Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OWwIfSWrehB54OAUFHvxWGAfflY.roa
File: OWwIfSWrehB54OAUFHvxWGAfflY.roa (raw, json)
Hash identifier: u03ZqV68IoHSJ0rH/3Tet/KOlOkYdEOFxXizuQlGVRI=
Subject key identifier: 39:6C:08:7D:25:AB:7A:10:79:E0:E0:14:14:7B:F1:58:60:1F:7E:56
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195B7D64D9265ABC17EF5455941055DAA00
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OWwIfSWrehB54OAUFHvxWGAfflY.roa
Signing time: Fri 21 Mar 2025 08:33:49 +0000
ROA not before: Fri 21 Mar 2025 08:33:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a10:7100::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:c500::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 25 Mar 2025 16:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b7:d6:4d:92:65:ab:c1:7e:f5:45:59:41:05:5d:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 21 08:33:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=396c087d25ab7a1079e0e014147bf158601f7e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a6:f2:e6:9c:a4:20:15:7c:25:d4:e5:d3:8f:
94:56:8e:ae:0e:a0:e0:36:b4:00:32:22:bd:56:f4:
c1:f9:43:4d:ca:cb:f3:86:48:55:c1:6b:6e:4e:7d:
9c:1c:02:e5:3f:a1:cf:ff:d8:03:0b:79:e7:c3:ce:
ab:cf:15:a1:10:6d:89:75:39:58:5e:80:3e:de:63:
1b:f3:62:76:88:f5:7d:5c:de:87:f6:82:f2:fa:19:
f1:45:0b:89:8f:b7:c3:20:96:d8:3e:e6:67:60:d0:
32:78:c5:10:84:9d:2b:d4:99:97:5b:20:c7:04:87:
98:b9:fc:4c:bc:55:c9:84:30:33:89:86:1d:da:7d:
f2:7b:2b:ce:f3:5b:01:8b:70:90:57:64:73:c2:97:
fa:62:ce:68:42:bd:aa:7b:7c:9f:40:ae:c8:e0:3a:
ab:b1:b2:bf:9a:29:df:0e:24:c4:9b:fc:bc:65:1e:
be:dd:61:90:c6:13:b1:60:eb:bb:6a:6a:a8:da:d3:
56:88:72:ab:0f:32:00:00:e9:91:de:15:b2:86:2b:
39:e3:30:48:12:4a:e7:d2:38:25:09:12:57:c3:ee:
ec:59:07:30:73:98:22:84:24:b2:63:d4:e2:1f:75:
a9:27:01:c8:40:01:ef:15:89:d8:14:a0:fd:3f:e5:
f0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:6C:08:7D:25:AB:7A:10:79:E0:E0:14:14:7B:F1:58:60:1F:7E:56
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OWwIfSWrehB54OAUFHvxWGAfflY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:7100::/29
2a11:3f80::/29
2a11:4e80::/29
2a13:8f00::/29
2a13:c500::/29
Signature Algorithm: sha256WithRSAEncryption
5b:ab:78:02:a3:65:db:ec:5a:88:ca:cc:0f:16:c7:a9:2f:8b:
a9:f2:aa:7e:17:05:4e:7c:18:08:5f:69:45:f1:c9:b7:18:66:
29:fb:2a:be:40:6b:1a:b9:b8:d4:b0:75:c5:80:be:d9:1b:b8:
42:ed:07:4d:a4:1e:5a:7e:ef:d7:85:53:50:01:d2:eb:49:59:
80:1c:01:e8:c6:b8:1a:29:dc:ba:68:bc:7b:48:5b:60:a1:93:
55:c1:f4:5c:ed:ef:02:98:35:a5:a7:4c:36:75:f8:c6:57:79:
09:5d:86:67:79:40:8f:47:9f:45:da:8b:d6:cc:71:31:24:61:
d8:9e:85:19:c8:2e:21:46:f1:49:8e:2c:52:37:e0:ad:86:ce:
1c:13:72:22:5e:9e:43:b3:a5:4b:f1:2f:e6:b8:c8:90:8f:2d:
63:12:09:3b:9b:b8:58:fa:04:f5:01:14:cf:58:29:0a:21:31:
22:fe:64:1b:32:40:35:cb:2f:6f:9b:28:dc:24:31:3f:b0:16:
88:1c:9d:05:33:f1:e5:cd:83:86:bb:04:b6:08:58:2e:f5:4f:
22:e5:db:93:ef:37:1a:b8:26:f0:03:95:ab:2d:c4:24:89:5e:
b5:5b:42:33:eb:c0:d9:c3:9a:6e:34:bb:59:bf:5a:30:81:f9:
e7:6e:19:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:53 2025 by rpki-client