Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/V4mgDYlPFAXqs-C5VxfDr86-RMs.roa
File: V4mgDYlPFAXqs-C5VxfDr86-RMs.roa (raw, json)
Hash identifier: t7dRy5LkvEJ9XdSVgZD0dZpuqV1qeomXUMieJf+EqTw=
Subject key identifier: 57:89:A0:0D:89:4F:14:05:EA:B3:E0:B9:57:17:C3:AF:CE:BE:44:CB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019546784A0337A8949679E6CB72725474B4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/V4mgDYlPFAXqs-C5VxfDr86-RMs.roa
Signing time: Thu 27 Feb 2025 08:14:03 +0000
ROA not before: Thu 27 Feb 2025 08:14:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214773
IP address blocks: 2a0f:1f80::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Mar 2025 17:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:46:78:4a:03:37:a8:94:96:79:e6:cb:72:72:54:74:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 27 08:14:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5789a00d894f1405eab3e0b95717c3afcebe44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e0:1f:97:46:b5:46:64:33:f2:e6:c8:f2:49:
26:1d:09:5f:72:ad:10:94:70:44:c1:22:58:99:ac:
f6:6b:92:90:f2:f1:e9:f5:03:2e:da:5e:2f:52:2a:
d4:ee:72:4b:07:07:d1:96:44:44:56:68:8a:e4:b2:
89:6c:3b:7f:30:db:23:c0:0b:99:cc:a1:29:6b:c8:
10:84:e0:1c:9c:35:0b:d9:13:60:05:37:79:ed:dc:
21:e5:a0:d0:23:de:72:20:95:3c:9a:2f:fd:e7:ab:
46:7b:1b:34:fa:87:16:78:d3:b5:4e:c6:97:f2:3c:
17:d1:47:89:c5:a6:0f:5c:62:e1:2e:8c:a3:f4:13:
c6:dd:fa:d9:3a:b8:c4:50:2b:2e:b8:67:5a:6a:91:
f9:7f:53:22:c6:79:3f:6e:6c:45:83:f2:9d:f8:46:
22:a1:80:61:8a:56:0e:b7:95:a5:63:77:0d:06:8d:
1e:0c:e9:4e:d4:d8:f5:51:b4:b8:41:32:60:8c:1f:
16:b0:38:5e:17:ed:7d:1e:e8:2b:3c:37:34:b5:44:
67:5f:45:1a:99:bf:3f:40:8c:ed:35:71:1a:16:44:
9f:b0:a0:73:3b:61:3a:5f:8c:ef:10:dc:67:e6:c3:
07:3b:1f:20:68:0e:e9:04:58:bf:b4:6c:8d:10:3b:
79:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:A0:0D:89:4F:14:05:EA:B3:E0:B9:57:17:C3:AF:CE:BE:44:CB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/V4mgDYlPFAXqs-C5VxfDr86-RMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1f80::/29
2a12:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:51:b7:8a:28:9a:cb:ce:70:96:c9:0d:90:ca:48:66:7d:30:
85:77:6b:2d:4d:a3:97:57:e2:6a:ad:e8:f9:80:97:a9:78:39:
8a:41:5b:c2:da:89:93:3f:eb:73:5f:1f:18:42:c7:d3:8d:25:
22:c0:99:ee:74:6d:03:02:24:43:b2:aa:61:c6:87:11:23:8e:
6b:c5:81:45:1c:a7:91:91:0f:9c:c4:cb:e0:82:93:6b:e9:bc:
55:4f:3e:a5:0d:3e:0f:dd:b8:a2:44:89:f5:04:36:d5:e9:cb:
d7:ab:77:98:d1:02:f5:e7:5e:57:0f:a2:fe:5f:41:28:18:f9:
75:43:ac:4e:5d:a9:d0:20:3a:42:b7:a0:5f:4f:e2:da:57:8f:
63:25:c1:17:02:30:c7:55:a3:69:a4:8b:ff:a7:06:f9:f8:e8:
ca:8c:50:f5:e4:85:07:33:c9:0c:b5:d5:6c:12:b9:67:bb:d7:
81:63:f6:b4:44:f5:66:55:4e:8d:c7:3a:73:7a:f2:97:2c:15:
0a:5c:c6:e8:74:ef:39:09:04:06:ba:e5:6f:d7:53:41:da:5f:
41:f9:df:89:7d:d0:3f:e2:fe:a5:c0:29:95:db:fb:ae:1f:2f:
f9:dd:1c:40:e0:02:fa:86:fe:d3:5c:10:66:fd:0e:d3:b9:70:
f2:5b:f4:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:20:47 2025 by rpki-client