Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_0cPQqpUDQZ91DBDESDqBtqY2Fk.roa
File: _0cPQqpUDQZ91DBDESDqBtqY2Fk.roa (raw, json)
Hash identifier: 5ISt07suLsQw9ffyia6977vtKCOte9AE+2EthCGBJZw=
Subject key identifier: FF:47:0F:42:AA:54:0D:06:7D:D4:30:43:11:20:EA:06:DA:98:D8:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191B351B7FEB5BD219F66474F546C3FB471
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_0cPQqpUDQZ91DBDESDqBtqY2Fk.roa
Signing time: Mon 02 Sep 2024 15:19:22 +0000
ROA not before: Mon 02 Sep 2024 15:19:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d06:66::/48 maxlen: 48
2a0f:ee00::/32 maxlen: 32
2a13:8c84::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 13 Sep 2024 18:47:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:51:b7:fe:b5:bd:21:9f:66:47:4f:54:6c:3f:b4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 15:19:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff470f42aa540d067dd430431120ea06da98d859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1d:e8:d4:44:bb:73:d9:ef:c9:f8:7c:18:92:
ad:85:25:bb:45:a6:13:ea:1f:20:e3:4d:8e:c4:67:
6d:2c:33:98:ea:ba:e1:8c:78:fb:3b:19:1c:c2:c9:
d4:88:2d:c7:30:0a:dd:d8:ab:35:ec:cf:c4:93:33:
36:a0:d7:b5:14:08:24:e7:d4:bb:a7:23:9b:7c:6c:
61:b4:72:bc:52:31:63:56:72:4f:80:6c:c9:cf:68:
dd:98:6c:4f:a1:a0:35:5d:45:a9:8f:ae:78:ae:74:
57:8d:f7:b7:7f:7b:6e:2e:d6:67:10:f8:a2:0c:61:
4a:77:38:5f:e8:a6:86:cd:cb:a5:7f:8d:c8:84:bc:
89:85:cf:fd:70:2c:8f:ea:61:1b:01:bc:a3:b0:f1:
5e:95:2e:a3:d2:7e:fb:5f:cb:23:52:de:e2:eb:36:
37:34:66:0d:af:ab:c2:df:ea:f5:27:99:2b:e4:06:
7e:5a:6e:0f:b5:03:53:64:3e:b6:dc:66:f7:d4:a0:
7d:fb:e7:9b:a5:6c:36:91:37:60:77:c6:2d:3c:ca:
41:df:e3:2f:a7:8c:42:0c:17:76:69:45:8d:1d:56:
9c:80:51:b7:2f:b8:5f:41:07:7e:2f:b2:84:79:53:
16:b5:f7:50:1e:54:05:18:27:dc:5e:75:60:26:ae:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:47:0F:42:AA:54:0D:06:7D:D4:30:43:11:20:EA:06:DA:98:D8:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_0cPQqpUDQZ91DBDESDqBtqY2Fk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:66::/48
2a0f:ee00::/32
2a13:8c84::/32
Signature Algorithm: sha256WithRSAEncryption
89:36:d5:ec:c7:ee:d3:83:ce:85:b8:75:0f:07:b0:c3:b8:27:
67:39:c8:5c:3b:f7:9c:ad:56:2b:26:35:70:cc:50:98:d0:ef:
7c:7f:d0:91:37:d5:b9:2a:df:60:f9:92:09:d7:ef:88:c2:9d:
1c:80:80:7f:a1:02:a0:08:bd:21:94:33:c3:b3:24:68:78:3d:
de:28:bc:c0:34:bb:ec:b1:2a:4f:7f:40:60:ad:73:39:0c:ab:
59:93:8e:80:0a:10:fb:80:cc:cc:31:af:8d:00:cb:92:3d:4d:
09:a3:fc:08:82:11:0c:2c:b9:10:e2:bc:0a:bf:7b:9c:b3:42:
33:7f:ae:98:cc:02:7a:42:98:a4:ee:9c:ea:32:27:41:8c:9e:
cf:4b:71:82:cd:c3:db:54:1f:fc:2b:d9:0c:81:8f:de:92:1a:
07:fc:fa:10:e1:7b:64:ac:1a:79:7b:9b:41:62:8a:64:51:68:
d1:ae:bd:7c:52:8b:15:4b:d3:b5:91:90:26:d2:b3:32:34:8d:
04:18:cd:c2:db:e5:7d:59:78:4d:27:d1:b1:e2:7d:c4:10:29:
50:72:38:48:72:31:ef:ad:69:52:f1:74:7d:a9:da:ab:51:71:
0d:47:b3:81:10:40:70:1e:28:f0:f0:de:72:c1:2d:9b:28:16:
1a:d9:03:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:57 2025 by rpki-client