Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W23ph1gZm5Su5kdx8KlHHpj8V1E.roa
File: W23ph1gZm5Su5kdx8KlHHpj8V1E.roa (raw, json)
Hash identifier: /ZnukKYyNfZIZoktLVOLgpDPIO16t/nt16ITDzPp0c4=
Subject key identifier: 5B:6D:E9:87:58:19:9B:94:AE:E6:47:71:F0:A9:47:1E:98:FC:57:51
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E0FEFDBA57E176A4AD7993F6C0B29BA02
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W23ph1gZm5Su5kdx8KlHHpj8V1E.roa
Signing time: Tue 05 Mar 2024 18:46:01 +0000
ROA not before: Tue 05 Mar 2024 18:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152631
IP address blocks: 2a0f:1440::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 13 Aug 2024 19:31:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0f:ef:db:a5:7e:17:6a:4a:d7:99:3f:6c:0b:29:ba:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 5 18:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b6de98758199b94aee64771f0a9471e98fc5751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:60:cc:60:46:e3:bb:8c:f3:0c:9b:0f:d9:10:
9e:fa:ac:93:1b:b3:26:0f:84:b8:b8:21:ae:45:d8:
24:f6:48:49:11:a4:ca:d8:19:c8:b4:b2:e9:38:a5:
2a:93:47:c8:be:ee:22:dd:d0:d3:85:c6:aa:95:b5:
b8:6b:05:00:97:37:1c:36:e4:39:24:f5:69:cd:b5:
97:6f:53:c3:51:05:ee:1d:b9:bd:7a:92:bb:d6:09:
d3:de:16:05:28:9b:cb:f5:56:c1:31:4e:8d:eb:d5:
aa:3d:42:aa:09:c1:52:1d:73:ce:46:0c:0b:83:38:
f8:6b:60:73:b0:35:d5:d0:8f:9b:95:60:65:b5:ac:
14:82:95:e1:f5:9a:71:1a:33:f5:92:22:c0:c2:f4:
33:cc:c1:c4:10:ee:0e:be:58:43:33:f6:b3:e2:e8:
e3:a3:a3:40:7f:8a:0c:33:0c:31:b7:99:ce:67:27:
b5:74:bc:86:d6:68:79:7d:91:b3:d8:10:12:9c:f0:
77:08:c7:2e:fd:9d:bb:41:14:0f:84:0e:e8:ef:01:
97:5c:c6:ff:2b:a7:4b:fa:a7:3e:70:79:f8:ca:6e:
20:2e:ea:af:98:9d:cc:06:b6:47:4d:f9:0e:99:60:
6a:85:5e:77:63:6a:e5:10:af:34:78:ea:63:72:eb:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6D:E9:87:58:19:9B:94:AE:E6:47:71:F0:A9:47:1E:98:FC:57:51
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/W23ph1gZm5Su5kdx8KlHHpj8V1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1440::/29
Signature Algorithm: sha256WithRSAEncryption
49:2d:25:d4:2f:16:c8:82:1c:64:56:d3:eb:de:7f:47:bd:58:
e3:29:c7:0f:66:f9:3f:8c:7d:91:c3:11:04:79:21:ba:ea:25:
8b:7c:82:4c:54:70:b8:0f:5a:e5:75:4a:34:c1:38:91:25:97:
31:6a:4b:2c:1c:5a:c7:4f:4c:ed:f5:65:61:6d:3f:b8:c2:35:
45:97:72:a6:73:04:fb:03:f5:6f:44:25:46:cb:88:80:85:c1:
c4:a0:26:b1:0c:96:d3:5e:49:ed:a5:e8:d1:8f:eb:ef:e8:c6:
10:6c:61:b8:ee:7d:29:cb:90:c0:c2:5f:1b:45:71:33:99:e4:
27:fa:20:88:a8:ab:5b:b9:e6:78:b6:f8:8a:f3:23:ad:58:51:
6a:c0:99:ce:ee:8e:5f:1e:f9:2b:e9:9e:1b:16:45:5f:ae:a9:
c3:f5:83:0b:c8:a2:5e:76:da:7b:57:18:5f:d2:2d:a5:f7:96:
49:ed:13:83:ba:9d:1e:3d:6d:b5:72:40:cd:b0:d3:cb:f9:e4:
4b:14:c1:30:93:f5:96:0d:75:26:f0:51:cd:3c:29:ef:46:4d:
da:83:6d:47:29:7a:ea:cb:0d:06:95:a9:9b:bb:8e:b9:21:36:
18:ba:cf:22:cf:23:cc:d2:e6:5c:29:02:c9:15:b9:2e:e8:cc:
4d:8b:6e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:05:50 2025 by rpki-client