Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OWF7Azc61p5ChJBOPCCrbgVu17g.roa
File: OWF7Azc61p5ChJBOPCCrbgVu17g.roa (raw, json)
Hash identifier: B23kyXwZjaoWfZDxV7WgAg4SimNKAZ6EAmJ3F0HJPrs=
Subject key identifier: 39:61:7B:03:37:3A:D6:9E:42:84:90:4E:3C:20:AB:6E:05:6E:D7:B8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CEE9AA2D792E7DE8DC6C8CF7DBAB78A09
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OWF7Azc61p5ChJBOPCCrbgVu17g.roa
Signing time: Tue 09 Jan 2024 14:22:40 +0000
ROA not before: Tue 09 Jan 2024 14:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a0e:2240:5::/48 maxlen: 48
2a0e:2240:3::/48 maxlen: 48
2a0f:a200::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 12 Jan 2024 07:12:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:9a:a2:d7:92:e7:de:8d:c6:c8:cf:7d:ba:b7:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 14:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39617b03373ad69e4284904e3c20ab6e056ed7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:b1:23:74:7f:32:7e:ac:aa:f7:37:7f:69:88:
bc:ad:54:15:2b:73:cb:75:cf:53:9e:c8:f7:83:26:
89:0d:28:89:00:f8:eb:ff:65:39:d1:71:b9:96:97:
e0:d4:cc:79:0f:1b:7d:8d:e9:74:71:42:e4:1a:15:
c6:42:47:f9:a6:f3:ef:03:9e:d5:48:12:89:0a:1a:
d8:9a:3f:81:74:43:b8:35:9a:91:d5:58:c4:f7:d3:
cc:84:ef:4d:2c:7f:db:77:a5:12:38:c0:1d:09:80:
23:1f:2d:38:01:81:76:65:e4:65:05:a7:85:4e:a5:
25:44:36:f9:1f:a5:2e:aa:5c:ad:0d:db:c4:4f:37:
bc:d2:f2:90:5a:0c:23:fb:7c:eb:7d:65:23:22:60:
e9:0b:de:05:e2:34:75:aa:84:fe:9e:b9:cb:07:61:
e0:1d:72:13:3d:e4:be:88:89:82:79:d8:49:92:df:
c7:f6:8d:58:bb:d2:19:7c:96:e7:1a:85:a7:f9:28:
a6:6f:0e:c6:e6:83:fb:60:07:86:e5:c8:1c:ba:13:
c7:2c:62:ef:39:40:7a:a0:3b:0a:45:72:19:a9:87:
b9:2c:a9:fd:d2:b3:ca:37:e9:91:25:90:6f:27:90:
b9:ac:55:ee:9c:2f:ba:5e:2d:dd:4a:00:da:92:b8:
b7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:61:7B:03:37:3A:D6:9E:42:84:90:4E:3C:20:AB:6E:05:6E:D7:B8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OWF7Azc61p5ChJBOPCCrbgVu17g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:3::/48
2a0e:2240:5::/48
2a0f:a200::/32
Signature Algorithm: sha256WithRSAEncryption
58:c4:80:70:07:b6:78:36:fd:5b:49:d7:32:0c:5d:79:26:27:
7a:4b:8e:cc:52:7a:39:68:75:54:15:fa:e3:66:c4:a1:53:fc:
31:e5:15:24:84:61:37:a7:cc:13:f4:2f:db:d7:ef:57:b9:8e:
00:50:6f:55:8d:c1:7f:57:b8:70:e2:09:d1:e1:81:da:11:62:
b5:68:67:c8:4c:0a:c6:3c:3f:3e:2a:b4:cf:bb:ef:c0:bd:b7:
a2:f2:06:ba:c0:66:cc:23:7b:35:5e:13:92:30:c8:d9:69:ed:
bf:49:10:d2:ec:ff:83:98:04:2d:dc:c3:02:15:3b:9d:cb:90:
8b:f9:7d:25:8f:99:44:84:a6:fe:4e:cc:1e:05:b3:9f:1c:7a:
a0:af:fd:98:88:3b:c2:f7:56:b6:f5:95:6b:3a:ba:07:8f:59:
3d:49:93:23:d4:34:d3:7c:6a:a8:80:87:80:73:57:48:89:26:
e7:9e:ba:b0:69:13:5e:11:0c:08:27:47:62:3b:fb:af:3c:1c:
78:16:1e:f0:c2:a6:56:c9:d7:68:16:f6:5e:f0:ff:6c:ac:95:
1f:94:05:61:7b:17:35:8a:ef:9b:87:85:a1:34:86:36:5f:ef:
01:70:6f:32:93:5a:a2:3b:b7:72:b7:a0:b5:bd:e8:19:21:fb:
c0:65:da:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:30 2025 by rpki-client