Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tk6hBrwMUULzVy03QL74QfdB76c.roa
File: Tk6hBrwMUULzVy03QL74QfdB76c.roa (raw, json)
Hash identifier: z7b/ZvTiObSXb+JXCtXwzV+pA1kh4pI3eTKUmK6JSV4=
Subject key identifier: 4E:4E:A1:06:BC:0C:51:42:F3:57:2D:37:40:BE:F8:41:F7:41:EF:A7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0192DCB53A21C51797C822772778E7E04B43
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tk6hBrwMUULzVy03QL74QfdB76c.roa
Signing time: Wed 30 Oct 2024 09:15:17 +0000
ROA not before: Wed 30 Oct 2024 09:15:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49304
IP address blocks: 2a0e:c781::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 30 Oct 2024 19:49:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:b5:3a:21:c5:17:97:c8:22:77:27:78:e7:e0:4b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 30 09:15:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e4ea106bc0c5142f3572d3740bef841f741efa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:5f:c1:d9:44:6c:54:17:3c:1f:e1:fc:7a:
92:18:95:85:91:62:61:4d:2d:c0:84:07:c8:b3:c5:
dd:f6:3c:54:9a:ff:c6:4b:eb:18:a0:6b:c1:24:29:
00:04:9f:40:da:ee:33:e7:9b:1b:5c:04:9a:7b:b0:
e8:ed:34:1d:e5:04:34:96:07:1b:44:9d:50:37:59:
0f:0f:ab:42:77:55:4f:55:ae:e1:4f:a3:e5:8b:58:
c9:65:b0:96:24:4e:e1:e0:cb:54:ae:12:83:97:0e:
b8:39:8d:10:7c:64:65:ff:65:8c:1a:ae:f8:f1:89:
20:de:f8:02:d8:f0:e6:a6:c9:a0:f0:6b:cd:8d:d9:
29:96:c7:ff:80:d6:a4:a8:bf:e6:49:bd:f8:5f:d8:
11:d4:8d:7b:db:0e:df:31:30:4d:54:da:93:d6:10:
28:27:1c:11:65:81:2c:e6:bb:75:83:b5:6d:26:b5:
c4:e1:87:9f:2a:bb:df:7d:78:94:bf:d2:cf:9b:e4:
7f:e0:76:b7:b0:42:a8:cc:bf:9c:db:bb:0e:28:29:
0c:c8:1c:a1:98:d4:85:7d:57:ea:7c:9e:c8:f4:09:
02:bd:31:86:4c:c3:47:06:74:14:56:f7:11:7b:25:
7b:4d:69:f1:c9:00:d5:4a:28:a7:a1:a3:93:62:76:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4E:A1:06:BC:0C:51:42:F3:57:2D:37:40:BE:F8:41:F7:41:EF:A7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Tk6hBrwMUULzVy03QL74QfdB76c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:c781::/32
Signature Algorithm: sha256WithRSAEncryption
05:cb:b8:29:62:0d:f0:a8:0a:5a:09:57:14:14:de:80:3e:03:
1c:75:bc:f0:7d:c0:e9:a9:98:09:36:8c:83:58:a2:64:68:64:
c2:ff:46:16:9c:4f:47:62:2d:1a:93:85:76:c0:45:93:f3:43:
a2:3a:4a:2d:a8:93:36:c3:69:13:e7:54:cd:b0:0c:a1:25:81:
6b:96:93:74:df:35:62:d5:33:35:39:46:c9:2b:28:c4:c6:0d:
58:b0:95:db:c4:d0:00:dc:d7:cd:02:95:72:59:43:2f:8e:fe:
ac:ff:62:76:13:68:cf:9d:9f:bd:54:b0:2d:bd:35:a7:03:b1:
18:ef:a9:43:0f:40:1a:e4:0e:2e:d6:d3:ab:d8:c2:10:8a:67:
d4:a2:a9:57:87:65:28:e5:95:9c:10:25:89:55:83:a4:d4:4d:
2c:ed:ba:e3:80:93:94:db:da:2e:11:a3:ad:64:16:b2:86:2c:
9d:25:f8:ac:35:e0:51:19:64:14:b7:33:c6:d6:1e:3d:ff:a0:
d5:61:8b:e5:9f:b5:a6:a4:30:1a:c4:fb:b4:b9:c5:96:de:45:
df:5f:bd:7f:88:77:7b:d9:c3:a7:40:7e:ba:71:b8:91:66:e7:
00:8d:83:33:09:38:b1:df:35:e4:2e:00:88:0a:a9:d9:78:db:
e6:6e:62:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:30 2025 by rpki-client