Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UoP3yKbqncnB7enpgMgpH5OQYzw.roa
File: UoP3yKbqncnB7enpgMgpH5OQYzw.roa (raw, json)
Hash identifier: naejAtYPodKiUgHtjkyCjlSEEdBdBaaOhZpOzkPdAC8=
Subject key identifier: 52:83:F7:C8:A6:EA:9D:C9:C1:ED:E9:E9:80:C8:29:1F:93:90:63:3C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01915566B42A786F29F29279B51AB7CF305A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UoP3yKbqncnB7enpgMgpH5OQYzw.roa
Signing time: Thu 15 Aug 2024 09:37:59 +0000
ROA not before: Thu 15 Aug 2024 09:37:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:2d02::/32 maxlen: 48
2a0a:2d06:22::/48 maxlen: 48
2a0f:3d80:123::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 02 Sep 2024 09:20:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:55:66:b4:2a:78:6f:29:f2:92:79:b5:1a:b7:cf:30:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 15 09:37:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5283f7c8a6ea9dc9c1ede9e980c8291f9390633c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:a0:64:0b:1c:04:6a:96:05:63:d3:38:3d:
8f:eb:e2:bd:9c:85:22:dd:db:0d:84:c6:45:1f:a5:
b2:89:6d:5f:e5:28:70:8b:28:7e:89:8f:8e:c9:89:
f3:09:5c:75:df:f1:9c:d1:44:43:0c:ab:72:d5:95:
8f:a6:8d:60:f6:87:0d:58:e4:70:05:12:75:dd:82:
c4:5c:ea:63:85:15:37:db:3a:93:55:28:0e:ce:21:
a9:13:0e:73:e4:7a:bd:a0:ec:05:36:1c:97:ac:08:
8a:53:64:cb:48:2b:b5:44:76:bf:ff:df:f1:11:fe:
da:fd:b4:81:22:4f:c0:05:31:da:10:87:27:aa:20:
25:1c:74:66:97:17:c7:3a:4a:a5:93:07:c2:51:d2:
75:ce:fa:e0:45:07:ff:14:00:23:a7:f9:47:1f:ad:
26:79:64:ac:ea:cc:37:3b:8d:fd:16:f9:d0:b5:8f:
4a:17:5b:f9:21:80:43:30:51:66:01:48:7c:57:c4:
1a:f1:a1:61:fe:de:58:65:5f:85:b0:d1:f3:81:f2:
1e:d3:70:27:8e:63:25:d3:bb:a5:56:98:5d:4a:69:
a1:72:f7:a3:d3:a4:57:f4:32:54:cf:f3:03:23:4a:
71:e8:1c:ca:eb:f6:c3:8e:e4:3e:52:58:f6:b0:fd:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:83:F7:C8:A6:EA:9D:C9:C1:ED:E9:E9:80:C8:29:1F:93:90:63:3C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/UoP3yKbqncnB7enpgMgpH5OQYzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d02::/32
2a0a:2d06:22::/48
2a0f:3d80:123::/48
Signature Algorithm: sha256WithRSAEncryption
57:08:c6:2c:ac:68:cc:67:42:fe:10:0e:d8:ab:05:2b:eb:40:
09:9d:12:2c:91:4e:de:2e:de:49:fa:43:9d:af:a9:46:03:84:
09:25:61:71:cf:68:43:47:a6:cc:35:8c:75:79:d3:48:94:36:
3d:b0:e7:7a:98:c1:82:38:c0:57:e8:dc:b1:5f:fe:7e:93:3a:
6a:9a:f8:9b:af:e5:9e:b5:6d:a5:29:fc:46:7a:b7:6b:39:38:
f8:1e:e6:d4:1a:9c:53:53:d4:8a:24:74:78:47:db:79:40:d5:
82:e7:ad:f3:5b:a0:a8:0a:4a:8e:6b:f6:c1:4c:56:f2:22:56:
4c:02:51:b1:38:a3:b0:20:e4:cd:5b:26:a9:3b:ea:eb:4b:c8:
77:42:fa:6e:42:68:6c:83:bf:0c:3c:7e:b2:e8:a0:62:1a:63:
9c:6d:e7:f0:f3:01:cd:8c:f3:2b:68:e6:d4:78:57:f5:1e:26:
00:91:72:92:71:77:37:22:83:a1:12:9e:ea:e3:a5:5f:6f:79:
dd:ab:b0:b8:80:0e:43:42:bb:32:90:3e:7f:b6:27:4c:d8:fa:
cc:01:21:bd:00:a4:1d:33:fd:eb:fa:7b:cd:02:8d:28:70:eb:
e5:bd:47:73:1c:7a:5a:0e:b0:d5:68:09:6c:eb:77:09:af:41:
f5:47:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:56 2025 by rpki-client