Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wv9BTXyrGDBMtZ6pMWpGzV5uQnE.roa
File: Wv9BTXyrGDBMtZ6pMWpGzV5uQnE.roa (raw, json)
Hash identifier: KegLEAMCRtBnlMuxJP3m+j73YgJu2CbQzDM3rKLh7Js=
Subject key identifier: 5A:FF:41:4D:7C:AB:18:30:4C:B5:9E:A9:31:6A:46:CD:5E:6E:42:71
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019532706A52F6926420301E03AB2E36ABE0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wv9BTXyrGDBMtZ6pMWpGzV5uQnE.roa
Signing time: Sun 23 Feb 2025 10:53:02 +0000
ROA not before: Sun 23 Feb 2025 10:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 23470
IP address blocks: 2a0f:dec0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Feb 2025 16:52:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:70:6a:52:f6:92:64:20:30:1e:03:ab:2e:36:ab:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 10:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5aff414d7cab18304cb59ea9316a46cd5e6e4271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e3:92:94:e8:26:79:00:0d:a5:31:fa:20:f3:
8c:16:4f:be:29:74:25:9e:c9:0a:5c:74:69:c8:95:
43:c6:97:84:10:51:cd:0c:a5:8a:83:38:78:f2:68:
bb:73:53:48:97:2b:cf:82:7b:2c:3c:64:49:d8:0d:
6c:4d:e5:85:f0:64:18:d5:43:0f:f7:ed:d5:d1:fd:
68:cb:a3:26:12:b4:42:90:ef:1e:b7:e2:c1:27:20:
3f:55:1b:cd:cf:7c:3e:7b:0f:f3:c0:df:bf:56:5d:
41:9c:c5:a8:79:0c:00:a2:3b:d9:42:6e:1e:25:bc:
3b:65:e0:28:f9:5c:2a:bc:b0:2e:7b:27:df:86:ca:
5c:02:ae:ae:58:e8:88:f9:02:cb:bf:79:d0:b6:7d:
0b:81:38:54:8e:3b:c3:c0:68:3e:97:e0:1a:47:52:
26:23:47:d6:99:5b:55:0d:2b:3d:92:1b:f2:8d:55:
ee:f1:e7:d3:6b:f3:f2:d7:31:17:b6:e1:aa:44:29:
de:62:d3:9a:bd:a3:8f:10:c3:e3:82:9c:2b:21:b2:
2f:ad:34:b1:15:92:9b:2c:cd:e2:1d:7a:6c:b1:a7:
a6:4b:f9:20:27:3c:90:c2:eb:80:d9:ff:cd:a8:e6:
75:0e:f0:f7:ab:8f:53:ed:7f:51:b7:31:d6:2c:c0:
1c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FF:41:4D:7C:AB:18:30:4C:B5:9E:A9:31:6A:46:CD:5E:6E:42:71
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Wv9BTXyrGDBMtZ6pMWpGzV5uQnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dec0::/29
Signature Algorithm: sha256WithRSAEncryption
9e:95:a7:a9:b8:4c:04:1c:7e:f7:73:96:02:b5:98:93:a8:4d:
18:3c:cd:e3:3b:8b:f9:4e:55:fe:ee:b6:ef:f4:d8:18:91:1c:
94:86:48:24:f9:d6:70:ac:22:02:ea:cd:42:63:c8:e2:d8:de:
f8:fe:68:be:2e:e3:4e:34:d0:57:c2:4a:5c:58:9c:58:6d:54:
e0:c0:25:58:aa:8a:49:f9:8a:38:ba:70:1a:40:bd:1b:6f:e7:
39:fb:38:6c:db:c2:d1:88:0a:ad:83:b9:51:3e:20:bf:1a:50:
0d:a7:bb:6e:94:a8:41:84:6c:0f:26:00:e3:20:39:c6:8b:23:
bd:72:aa:71:4c:c7:9c:a9:19:02:53:94:30:2a:bb:44:4a:1c:
fe:ac:1e:d9:0c:c9:b4:8d:eb:dd:c2:f6:28:88:15:0e:5f:b7:
a2:f9:3d:e7:67:f4:33:ab:d8:c9:42:57:49:8d:0f:ab:56:ee:
40:9d:46:23:36:fc:04:af:a8:f7:46:a6:69:9e:02:c8:9f:9a:
5c:5b:87:7d:f0:7e:9d:21:e9:b1:af:e1:7c:cf:1e:66:22:d4:
8c:35:d2:c1:0d:94:53:f0:10:64:d9:3d:15:6f:84:31:dd:a4:
0e:30:0b:f9:c7:f1:c2:db:9b:09:85:fb:74:67:7c:03:e4:47:
9f:70:b2:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:13 2025 by rpki-client