Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RxMu7OyZRzW9YxcfhJaYAQB4uiU.roa
File: RxMu7OyZRzW9YxcfhJaYAQB4uiU.roa (raw, json)
Hash identifier: 6xkHpfOB17V6tYItD48cB+G6l6QkeW/xP2AeVMl/ZeI=
Subject key identifier: 47:13:2E:EC:EC:99:47:35:BD:63:17:1F:84:96:98:01:00:78:BA:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193B533ABA9F05626839B0E069726CD3913
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RxMu7OyZRzW9YxcfhJaYAQB4uiU.roa
Signing time: Wed 11 Dec 2024 10:11:22 +0000
ROA not before: Wed 11 Dec 2024 10:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a0f:2d40::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:7d07::/32 maxlen: 32
2a11:90c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 12 Dec 2024 09:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b5:33:ab:a9:f0:56:26:83:9b:0e:06:97:26:cd:39:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 11 10:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47132eecec994735bd63171f849698010078ba25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:33:08:d9:39:20:14:77:4c:50:bf:84:72:
08:10:2e:b5:fd:8f:14:69:ce:2a:8f:0b:93:a5:8a:
fd:8c:92:fd:4d:ea:d7:62:f4:a6:d7:d4:24:aa:40:
b5:4e:7c:e7:2e:35:0f:5b:2c:77:c9:5e:b4:5c:ed:
aa:ef:4e:c2:38:de:31:19:26:f3:f7:c4:7c:de:11:
6b:9e:6f:30:ee:80:9f:ee:c7:ce:ed:9b:ac:3f:31:
e1:28:f1:f6:2a:69:16:ee:03:ea:a3:e2:c3:0e:4a:
4f:d9:53:36:23:29:7a:a5:9d:13:94:9c:f2:b0:44:
1b:12:5e:b2:18:40:93:82:ae:b5:ff:69:0d:02:3b:
6b:2f:1c:cf:79:9d:90:b8:38:b7:ee:d6:6a:a3:8d:
ba:7e:16:58:3c:4e:36:b8:19:55:39:1d:0d:b0:f5:
44:70:7c:16:58:f0:b2:7d:d8:10:51:dc:be:ff:33:
c3:55:ee:a1:44:47:df:21:fe:8b:d1:06:d4:8c:c2:
39:f1:d5:32:fc:33:47:8f:7e:df:ac:db:e3:49:1f:
21:d5:70:23:d3:1b:85:a4:96:e8:95:1d:47:7d:55:
72:43:a3:ee:a2:12:14:e9:69:9c:f5:29:98:db:27:
b4:b0:fc:7c:32:6b:22:9d:cb:17:b5:ee:d3:0b:2f:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:2E:EC:EC:99:47:35:BD:63:17:1F:84:96:98:01:00:78:BA:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RxMu7OyZRzW9YxcfhJaYAQB4uiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2d40::/29
2a0f:35c0::/29
2a0f:7d07::/32
2a11:90c0::/29
Signature Algorithm: sha256WithRSAEncryption
73:58:17:a3:bb:e3:dd:e7:c0:27:a5:7e:b8:ee:2f:c8:4f:aa:
b6:1d:ff:3c:bb:ab:1c:79:56:32:29:f6:2a:10:14:05:0b:f7:
ca:29:d2:a6:40:be:b6:56:1e:28:31:ba:27:1c:19:05:54:42:
34:41:d8:28:41:47:d8:b7:ef:a2:cb:95:c8:48:f6:a6:f4:3f:
28:68:06:91:dc:d1:f3:37:72:0e:78:04:98:b6:45:bf:cb:f4:
93:7b:f5:ed:ff:8f:46:63:12:9b:3d:c5:68:9e:99:35:3a:71:
aa:f4:69:f1:37:f6:ec:53:f4:ea:c9:7c:0d:1f:98:30:b4:01:
3b:70:41:a8:fa:4b:b9:87:73:9e:0c:d0:98:55:b3:9b:a6:63:
e3:e6:2f:57:80:2f:71:54:97:86:1a:56:8c:2c:65:05:18:67:
19:73:51:c7:69:fe:1e:11:1a:d8:77:11:fc:b9:26:99:64:de:
e5:16:e5:f6:72:b0:d7:75:ae:06:23:6f:dc:43:b7:5a:22:b6:
13:0e:55:4e:dd:73:c8:58:10:cb:43:84:06:c9:5f:b4:8b:df:
cf:45:87:74:96:13:9b:31:b9:e3:1e:ee:0c:ab:67:a9:0b:31:
c5:85:c4:84:22:b1:ba:1f:59:75:a6:e9:df:25:eb:74:19:b6:
4d:b9:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:23 2025 by rpki-client