Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U_9Yzv8d5goX7CNj1XT0SQLcuBo.roa
File: U_9Yzv8d5goX7CNj1XT0SQLcuBo.roa (raw, json)
Hash identifier: c8uVsDHbdwfFLYi6sFh6kwBf40v3wnIRqaaNKwnv4Q4=
Subject key identifier: 53:FF:58:CE:FF:1D:E6:0A:17:EC:23:63:D5:74:F4:49:02:DC:B8:1A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CFC84097E2A019093D163051EBC1B6FA4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U_9Yzv8d5goX7CNj1XT0SQLcuBo.roa
Signing time: Fri 12 Jan 2024 07:12:40 +0000
ROA not before: Fri 12 Jan 2024 07:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a0f:a200::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:84:09:7e:2a:01:90:93:d1:63:05:1e:bc:1b:6f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 12 07:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53ff58ceff1de60a17ec2363d574f44902dcb81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:62:43:04:27:59:47:76:d2:99:37:c7:f9:
56:e4:ce:e6:0e:46:33:99:f6:ca:7a:dd:a6:06:b3:
06:6c:19:49:c5:59:60:ba:31:e9:66:b9:65:8d:0a:
ae:74:b2:d4:33:36:2f:43:67:2c:f8:a3:d1:22:28:
b0:5f:7f:e1:94:5b:61:e9:2d:7d:f9:72:d9:36:25:
6f:20:40:d8:a7:b8:8d:66:a8:72:57:b1:e6:a7:b2:
5f:fc:d0:27:a4:96:07:fb:5e:a7:ed:aa:1f:cf:ec:
fd:88:42:46:6b:5f:75:3e:0b:9c:82:3e:ec:91:22:
99:ce:90:44:8a:17:9c:29:4a:3e:ce:b5:0a:95:31:
c9:02:69:94:56:78:57:ea:04:07:71:2a:45:e9:49:
79:53:0c:2f:2e:c2:80:b5:4f:9c:45:4b:73:2d:7d:
7d:89:92:dd:64:d2:56:ea:af:fe:7d:21:b8:e3:5f:
6f:8e:1e:59:26:fd:ce:ca:e6:d4:e0:aa:4a:6d:c7:
6e:a0:22:ba:03:e8:40:e2:17:7b:eb:be:db:73:22:
78:ce:60:3c:0c:ad:e4:9e:1c:d7:51:8d:75:84:b9:
1b:f0:62:ef:6f:9c:0d:1a:58:24:7e:3c:ea:86:95:
ed:e3:cd:56:95:81:59:82:4b:05:59:35:59:32:29:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FF:58:CE:FF:1D:E6:0A:17:EC:23:63:D5:74:F4:49:02:DC:B8:1A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/U_9Yzv8d5goX7CNj1XT0SQLcuBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a200::/32
Signature Algorithm: sha256WithRSAEncryption
09:26:9e:61:97:ba:cb:0b:ab:c9:35:62:c1:8e:fd:32:5f:ad:
ff:46:3e:53:fc:c6:bf:0c:54:1e:91:88:ee:15:32:2d:39:dd:
08:95:22:77:20:e3:83:1d:6a:d5:f7:05:7f:6f:46:4f:5f:85:
c5:07:36:fe:ac:8c:24:f0:15:8a:f5:4a:85:14:b1:60:a0:45:
99:9f:b0:ae:b1:fd:d0:58:7a:4d:59:e6:4a:9c:18:e0:7b:9f:
ad:f0:75:fb:d4:db:f1:d1:40:f4:0c:97:0a:e4:4c:90:12:d2:
3f:5e:11:99:c6:18:f4:61:40:31:1b:b4:48:ec:dd:1c:ac:e5:
ef:60:26:e4:fe:ea:0f:be:e7:1d:8a:bd:43:ec:24:c7:e4:0d:
47:ee:d1:1d:6b:50:bf:4b:20:81:b9:41:48:61:18:44:81:49:
da:ec:b1:5b:ca:41:df:0e:a3:57:00:07:ba:92:08:34:81:2d:
4e:34:ad:3a:18:e7:ef:ee:c9:b7:dc:f5:04:a3:c2:96:d5:6a:
ba:52:ba:1b:18:7f:13:ac:73:81:49:6e:ef:15:d5:fb:6b:83:
8e:91:7b:17:bc:16:c9:3f:dd:4c:0e:8b:92:2b:0d:a2:c2:52:
95:5b:32:ea:9a:6e:2d:8e:9d:02:38:e1:e2:0b:a5:7c:99:28:
bd:11:3f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:38 2025 by rpki-client