapNvdsK5690yvK9JA=
Subject key identifier: 39:35:18:81:1C:6C:37:7C:B9:61:90:C6:4C:A5:3B:83:74:95:94:C5
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193BA373E9303C8F4D2DAA9A53D357B500F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OTUYgRxsN3y5YZDGTKU7g3SVlMU.roa
Signing time: Thu 12 Dec 2024 09:33:22 +0000
ROA not before: Thu 12 Dec 2024 09:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a0f:2d40::/29 maxlen: 29
2a0f:7d07::/32 maxlen: 32
2a11:90c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 13 Dec 2024 08:37:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:37:3e:93:03:c8:f4:d2:da:a9:a5:3d:35:7b:50:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 12 09:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=393518811c6c377cb96190c64ca53b83749594c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bb:c1:5b:5d:6f:f7:80:7c:f0:4f:17:9b:31:
ba:64:64:97:3f:49:bf:5c:c9:50:f6:8f:c1:9b:f0:
3b:db:15:b1:a7:3e:97:b3:7d:cf:d3:93:a2:86:67:
21:65:25:68:ef:8d:f8:5c:63:20:1f:66:3a:5c:64:
89:e1:8e:f9:fa:b6:97:d5:4f:a2:68:d6:d0:1c:1b:
4c:78:7d:08:cc:2a:24:d1:ae:0e:44:7f:ec:f3:0a:
53:a8:87:ad:ff:00:94:94:19:30:04:46:00:14:30:
13:21:ff:26:71:47:70:2a:1a:e9:7a:db:97:24:08:
0b:a9:b8:2f:32:d2:1a:e8:3c:d1:3c:86:c1:c8:f8:
d8:c3:a0:c9:bc:85:0a:f7:1b:29:bd:5a:9e:9f:15:
f2:98:32:3c:ee:29:31:c2:23:cb:32:9a:bd:58:1f:
36:65:e6:cf:32:dd:5b:c6:4b:42:d1:d6:91:26:bb:
f3:b0:97:9b:ad:af:4e:a6:20:6c:f9:c4:f6:a9:92:
64:27:e9:42:ff:77:e2:02:cc:f1:5b:0e:26:7c:1f:
6c:ab:d6:9f:c6:5a:8f:4b:8d:d1:fd:70:d2:f7:10:
22:2d:34:1a:db:24:a6:3a:aa:ea:33:a9:37:00:1b:
72:5a:c7:1a:b8:6b:ea:a4:9b:0b:04:92:b1:9c:ba:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:18:81:1C:6C:37:7C:B9:61:90:C6:4C:A5:3B:83:74:95:94:C5
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OTUYgRxsN3y5YZDGTKU7g3SVlMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2d40::/29
2a0f:7d07::/32
2a11:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
7b:73:6d:4d:3c:c9:1e:bd:7a:18:75:b3:ce:58:82:f3:ed:a2:
96:6f:de:a1:78:e4:3b:5e:8c:8f:00:fb:01:be:4c:ba:71:2d:
a7:49:5e:35:b3:46:a0:a7:2a:2f:e9:44:ef:a3:cd:2d:62:0d:
c1:42:44:0c:1a:c6:7e:4d:dc:b9:8a:c8:2e:3f:42:df:a3:5c:
83:b3:a5:a3:60:09:4b:42:1c:e1:63:91:ac:e8:8e:04:5d:86:
f1:35:bc:1a:85:12:aa:4c:85:96:0c:c3:af:c5:cc:84:6d:61:
5e:1a:97:1d:91:0f:72:13:e0:62:b0:e2:b1:88:f0:56:6e:5a:
d7:17:62:e0:04:e3:c4:f1:2b:17:d1:5b:16:3e:e2:4c:e9:2f:
33:d2:98:66:54:de:b5:9e:3f:07:0b:6f:40:de:c6:67:62:c8:
b7:59:04:2a:94:c4:6e:76:ac:d6:68:18:49:7b:5a:b7:76:90:
88:3f:3d:67:e7:96:c9:ab:a4:0f:40:83:bc:c1:26:b7:3f:4b:
ff:a4:c4:e3:e5:e1:ce:46:fb:ff:1b:76:05:e3:25:40:a2:40:
e8:2f:88:5f:c3:af:e0:59:98:a0:c2:dc:1b:89:c9:f3:13:e0:
36:f7:ff:3e:4d:1e:a9:37:3b:4a:a5:4b:98:40:a1:6a:49:9d:
80:60:30:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:22 2025 by rpki-client