Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OoB6ixypsfupavIbO8eAIUwkOz4.roa
File: OoB6ixypsfupavIbO8eAIUwkOz4.roa (raw, json)
Hash identifier: BpP5fyPslBjnD7ilVm+WWIspQDCF3KegUP1sNGAgSbY=
Subject key identifier: 3A:80:7A:8B:1C:A9:B1:FB:A9:6A:F2:1B:3B:C7:80:21:4C:24:3B:3E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DE520CC3EC9A0027C44A2F7CFA9676A21
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OoB6ixypsfupavIbO8eAIUwkOz4.roa
Signing time: Mon 26 Feb 2024 11:15:48 +0000
ROA not before: Mon 26 Feb 2024 11:15:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a0e:f500::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:bc00::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Feb 2024 18:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e5:20:cc:3e:c9:a0:02:7c:44:a2:f7:cf:a9:67:6a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 26 11:15:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a807a8b1ca9b1fba96af21b3bc780214c243b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:c4:c7:f7:3e:22:9d:f1:1d:3c:9a:6e:ab:
39:bf:36:f1:d6:03:78:7d:33:5b:bd:cc:72:4c:04:
2d:0a:e7:83:07:b3:7a:fa:53:11:c9:f2:f5:a0:e9:
7f:83:ab:2c:53:bc:a3:ac:61:98:9a:c4:9a:e7:62:
d9:aa:34:85:48:cd:f9:cc:08:0b:f6:77:77:84:35:
7e:6e:b0:6d:88:a3:72:a6:7e:f0:e8:78:57:12:a1:
b3:11:5a:d8:82:af:c0:e2:7f:a8:9d:08:ab:7f:30:
07:11:64:30:3a:cc:ff:47:20:f9:75:0d:00:b7:87:
b4:38:46:da:9c:eb:af:4c:ca:5f:2c:db:bd:65:ba:
e6:e1:05:92:f8:eb:8b:43:f1:74:2e:4d:f0:ac:51:
e5:27:69:cf:7d:44:f8:04:51:49:09:19:9a:4a:23:
23:7a:95:42:24:d1:ba:ae:7a:09:74:08:c2:f5:f1:
22:69:40:c0:5c:eb:14:83:00:69:ef:1b:03:64:1c:
db:c7:dd:ee:71:35:ee:7b:78:9f:fa:ba:1b:7e:0e:
47:6a:a6:50:39:75:0c:63:d0:8d:2f:d3:c6:ce:ba:
5b:31:b8:1b:f1:18:98:3f:a8:05:1d:18:c8:01:54:
c8:8c:79:af:c2:9d:f3:65:c8:24:ff:a2:aa:16:a5:
54:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:7A:8B:1C:A9:B1:FB:A9:6A:F2:1B:3B:C7:80:21:4C:24:3B:3E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OoB6ixypsfupavIbO8eAIUwkOz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f500::/29
2a0f:2300::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:bc00::/29
2a0f:e740::/29
2a0f:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
33:ae:47:82:43:c3:14:bf:35:ee:76:d5:f3:fe:cd:45:27:69:
75:fb:ca:b9:1a:0b:c2:40:f9:78:e2:ec:b9:66:27:10:ee:94:
8c:4f:e9:b7:cc:7c:d8:6e:ea:c6:c6:85:12:94:51:90:96:f5:
b5:93:c1:9d:4d:93:e6:f4:55:28:4a:ec:bf:86:0d:0b:2d:1a:
05:08:20:ea:e1:e4:5a:42:c0:08:8e:69:91:e9:05:9a:ad:9c:
0d:c4:c0:9e:ec:b2:2c:b5:35:2e:a7:79:21:52:3f:8b:57:28:
82:e8:30:b6:92:31:b8:68:28:0f:63:07:c5:2c:98:ba:5f:9f:
99:ec:8a:f7:9b:8c:11:7d:78:58:3e:cc:17:33:16:c9:53:29:
09:f3:02:f3:9b:c4:e6:7e:d7:90:eb:eb:a8:e1:f2:20:59:7a:
a3:92:81:b1:e2:60:1a:f6:dd:a4:7d:fa:c2:d0:f1:0f:63:84:
f2:00:a0:69:fa:f4:7c:a4:ee:93:5b:7e:69:16:f4:f0:81:44:
5e:66:69:3d:5a:e0:06:f4:59:ad:38:43:d5:f5:e7:16:e4:3c:
56:86:bb:1c:46:22:82:52:6d:1d:43:79:6d:9b:42:0a:c1:1f:
a7:8b:57:94:7d:fd:f0:1c:4e:07:cb:23:65:6c:23:3d:29:2b:
a4:c1:53:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:09 2025 by rpki-client