Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/edJWkrEcARPfwQuEvZk3TSY3h4A.roa
File: edJWkrEcARPfwQuEvZk3TSY3h4A.roa (raw, json)
Hash identifier: p0QrgntDAevK5vofpVpTILL2fvrHP2OEq5o0VBzE6UE=
Subject key identifier: 79:D2:56:92:B1:1C:01:13:DF:C1:0B:84:BD:99:37:4D:26:37:87:80
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190546EB1DCA8CE6E7D485E8FC8E23F31DF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/edJWkrEcARPfwQuEvZk3TSY3h4A.roa
Signing time: Wed 26 Jun 2024 12:04:18 +0000
ROA not before: Wed 26 Jun 2024 12:04:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 2a0e:15c0:5::/48 maxlen: 48
2a0f:3d80:bac::/48 maxlen: 48
2a0f:e7c5:98bc::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 14 Jul 2024 15:12:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:6e:b1:dc:a8:ce:6e:7d:48:5e:8f:c8:e2:3f:31:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 26 12:04:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=79d25692b11c0113dfc10b84bd99374d26378780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f7:79:2d:68:15:ff:2b:2e:c9:06:c3:81:6a:
14:65:9d:6a:db:03:9d:3b:c6:14:e2:1e:0a:e5:08:
c0:d0:3b:cc:1b:24:ea:c6:11:1e:0a:8f:9b:7a:50:
ea:41:19:68:5a:f2:01:ca:d4:77:c0:12:30:b3:1f:
e1:25:14:3b:87:29:60:86:12:6a:f8:7d:c0:e7:48:
bb:11:6d:f1:11:81:7f:a9:59:e6:33:d0:2b:5f:07:
0a:36:48:18:91:6d:5d:6d:14:06:85:30:21:be:fc:
18:f8:4e:60:cd:07:97:05:9e:86:39:77:d0:f9:6e:
bd:0c:e9:34:30:fd:be:38:48:85:c0:0c:e6:d0:a1:
14:64:c8:15:b7:97:65:76:cf:33:b8:a3:ae:e4:c0:
9b:7b:31:1b:97:06:74:42:6e:49:19:d8:62:b4:dd:
c5:b3:ef:3c:2c:52:d8:25:b0:b1:b4:d7:ea:b6:79:
03:04:e9:4f:d3:3d:9e:e9:78:f2:1f:ce:0e:25:dd:
22:f3:6f:17:0b:50:c8:f1:d1:0d:90:ac:aa:42:12:
86:ec:b0:4d:5a:15:9e:8e:56:53:de:62:0f:22:62:
66:6e:eb:0a:09:7a:58:ae:c3:8b:2e:3c:b7:9f:9f:
e7:b0:f9:63:44:94:d8:b9:df:fb:80:5e:03:4d:22:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:56:92:B1:1C:01:13:DF:C1:0B:84:BD:99:37:4D:26:37:87:80
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/edJWkrEcARPfwQuEvZk3TSY3h4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c0:5::/48
2a0f:3d80:bac::/48
2a0f:e7c5:98bc::/48
Signature Algorithm: sha256WithRSAEncryption
8e:d2:29:44:81:28:63:52:9b:03:07:2c:84:43:f4:5e:2f:05:
c3:cc:97:71:db:f8:8d:30:65:4e:ae:e7:f8:af:f9:b6:68:0f:
b5:97:1e:52:b9:01:c3:1f:67:ae:77:67:3a:1e:47:1c:ea:c1:
d5:c3:3b:dd:31:7d:c4:cb:b4:c4:6c:8c:f7:49:78:b0:0a:42:
ff:42:73:b4:f4:e9:cf:e9:0d:80:01:e0:13:1a:36:dc:bb:65:
c8:83:84:f2:e3:70:e5:51:dc:93:50:05:29:2c:e2:15:68:75:
c8:3f:93:7c:93:44:58:e1:84:75:6b:73:80:4a:7f:31:75:13:
fd:4b:b4:dc:34:c4:5e:23:92:1e:b7:91:b0:1a:0d:73:9b:e4:
5d:9e:64:37:f0:b6:5e:c0:d7:2a:7b:36:b2:63:a6:0b:da:bf:
24:7d:c9:21:24:38:8a:e6:b7:f5:3f:84:3c:f8:1e:08:9f:50:
33:2d:89:ce:d6:1d:5f:60:0f:d9:3f:e7:e9:14:bd:e0:ca:f2:
4b:64:24:50:f6:48:8c:4f:4d:52:20:b5:60:6c:26:bd:54:47:
e6:d7:b6:4f:7d:01:bb:66:b1:71:e1:60:0a:78:da:86:b2:a3:
cd:e8:ec:25:55:ba:2a:af:0e:40:93:96:54:4d:a8:2a:2c:fb:
60:55:72:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:47 2025 by rpki-client