Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VKb7nOY3uw97ogfgw5MzNRG-wTQ.roa
File: VKb7nOY3uw97ogfgw5MzNRG-wTQ.roa (raw, json)
Hash identifier: /rboOy37q60m7P8R3NuLiVPD0fN50BMHaF+as9Yw0eA=
Subject key identifier: 54:A6:FB:9C:E6:37:BB:0F:7B:A2:07:E0:C3:93:33:35:11:BE:C1:34
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193D59A5909B29CEEC881A3E596BDCC7B01
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VKb7nOY3uw97ogfgw5MzNRG-wTQ.roa
Signing time: Tue 17 Dec 2024 17:11:22 +0000
ROA not before: Tue 17 Dec 2024 17:11:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152631
IP address blocks: 2a0f:3f80::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d5:9a:59:09:b2:9c:ee:c8:81:a3:e5:96:bd:cc:7b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 17 17:11:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=54a6fb9ce637bb0f7ba207e0c393333511bec134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:3b:34:07:0f:3a:c1:fa:41:75:8c:cf:c0:
c2:ef:fa:1b:a6:04:32:01:f5:f5:62:fa:37:12:a3:
be:9b:6f:38:2a:4c:5c:81:1f:ca:f7:6e:46:fc:8d:
fd:fd:42:60:99:b6:61:2b:00:c3:6b:4b:82:e6:6c:
86:80:5a:cc:48:99:20:ab:d5:28:c4:ac:81:bd:93:
75:ed:59:2e:0b:3d:75:f4:66:5b:06:92:83:44:7b:
e8:d7:57:48:8d:9c:6c:39:3a:89:18:e2:c3:7d:87:
24:d8:23:28:dc:81:b2:47:48:ea:5b:f8:50:20:ab:
d3:e4:63:6c:86:1f:f3:2a:67:9e:b1:b4:c9:d1:f2:
85:3b:f8:87:a6:1e:df:37:dd:e6:bb:ed:20:cd:dd:
4d:74:4a:88:41:dd:bf:6d:e5:98:eb:74:8e:c0:bf:
29:19:8b:6d:c5:da:95:2f:ab:22:82:01:2b:7d:fa:
b6:db:2b:79:40:d4:b6:e8:1c:9d:90:24:f8:db:28:
81:65:e3:6b:d7:3c:8b:68:9a:cb:b7:97:c9:c4:70:
03:12:4a:8f:34:fd:96:43:f5:45:94:f2:46:39:a4:
79:1f:77:8c:28:a0:5f:39:fe:92:24:4c:84:da:38:
cb:16:a5:28:c6:3e:8c:b5:86:29:34:cd:4a:72:66:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A6:FB:9C:E6:37:BB:0F:7B:A2:07:E0:C3:93:33:35:11:BE:C1:34
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VKb7nOY3uw97ogfgw5MzNRG-wTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3f80::/29
2a0f:9e00::/29
2a0f:b400::/29
Signature Algorithm: sha256WithRSAEncryption
29:44:7f:2d:5f:24:af:f3:c2:10:8f:d9:6a:49:fe:92:c2:e5:
2e:2a:73:73:8e:f1:50:88:23:1d:7b:4d:48:2d:78:e6:4c:40:
07:6e:99:f4:d8:bd:a0:9f:66:23:8d:84:3c:1b:9b:f2:b8:6c:
44:12:6f:f6:ec:cf:e3:6d:ef:a0:e7:77:d3:b1:df:dd:d8:84:
c4:27:76:82:7b:9f:2e:5d:6a:e1:5a:99:bc:5f:84:cf:91:cf:
c9:74:18:37:c4:82:b8:d7:18:fa:8c:08:5f:87:f4:7b:2d:09:
b2:6b:05:80:7f:8c:b3:8e:b2:bc:64:67:ec:cf:1a:18:e5:a7:
90:6c:05:5d:61:12:19:de:1a:4c:17:2c:3c:a7:5f:ae:7a:06:
ee:fc:f9:86:b5:9c:99:20:7e:fb:59:12:04:af:47:71:85:61:
ee:ff:bc:4a:81:01:e0:48:22:59:6a:bb:05:a3:b7:39:80:15:
23:f6:fa:18:eb:d2:52:49:b7:a5:70:57:07:a7:33:f8:b3:c3:
a8:61:e7:7e:e7:a0:f5:c8:df:ba:fd:90:18:98:bd:3e:c6:9b:
04:57:66:a3:0d:fe:a1:35:88:16:cf:1f:0b:ea:e6:fe:f2:84:
a2:8e:e4:76:17:5f:c4:1d:80:9d:86:40:a2:0a:27:0b:03:38:
bc:6d:fa:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:34:38 2025 by rpki-client