Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eHMp4NPa8gbcpIU6Y6pURjrs4tM.roa
File: eHMp4NPa8gbcpIU6Y6pURjrs4tM.roa (raw, json)
Hash identifier: kmLeCOQlOAIExj4PfK80T3ZHlrj3OeGKOaGL8MrOn3g=
Subject key identifier: 78:73:29:E0:D3:DA:F2:06:DC:A4:85:3A:63:AA:54:46:3A:EC:E2:D3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01905EBB6877BD0D6F5C65D04E62EFA3A830
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eHMp4NPa8gbcpIU6Y6pURjrs4tM.roa
Signing time: Fri 28 Jun 2024 12:04:18 +0000
ROA not before: Fri 28 Jun 2024 12:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 2a0f:a00::/29 maxlen: 29
2a0f:dfc0::/29 maxlen: 29
2a13:3380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Aug 2024 09:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5e:bb:68:77:bd:0d:6f:5c:65:d0:4e:62:ef:a3:a8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 28 12:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=787329e0d3daf206dca4853a63aa54463aece2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:9c:ff:a6:03:c4:60:ad:f3:4c:04:cc:e6:
fd:1b:a4:60:e5:fe:b8:bf:02:78:2c:28:d6:6e:8b:
e8:aa:fa:23:ae:30:60:4d:37:e6:33:f6:ca:0f:b5:
48:84:a5:b7:fa:98:80:ef:19:a6:01:b7:b5:42:d0:
34:ac:8b:07:4f:3d:88:cc:0d:4b:cb:8f:02:de:26:
9d:c5:cb:7b:6a:8e:61:03:ab:9f:2f:76:12:57:17:
62:99:f7:55:05:51:c3:49:81:54:c5:3c:ee:0b:c7:
1f:e1:26:ec:28:47:92:0f:68:48:83:39:50:2f:05:
e2:b7:20:50:bf:13:0c:7d:bd:18:e3:05:60:bc:fc:
41:4d:ec:7c:55:ee:a2:f2:ff:53:14:fc:97:18:6d:
d2:b6:0c:82:df:95:c0:a6:8d:c7:01:eb:40:3f:c8:
ec:86:25:6c:82:6f:b9:37:92:e1:85:aa:5d:c4:a3:
fc:5a:92:6f:b5:f1:63:2f:c2:3e:e6:72:09:cd:bc:
1d:13:d6:52:a1:3f:4b:b9:d0:24:7f:c8:5e:60:3b:
67:a8:37:ae:8c:d2:d3:02:d5:c4:39:c7:c6:43:bd:
9b:be:31:c0:b6:97:55:6f:48:98:46:d3:f5:5b:88:
b9:b0:2e:0b:fd:27:a1:b2:5b:2c:31:3e:95:f7:09:
c3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:73:29:E0:D3:DA:F2:06:DC:A4:85:3A:63:AA:54:46:3A:EC:E2:D3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eHMp4NPa8gbcpIU6Y6pURjrs4tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:a00::/29
2a0f:dfc0::/29
2a13:3380::/29
Signature Algorithm: sha256WithRSAEncryption
3d:28:75:ec:af:3f:a0:95:1f:2e:08:6d:72:72:8c:29:b9:53:
61:f6:21:19:5b:6c:d2:58:da:51:03:4d:c9:9f:b6:f1:f1:34:
65:a4:fe:fd:fc:64:8a:3b:27:7b:5f:a7:25:39:77:db:21:68:
e8:68:78:ac:19:d8:c8:ec:20:41:90:48:87:68:6d:5a:91:9e:
50:87:d7:b9:f6:18:2e:fe:fa:c6:e0:35:ed:31:86:ea:0c:3a:
3b:a4:8a:f0:74:db:ec:11:3c:fa:6f:5b:ab:0d:27:ad:9d:62:
9f:4f:bf:d9:23:4c:09:91:d0:d6:b7:8a:99:5c:43:77:24:07:
ec:04:b0:48:ed:f1:5b:a6:95:9b:e2:d1:d1:80:16:36:b2:d7:
a1:87:62:72:d5:eb:26:2a:37:28:7a:9d:ed:1e:8a:41:cb:41:
8a:12:f1:89:e4:a9:d1:83:41:71:8f:cc:8d:59:a0:0d:a1:bf:
1b:c7:d0:ef:8f:81:13:3d:6e:89:bc:42:6b:ab:11:85:54:0d:
96:0b:ea:8a:8f:c1:fd:d1:d7:7e:57:f7:25:38:68:ef:09:d7:
bc:a4:f6:1d:38:cd:a6:48:50:28:da:c0:7a:1a:7c:51:d2:f1:
fb:0c:a5:7e:f6:06:28:53:bc:8a:8c:23:a6:27:97:1b:e1:dc:
c2:8c:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:45 2025 by rpki-client