Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VwfgjXEMggYSitsEbsu0Pi8Y4Uw.roa
File: VwfgjXEMggYSitsEbsu0Pi8Y4Uw.roa (raw, json)
Hash identifier: 4vCxAWDkfCJaDi3bgI/5NiBc8+0jt+LbtCdhp/scmOM=
Subject key identifier: 57:07:E0:8D:71:0C:82:06:12:8A:DB:04:6E:CB:B4:3E:2F:18:E1:4C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194184C7CAB8D24A84F4D7C956FFF56657E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VwfgjXEMggYSitsEbsu0Pi8Y4Uw.roa
Signing time: Mon 30 Dec 2024 16:00:53 +0000
ROA not before: Mon 30 Dec 2024 16:00:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0d:8f80::/29 maxlen: 29
2a0e:1a81::/32 maxlen: 32
2a0e:f500::/29 maxlen: 29
2a0e:f602::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:67c0::/32 maxlen: 32
2a13:9281::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:18:4c:7c:ab:8d:24:a8:4f:4d:7c:95:6f:ff:56:65:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 30 16:00:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5707e08d710c8206128adb046ecbb43e2f18e14c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:f4:ea:8b:1a:b2:31:29:53:fc:b6:62:e0:
01:14:c6:95:45:56:01:5e:ab:4f:0c:74:21:0e:39:
8f:5d:a0:56:01:00:5d:ac:df:0c:14:df:ed:4a:4c:
f7:d2:8b:9a:9c:4f:03:08:97:ef:a0:21:3f:78:71:
c1:a1:55:26:9d:90:55:f5:ae:9b:a0:f1:c5:a7:90:
b1:90:3e:54:a1:41:eb:6c:94:e1:94:ed:27:a9:14:
78:6f:5e:31:01:0b:42:b4:3d:f8:f8:d7:a6:3b:5e:
2a:9a:67:e4:0e:68:6a:0f:46:f3:15:01:bf:06:27:
fa:3a:37:94:a8:96:f4:6b:3b:4b:0f:40:6c:b6:b8:
8d:0d:6a:dd:91:e1:f0:36:4d:da:ae:9d:f5:79:c2:
ab:c3:eb:b3:0e:89:b7:d4:b6:0a:95:8e:bc:02:96:
97:05:0c:df:80:62:72:61:c9:09:61:d2:d4:a1:54:
e0:23:e0:0b:7c:66:7f:bf:d2:4d:67:eb:da:f5:81:
fd:bf:23:63:45:5a:0b:c3:13:b2:a7:12:f0:a0:d4:
6b:d1:0e:eb:7e:59:bc:4c:da:1b:62:ba:f8:e5:af:
01:ca:63:c6:12:91:fc:81:bf:5d:7b:a1:fb:c2:8d:
3b:de:b4:89:22:87:ed:0a:79:71:0f:ab:39:a8:5b:
a8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:07:E0:8D:71:0C:82:06:12:8A:DB:04:6E:CB:B4:3E:2F:18:E1:4C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VwfgjXEMggYSitsEbsu0Pi8Y4Uw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0d:8f80::/29
2a0e:1a81::/32
2a0e:f500::/29
2a0e:f602::/32
2a0f:3d83::/32
2a10:37c0::/29
2a10:67c0::/32
2a13:9281::/32
Signature Algorithm: sha256WithRSAEncryption
4b:7b:6f:3c:b9:cc:54:56:e2:64:95:f5:94:5c:c5:47:67:0f:
75:3d:47:ca:76:38:20:37:0c:7f:c1:93:1d:c4:7f:5d:2c:af:
50:a9:2c:57:a7:9c:17:c7:56:a6:75:24:3b:b9:f4:62:ba:00:
65:0a:20:33:2b:aa:69:52:93:b7:46:a8:e4:ed:78:be:13:c5:
12:17:5b:88:eb:a8:56:77:0e:94:86:6e:ea:a4:a5:0d:6c:14:
7a:3d:61:26:7d:48:22:40:e8:46:1e:1a:8c:21:a1:35:f4:0c:
40:47:dc:a3:f0:04:0f:10:79:c0:65:ec:8e:a3:ae:52:b8:f9:
ea:c5:d8:7b:c5:b1:12:9f:a5:f7:e2:ae:a4:c3:4b:f3:52:a3:
7c:ae:a0:e1:11:ef:29:92:ab:97:ee:dc:45:8e:a9:f3:94:d2:
39:2f:84:cf:fa:8b:70:90:6d:15:b6:1e:51:c6:64:5e:2e:7e:
a5:51:be:8e:5b:11:93:9d:04:ed:3a:58:d8:c0:2e:8d:52:d7:
87:82:26:9a:14:c2:fc:95:c1:cf:5a:ed:27:9d:f2:a8:01:d7:
b6:f9:d9:8f:5e:0b:08:c6:07:dd:24:8e:8f:5a:53:17:23:b2:
7a:da:94:7f:4b:03:93:db:c4:d8:0e:9d:4e:9e:33:74:ed:6a:
ea:ba:23:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:12 2025 by rpki-client