Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RLrBP7TDbnD1mJNnsiUOynXN3pI.roa
File: RLrBP7TDbnD1mJNnsiUOynXN3pI.roa (raw, json)
Hash identifier: 9qSf4VYQj85dAVBved8zP8YeLhzFyQ3atgmvXmgrSL8=
Subject key identifier: 44:BA:C1:3F:B4:C3:6E:70:F5:98:93:67:B2:25:0E:CA:75:CD:DE:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CED1DC74FD286167A239C92400EC9BBDB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RLrBP7TDbnD1mJNnsiUOynXN3pI.roa
Signing time: Tue 09 Jan 2024 07:26:40 +0000
ROA not before: Tue 09 Jan 2024 07:26:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 395839
IP address blocks: 2a0f:3940::/29 maxlen: 29
2a0f:39c0::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 25 Jan 2024 08:57:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ed:1d:c7:4f:d2:86:16:7a:23:9c:92:40:0e:c9:bb:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 07:26:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44bac13fb4c36e70f5989367b2250eca75cdde92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6d:96:7f:34:96:7b:43:30:8c:b3:8c:38:70:
bd:ca:a8:a7:e1:6a:d2:f0:2e:2f:30:cf:63:bc:50:
a6:b9:6a:83:27:41:69:c3:77:ef:ed:09:b2:8a:e8:
50:0d:29:70:f0:f5:be:50:a8:dc:bd:9d:58:f4:37:
08:a3:88:8f:7f:d4:c1:f5:06:ab:12:b0:78:cc:11:
00:61:4c:c5:e5:76:45:b1:af:80:63:7f:ef:80:bd:
ca:86:67:ba:37:32:7e:bc:cc:85:22:04:26:93:a1:
60:05:9a:03:5d:cb:74:e0:ee:6a:70:dd:12:7d:a3:
4f:06:79:dd:c7:c3:22:8d:68:7a:51:9b:e0:bb:86:
38:a7:3d:a1:6e:61:7b:91:47:3d:95:b1:93:19:2c:
49:1b:09:91:1d:fc:1f:2f:45:98:01:aa:f9:6c:33:
4d:6c:dd:92:71:bf:78:56:80:bf:d6:be:47:69:2f:
3d:fc:63:7e:ae:39:2d:20:c8:cd:14:51:5c:d4:a8:
95:fb:1b:23:a9:18:a0:63:f1:6c:6d:a2:5f:69:bc:
3d:48:51:87:d7:b8:42:77:1b:84:c2:53:58:8d:a5:
1c:da:83:3b:f8:81:91:ca:bf:e0:b7:18:1d:d4:ac:
9f:e8:f4:f8:9f:6f:ee:cf:4e:46:5b:6c:f5:2e:b9:
80:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:C1:3F:B4:C3:6E:70:F5:98:93:67:B2:25:0E:CA:75:CD:DE:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RLrBP7TDbnD1mJNnsiUOynXN3pI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3940::/29
2a0f:39c0::/29
2a11:4e80::/29
Signature Algorithm: sha256WithRSAEncryption
80:9a:b3:ad:4b:a0:63:52:58:9b:08:30:90:db:b4:b5:d6:ea:
25:a1:52:a6:da:27:93:af:4c:36:d1:0a:5d:63:fb:b6:76:17:
63:fa:dd:95:2c:c5:42:e9:22:7e:1e:e8:dc:04:6d:e1:81:40:
87:de:d4:0d:a1:49:08:27:a0:d1:82:66:d4:20:7f:5b:e4:13:
af:2c:5e:a3:ab:1b:30:7b:f1:4c:9c:29:52:d4:df:e8:1b:d0:
10:57:cb:01:e5:f8:e9:27:67:71:fd:94:c3:35:e6:4a:b7:7d:
df:34:33:6a:f2:60:f6:bb:9b:38:81:bd:00:a9:39:0b:c7:c1:
cd:25:68:ef:59:7e:94:04:8a:ec:d8:25:ec:16:50:64:5f:69:
ed:e6:7f:c1:42:ff:9a:b0:17:97:19:72:1d:1d:7f:fa:fe:d4:
bc:30:9f:20:a5:78:49:cc:27:ab:42:0d:c0:94:4a:c0:ad:d3:
03:1d:d4:60:f6:18:d1:b0:e6:7b:52:6e:54:de:9e:8f:08:7e:
82:34:b3:6f:e5:32:31:c9:15:f9:62:ae:ac:cf:33:f7:fb:ea:
03:eb:d6:0e:3b:dc:8a:1b:c6:ba:37:9b:75:73:f7:2f:ee:ed:
2f:02:15:67:d3:9c:34:d2:5e:fe:6a:f8:07:e3:8f:e8:13:79:
5e:e7:c2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:10:15 2025 by rpki-client