Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XPxoZNAQQSQUhaY13lEiNzDhwkc.roa
File: XPxoZNAQQSQUhaY13lEiNzDhwkc.roa (raw, json)
Hash identifier: K8dfNL9z2eheV7lgsLx2rzRdfqb6/q7Yr0gy9GIWHnw=
Subject key identifier: 5C:FC:68:64:D0:10:41:24:14:85:A6:35:DE:51:22:37:30:E1:C2:47
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190FF9E06A1C9DDF3441ED1DAE8C5DFD9F3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XPxoZNAQQSQUhaY13lEiNzDhwkc.roa
Signing time: Mon 29 Jul 2024 17:51:04 +0000
ROA not before: Mon 29 Jul 2024 17:51:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60647
IP address blocks: 2a0f:3d84::/32 maxlen: 32
2a12:ecc0:271::/48 maxlen: 48
2a13:8c82:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 31 Jul 2024 14:22:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ff:9e:06:a1:c9:dd:f3:44:1e:d1:da:e8:c5:df:d9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 17:51:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5cfc6864d01041241485a635de51223730e1c247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:14:95:61:87:27:c9:ef:ac:ef:9a:e5:ef:
75:ec:b8:78:05:1f:1b:18:f5:5b:df:ab:ec:77:f6:
88:3d:51:53:b8:28:9f:dc:5b:cb:b3:c2:d1:25:03:
d0:a4:2c:e9:86:9d:07:e4:a2:25:fa:66:ae:a7:27:
4b:9f:6c:3c:cc:c4:51:cc:d3:2b:8f:6b:9a:f1:8e:
ab:46:05:ce:fa:8c:26:1a:73:e3:c0:33:10:62:27:
bf:43:39:bb:69:c9:c3:c1:76:22:9a:8c:a2:8f:11:
ce:19:32:41:87:37:31:54:6f:0a:ae:a7:65:fd:fc:
11:ee:1b:fd:15:5e:8c:a8:8a:1a:fd:e2:75:1e:b9:
90:b2:12:c2:d4:de:bf:af:67:fd:bd:aa:95:33:b5:
38:a7:a2:71:57:7c:78:54:23:bc:9f:55:8f:b4:9a:
91:07:9d:2c:9e:98:03:d6:52:4a:ba:8f:c1:73:37:
fc:ff:81:52:09:f1:0b:ce:26:0a:ae:c3:97:79:ef:
25:c0:cd:32:94:d5:4f:81:00:4a:60:c7:71:90:af:
bc:02:0f:91:da:df:80:0f:ba:31:d6:70:e2:da:4f:
ff:70:a7:19:12:da:4c:58:a1:4c:11:51:9c:ab:12:
02:fe:26:86:c7:7c:17:5b:2f:05:4b:65:86:e5:13:
51:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FC:68:64:D0:10:41:24:14:85:A6:35:DE:51:22:37:30:E1:C2:47
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XPxoZNAQQSQUhaY13lEiNzDhwkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3d84::/32
2a12:ecc0:271::/48
2a13:8c82:1::/48
Signature Algorithm: sha256WithRSAEncryption
6c:7f:4c:a2:39:15:5d:c7:47:5d:65:cf:24:e0:b5:a4:da:3c:
cf:d8:5a:d3:8e:be:07:f9:5c:f4:1b:7d:96:90:4f:96:68:29:
c8:fa:dd:5a:68:73:ce:af:a9:53:ac:71:d6:3c:c5:04:19:70:
91:c9:e2:cf:81:2a:c6:58:2b:5e:ec:e8:5d:81:fb:cb:d0:5e:
4b:27:c5:a7:c3:d8:2a:7b:00:05:60:d8:14:2f:7f:03:48:7a:
9d:4e:7a:66:a1:82:5e:af:ba:2b:30:8a:8a:21:13:4e:3c:41:
de:a3:b7:f4:ac:64:56:49:d8:4d:58:d8:25:55:e1:12:c0:9a:
39:37:e4:11:4c:77:8e:d8:ad:14:3c:90:be:bf:a4:7f:64:fb:
a6:9c:f2:ac:69:2c:49:f4:8b:62:35:30:ff:59:b7:11:0e:2e:
73:9e:5a:50:4c:7b:08:59:df:ea:67:a7:4f:a1:f5:66:70:dd:
8c:cd:41:74:a6:ba:20:42:df:7d:8d:be:c9:70:d3:26:be:c3:
b5:a1:82:95:41:c2:fe:a6:01:27:b3:13:44:e5:ac:89:9c:8c:
62:42:8e:48:47:94:49:2c:c6:62:7b:57:c4:56:73:aa:07:7d:
a9:ac:34:df:63:bd:eb:a5:5f:c8:2c:2b:07:76:5a:b7:21:b2:
46:37:ce:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:06:35 2025 by rpki-client