Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UJ7rvetgJj0M-G7QMbwplvSrxcA.roa
File: UJ7rvetgJj0M-G7QMbwplvSrxcA.roa (raw, json)
Hash identifier: f2zCRRwR7vfSprOTwSAofpn+h5cFjggmdIxeesgfyjA=
Subject key identifier: 50:9E:EB:BD:EB:60:26:3D:0C:F8:6E:D0:31:BC:29:96:F4:AB:C5:C0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195088A1879C3824C78D885B97AD921E11F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UJ7rvetgJj0M-G7QMbwplvSrxcA.roa
Signing time: Sat 15 Feb 2025 07:37:02 +0000
ROA not before: Sat 15 Feb 2025 07:37:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215120
IP address blocks: 2a06:5280::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Feb 2025 15:41:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:08:8a:18:79:c3:82:4c:78:d8:85:b9:7a:d9:21:e1:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 15 07:37:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=509eebbdeb60263d0cf86ed031bc2996f4abc5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:76:c1:ff:5e:3b:52:40:8f:98:15:af:87:e5:
83:13:05:50:a6:d5:47:d4:ae:9e:ea:87:4b:60:d4:
a0:9b:f7:bf:0f:24:ef:7e:a4:ff:1b:15:59:be:83:
01:95:3f:11:4c:3c:18:7c:fc:71:94:74:13:aa:f2:
82:ec:20:17:8e:b6:d0:da:1e:2b:bd:4a:ec:9e:f5:
88:06:6c:74:5c:d0:71:20:f8:53:28:11:de:3d:a7:
4f:6f:06:74:02:a9:05:a7:56:c6:a0:fc:97:39:b1:
c3:4d:c1:2d:b0:5d:de:bf:49:fd:71:3b:db:a6:7a:
84:80:4a:28:09:2d:13:7b:c6:8a:5d:fa:24:48:aa:
89:1c:02:69:fb:6f:0e:5d:21:ce:e0:a4:9b:40:87:
4c:7b:5b:10:27:77:6c:c9:93:47:e7:a2:28:ab:b5:
7d:70:57:35:fa:05:b5:d8:9c:f8:d6:d1:a6:90:7a:
fa:b9:8e:c2:61:02:81:f6:3e:66:52:30:09:14:0d:
5e:93:7a:25:2f:8b:78:21:c5:55:07:68:24:8a:7e:
a8:ac:96:07:4c:9b:2c:6c:01:37:56:f3:15:36:7d:
e5:5b:a5:75:d4:f9:1f:22:f5:28:97:cd:7b:89:7d:
00:ba:fb:32:c0:96:6d:2a:c6:3e:13:cb:b8:27:3d:
da:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:EB:BD:EB:60:26:3D:0C:F8:6E:D0:31:BC:29:96:F4:AB:C5:C0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UJ7rvetgJj0M-G7QMbwplvSrxcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
Signature Algorithm: sha256WithRSAEncryption
cd:6c:ea:d7:6c:b8:12:47:06:d2:28:4c:94:5c:8d:0a:3c:44:
1d:f1:89:93:93:47:f5:22:ae:75:39:8f:e8:66:f0:ba:29:63:
72:e7:9e:94:b1:51:6b:41:f8:95:f0:ea:bf:29:1e:c8:f8:36:
d1:c1:ed:be:c5:e2:50:0f:d6:ea:c8:a0:82:1d:0f:89:0c:87:
95:b5:72:e2:b2:64:65:fd:f1:f4:b8:fb:08:e3:6e:2e:6d:48:
89:f3:c5:58:42:dc:c7:f6:0a:0c:46:a4:ea:79:13:a6:f9:68:
97:bc:bf:56:cc:57:65:69:fd:ce:41:63:f7:d0:fb:47:69:cd:
88:30:e1:84:f8:a1:97:a4:77:22:09:a7:92:8c:0a:97:a6:c5:
69:f8:8e:ba:65:d4:35:65:db:2b:24:4e:f6:9b:d6:d0:5e:60:
f6:c7:96:78:2e:9e:3b:16:d8:5a:f4:a2:f2:46:b9:19:a6:d5:
46:28:0e:2b:1b:dd:74:47:d5:56:a3:a1:05:14:05:74:bd:2b:
19:6a:7b:e2:66:b6:cc:3d:84:10:52:71:27:eb:82:cf:87:27:
a5:fd:b7:8d:fe:32:e4:3b:9c:92:8a:46:11:8f:b6:4e:fe:47:
00:4c:de:47:8f:09:78:59:d0:43:7f:52:07:43:68:90:96:03:
53:8c:17:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:33:15 2025 by rpki-client