Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TeXKL0gpuSIJH_O2cyMDYoDuWGg.roa
File: TeXKL0gpuSIJH_O2cyMDYoDuWGg.roa (raw, json)
Hash identifier: XKjiVFn9t1ZyqcB8Yt3LNXo7h1gW4pbKs5/n7hrsQDY=
Subject key identifier: 4D:E5:CA:2F:48:29:B9:22:09:1F:F3:B6:73:23:03:62:80:EE:58:68
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190565D417F62C54A870008C3AB33FB3F18
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TeXKL0gpuSIJH_O2cyMDYoDuWGg.roa
Signing time: Wed 26 Jun 2024 21:04:30 +0000
ROA not before: Wed 26 Jun 2024 21:04:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214800
IP address blocks: 2a0f:1201::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 03 Jul 2024 15:14:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:56:5d:41:7f:62:c5:4a:87:00:08:c3:ab:33:fb:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 26 21:04:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4de5ca2f4829b922091ff3b67323036280ee5868
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:25:1f:00:a5:cb:12:0d:d1:23:15:31:e1:69:
66:b3:1c:c2:ab:d2:dd:04:23:4b:c5:db:42:cf:c3:
6b:0e:8a:26:54:46:d7:5c:6f:a1:80:48:0d:ad:91:
25:2b:2a:be:7b:0c:d0:f9:bb:92:42:d3:19:a6:d0:
b7:9b:f5:f6:22:20:d5:12:b9:db:84:f7:3c:11:d9:
7a:f6:2e:9e:60:f5:02:dc:38:bc:28:5b:1e:b0:c7:
a2:b8:fd:cb:16:18:d9:0e:99:24:e0:da:7e:c0:4f:
4e:92:60:9b:07:fe:73:4c:39:84:c5:6f:11:27:13:
88:ba:06:69:d7:58:29:d5:f4:1a:80:df:2d:21:e2:
3b:21:17:39:6c:d8:d3:77:e6:c7:30:b2:fe:b7:e7:
42:10:0d:8f:1d:d2:df:cf:42:63:93:84:66:c9:ff:
02:86:0b:b6:78:8d:de:66:09:02:6a:6c:44:9c:34:
fb:0d:90:7c:03:ee:54:b0:04:d0:dc:ff:8a:8b:10:
00:d6:0a:37:c3:b4:4f:0e:71:ed:6d:2e:32:85:89:
90:29:20:5e:05:32:a7:54:e5:ab:23:82:f6:75:96:
7f:3a:73:31:97:8f:e6:14:93:c5:fc:9c:39:d8:fb:
f2:e9:c1:cf:68:fa:e4:6e:6c:bc:8a:7a:f8:00:a6:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E5:CA:2F:48:29:B9:22:09:1F:F3:B6:73:23:03:62:80:EE:58:68
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TeXKL0gpuSIJH_O2cyMDYoDuWGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1201::/32
Signature Algorithm: sha256WithRSAEncryption
2a:57:3b:07:cc:8f:85:94:e6:58:50:ff:80:67:e7:f7:11:60:
1f:81:4c:e0:60:01:58:0e:7b:4e:cf:21:22:33:a6:72:49:93:
a0:0d:6e:af:08:2f:23:ff:58:b4:69:26:31:92:30:91:e1:9d:
39:fd:16:41:c5:30:e6:00:b2:fb:e0:73:5e:cb:be:4a:45:9e:
bc:be:24:02:bd:2a:28:a1:ee:bd:e3:a3:5b:07:32:37:e2:ce:
e3:1d:e5:37:cc:f3:77:77:d7:95:e6:73:c3:11:d0:59:3d:31:
bf:ec:eb:02:a9:50:27:df:a7:c0:5c:f6:ec:fc:43:1c:63:37:
4e:7d:c0:a1:95:ef:f7:59:4e:d3:58:86:42:a3:db:38:57:31:
6b:8f:8d:a6:dc:42:23:a0:9a:f8:69:a7:e6:d4:f7:3f:15:5a:
3b:8a:4a:28:83:99:4d:b0:05:da:c4:b1:8f:eb:8f:27:5f:15:
7b:d2:6a:9b:e8:47:ed:fa:b6:de:3c:7c:bc:74:10:a5:f7:ba:
25:e8:6f:89:2a:54:22:c4:c1:ab:8b:20:ff:ac:0a:f0:90:f0:
a7:36:10:d3:a2:52:9d:c5:48:fd:c7:f3:a1:36:85:2c:ad:6b:
3c:19:d3:fc:4c:0c:5a:a0:65:b1:11:72:8c:8e:d9:c3:e4:55:
ad:f6:6e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:45 2025 by rpki-client