Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vt7920ARd9UAjAeFEd2glVdfWzE.roa
File: Vt7920ARd9UAjAeFEd2glVdfWzE.roa (raw, json)
Hash identifier: 9qozzj4woIYqgw2vC5F5eENbfs5PwQBjg84u2IMjZ2w=
Subject key identifier: 56:DE:FD:DB:40:11:77:D5:00:8C:07:85:11:DD:A0:95:57:5F:5B:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190EE42F85FF33722DA88E233761B765837
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vt7920ARd9UAjAeFEd2glVdfWzE.roa
Signing time: Fri 26 Jul 2024 08:58:04 +0000
ROA not before: Fri 26 Jul 2024 08:58:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10753
IP address blocks: 2a0f:1940::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 03 Aug 2024 09:59:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ee:42:f8:5f:f3:37:22:da:88:e2:33:76:1b:76:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 26 08:58:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56defddb401177d5008c078511dda095575f5b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d8:8e:86:b7:50:6d:7a:f1:c4:87:a8:47:df:
17:cd:5a:64:2e:0b:64:6b:cd:ce:d7:de:4c:c3:78:
9f:f6:1f:f9:74:b7:42:dc:17:44:cc:60:8e:1c:4a:
f2:c7:30:8c:dd:92:5b:9e:d9:c2:9f:ed:8e:90:c1:
17:73:31:2f:45:e6:33:0e:11:f1:b7:47:76:ed:6b:
51:1e:2d:34:90:93:98:ec:65:5b:e8:c2:c9:54:a3:
53:9d:80:ab:37:53:fe:31:dc:4b:8b:3d:db:6a:78:
53:25:55:64:f3:ae:3f:df:3a:0a:94:78:22:f4:93:
d8:b4:df:ca:12:23:fc:78:3e:bd:b2:ec:7e:21:74:
be:ae:e6:ae:7f:f8:5b:c7:d6:8e:2c:99:eb:fc:19:
bf:92:5b:1a:91:51:96:ed:78:ee:aa:9d:9d:4d:7b:
a6:4e:fb:9b:2b:da:df:df:f5:f5:ee:f4:52:eb:e1:
0b:0c:dc:22:fe:21:85:73:6f:a8:7a:f5:b6:4c:25:
7b:8f:51:04:ad:aa:f6:a9:3e:8a:41:07:63:34:98:
86:65:65:5a:69:35:8e:70:ad:ad:ef:71:1d:d5:9a:
f8:81:39:7b:8b:70:f6:de:ac:eb:32:93:c1:68:a6:
66:c6:5f:e7:18:bf:5e:aa:9e:6a:3c:6f:8c:35:73:
d4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DE:FD:DB:40:11:77:D5:00:8C:07:85:11:DD:A0:95:57:5F:5B:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Vt7920ARd9UAjAeFEd2glVdfWzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1940::/29
2a11:4800::/29
Signature Algorithm: sha256WithRSAEncryption
9a:68:19:08:3f:e1:3a:d0:68:79:3f:db:eb:d7:a6:17:a6:13:
b1:cd:a8:73:f2:3f:79:27:d6:5b:d5:cc:75:b3:d2:52:10:6d:
0e:23:89:ba:a1:2e:09:a2:ea:97:36:4b:d9:0d:66:27:d1:8b:
31:50:fe:8e:ab:54:65:19:77:87:f0:09:71:30:cb:ea:3f:86:
34:66:43:c0:0a:79:16:16:82:47:7a:19:18:be:9c:96:2e:2d:
5d:eb:6e:fc:01:ae:53:38:b1:16:93:41:d0:1c:5b:0d:b8:fe:
a9:c4:62:89:f4:1e:ec:5b:c3:a9:49:b3:ad:de:fb:53:aa:f4:
17:d9:86:e9:3a:ff:80:e7:3a:ff:6b:9f:af:0e:a6:f4:6d:38:
dc:b4:e9:61:5c:43:23:02:7c:45:e7:c6:31:80:e2:f3:b3:7b:
93:ca:2d:5c:d6:c7:e3:cd:9f:de:3c:aa:78:18:54:1d:3c:ad:
6c:de:aa:c0:86:ba:91:e6:c2:19:ba:ed:d4:fa:f5:b0:fb:bf:
83:95:5b:42:6a:22:ea:25:a8:e5:1b:6d:7f:e5:61:bd:38:37:
aa:6c:a1:6f:90:ab:7e:5d:8b:32:f7:ab:fb:30:c2:1e:58:d3:
0c:53:49:45:cc:ac:39:27:7f:c2:e8:0f:d7:2f:b5:f8:79:33:
88:da:bb:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:33 2025 by rpki-client