Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RsZ9CebecaJTCK0B03j0G5_7rMo.roa
File: RsZ9CebecaJTCK0B03j0G5_7rMo.roa (raw, json)
Hash identifier: eet63cGn1O7rJ9GhdXuEyXz/l0FkS8IWKXtbdC1ExkI=
Subject key identifier: 46:C6:7D:09:E6:DE:71:A2:53:08:AD:01:D3:78:F4:1B:9F:FB:AC:CA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193BF2A55936947B71C0C91A2E12F37AB27
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RsZ9CebecaJTCK0B03j0G5_7rMo.roa
Signing time: Fri 13 Dec 2024 08:37:22 +0000
ROA not before: Fri 13 Dec 2024 08:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a0f:1840::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:7d07::/32 maxlen: 32
2a11:90c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 08:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:2a:55:93:69:47:b7:1c:0c:91:a2:e1:2f:37:ab:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 13 08:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=46c67d09e6de71a25308ad01d378f41b9ffbacca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:01:d4:9b:8c:de:34:e1:4e:76:34:64:14:
f6:62:0d:69:c0:49:dc:5e:62:6c:69:3b:b3:31:11:
06:50:35:96:5e:b1:53:34:cd:25:bf:69:4a:49:3a:
2d:44:fd:d4:3b:0b:50:54:65:c7:26:b2:99:b7:0f:
db:2c:d7:37:f4:84:71:60:f8:d7:1e:08:ca:81:cf:
52:34:17:dd:65:14:6b:6d:56:28:9f:e7:67:79:a1:
ef:e2:1d:31:f8:b9:da:d6:ca:59:2a:c8:8e:61:54:
d1:2a:d6:c2:ef:8b:35:81:7f:31:0c:40:0c:53:0f:
9c:c5:42:1b:d8:2b:f2:f0:76:c6:6b:00:f5:ba:3c:
64:9b:15:60:2e:a2:51:75:30:54:38:0e:1d:d2:71:
6f:f8:cf:4b:b0:5f:02:83:c4:1a:db:aa:ec:d5:f6:
27:b7:74:0e:c8:ac:8a:2a:f7:84:07:72:20:9f:5e:
e1:c3:39:41:93:73:21:5a:61:bd:a5:7a:e5:35:17:
78:6f:d4:a0:5e:21:71:ae:c0:7f:20:58:de:7f:82:
f3:de:c9:42:ef:f7:bb:f6:5d:35:21:81:eb:b9:5d:
bc:5b:fa:71:08:55:e0:66:dd:4a:a4:54:0c:7b:80:
ea:3b:3a:38:39:1f:b2:db:66:13:7c:86:f7:ad:e8:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C6:7D:09:E6:DE:71:A2:53:08:AD:01:D3:78:F4:1B:9F:FB:AC:CA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RsZ9CebecaJTCK0B03j0G5_7rMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1840::/29
2a0f:2d40::/29
2a0f:7d07::/32
2a11:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
40:04:d2:80:0a:d8:82:06:33:b7:70:71:b9:17:24:3d:47:cc:
dd:62:d0:74:e4:9d:2e:46:83:d5:22:a2:52:91:5b:20:53:22:
51:8c:68:1f:6b:63:f7:5b:da:fc:03:3b:41:31:0e:c7:5a:c7:
53:8e:e9:41:82:28:af:91:93:64:4f:25:67:6e:26:ae:c4:2b:
9f:f9:06:ca:5a:39:7b:f0:b8:55:d5:dd:19:b3:a4:3f:a0:c3:
c7:b3:65:65:51:d5:b5:a6:2f:98:c2:c7:92:e4:eb:81:1e:9d:
6f:f2:08:5a:a1:76:23:77:d9:f1:9e:4e:44:1c:17:34:31:b6:
8a:1b:92:b5:dd:02:2d:5d:50:ed:65:7e:2b:88:72:92:6f:d7:
b1:4f:b8:33:1b:38:f8:ec:d2:05:b3:c7:07:32:7c:ed:7d:d4:
d9:3d:e9:6f:71:48:36:89:58:10:18:16:94:5b:f8:aa:dd:00:
cd:84:a3:b1:5f:24:0c:43:b7:9a:23:6c:43:91:8a:e1:dc:af:
86:c0:48:ac:bc:79:cb:b8:19:15:23:f5:67:df:bd:78:67:f4:
29:95:88:d9:4c:f7:03:7e:28:07:68:9a:05:31:3e:5e:53:ae:
ef:33:5b:6f:d0:89:a5:0a:6d:9b:0e:31:ff:66:f9:ab:e1:4e:
9c:7a:07:19
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZO/KlWTaUe3HAyRouEvN6snMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMjEzMDgzNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmM2N2QwOWU2ZGU3MWEyNTMwOGFkMDFkMzc4ZjQxYjlmZmJhY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbUB1JuM3jThTnY0ZBT2Yg1pwEnc
XmJsaTuzMREGUDWWXrFTNM0lv2lKSTotRP3UOwtQVGXHJrKZtw/bLNc39IRxYPjX
HgjKgc9SNBfdZRRrbVYon+dneaHv4h0x+Lna1spZKsiOYVTRKtbC74s1gX8xDEAM
Uw+cxUIb2Cvy8HbGawD1ujxkmxVgLqJRdTBUOA4d0nFv+M9LsF8Cg8Qa26rs1fYn
t3QOyKyKKveEB3Ign17hwzlBk3MhWmG9pXrlNRd4b9SgXiFxrsB/IFjef4Lz3slC
7/e79l01IYHruV28W/pxCFXgZt1KpFQMe4DqOzo4OR+y22YTfIb3reisGwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFEbGfQnm3nGiUwitAdN49Buf+6zKMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUnNaOUNlYmVjYUpUQ0swQjAzajBHNV83ck1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKg8YQAMF
AyoPLUADBQAqD30HAwUDKhGQwDANBgkqhkiG9w0BAQsFAAOCAQEAQATSgArYggYz
t3BxuRckPUfM3WLQdOSdLkaD1SKiUpFbIFMiUYxoH2tj91va/AM7QTEOx1rHU47p
QYIor5GTZE8lZ24mrsQrn/kGylo5e/C4VdXdGbOkP6DDx7NlZVHVtaYvmMLHkuTr
gR6db/IIWqF2I3fZ8Z5ORBwXNDG2ihuStd0CLV1Q7WV+K4hykm/XsU+4Mxs4+OzS
BbPHBzJ87X3U2T3pb3FINolYEBgWlFv4qt0AzYSjsV8kDEO3miNsQ5GK4dyvhsBI
rLx5y7gZFSP1Z9+9eGf0KZWI2Uz3A34oB2iaBTE+XlOu7zNbb9CJpQptmw4x/2b5
q+FOnHoHGQ==
-----END CERTIFICATE-----
Generated at Tue Apr 22 03:35:56 2025 by rpki-client