Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eirTJ1i30qwu0JVXNtrfixh4roY.roa
File: eirTJ1i30qwu0JVXNtrfixh4roY.roa (raw, json)
Hash identifier: 8Rm0RWVbg+ulKGmFgPV2KEEJYFfm40euB8QL7azwNio=
Subject key identifier: 7A:2A:D3:27:58:B7:D2:AC:2E:D0:95:57:36:DA:DF:8B:18:78:AE:86
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019473ED6A5B900D8F88BB403BBEC6466C33
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eirTJ1i30qwu0JVXNtrfixh4roY.roa
Signing time: Fri 17 Jan 2025 11:02:06 +0000
ROA not before: Fri 17 Jan 2025 11:02:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0d:8f80::/29 maxlen: 29
2a0e:1a81::/32 maxlen: 32
2a0e:f500::/29 maxlen: 29
2a0e:f602::/32 maxlen: 32
2a0f:1e82::/32 maxlen: 32
2a0f:3d83::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
2a10:67c0::/32 maxlen: 32
2a13:9281::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 31 Jan 2025 07:26:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:ed:6a:5b:90:0d:8f:88:bb:40:3b:be:c6:46:6c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 17 11:02:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a2ad32758b7d2ac2ed0955736dadf8b1878ae86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:78:58:4d:b6:8b:25:d4:b2:89:8a:de:8e:
b2:96:c7:53:1f:36:0e:be:fb:3f:4e:b6:30:8a:fe:
00:3b:bf:de:4e:8b:a1:3b:30:3b:8e:f7:72:01:d6:
4f:c2:4f:12:97:07:87:77:cc:7f:0b:8e:26:b0:b9:
9c:9f:06:51:3a:9f:fa:59:65:78:fb:ac:ef:73:47:
c9:eb:6e:4c:02:c3:72:cc:33:b0:d4:bb:7a:8d:e2:
cf:50:92:c4:d2:4f:df:cf:7e:1e:b2:af:c4:e1:97:
e0:b9:5b:56:1d:ed:87:3a:42:d7:c1:f9:b3:40:4d:
f3:fb:19:8a:45:8c:5c:e9:e6:56:1c:48:3b:dc:f6:
8c:cf:de:1e:fe:ab:86:c1:d7:24:aa:4a:ca:ab:6b:
ff:f4:cd:67:1f:26:8b:74:6a:11:1c:76:e8:d7:00:
aa:31:cf:17:91:99:f2:f6:46:95:1c:65:8e:5a:d6:
db:0d:ce:72:6e:4c:18:28:e8:7c:7b:15:9d:8c:2d:
12:75:99:68:44:2d:4b:5c:03:87:9b:5c:78:b1:47:
29:74:79:96:e6:80:8f:29:04:5d:c2:35:57:48:ce:
9f:a2:94:c0:70:9f:b5:1f:3b:26:b7:2f:c5:7f:0b:
ee:00:a2:a9:28:03:56:6e:fc:a5:63:11:30:d1:c1:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2A:D3:27:58:B7:D2:AC:2E:D0:95:57:36:DA:DF:8B:18:78:AE:86
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/eirTJ1i30qwu0JVXNtrfixh4roY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0d:8f80::/29
2a0e:1a81::/32
2a0e:f500::/29
2a0e:f602::/32
2a0f:1e82::/32
2a0f:3d83::/32
2a10:37c0::/29
2a10:67c0::/32
2a13:9281::/32
Signature Algorithm: sha256WithRSAEncryption
7f:e7:60:9b:e0:c9:83:a5:71:8c:59:12:0f:09:be:39:c5:ea:
af:c1:31:b1:e1:d2:f0:26:ee:96:7d:1d:94:f3:3c:da:04:3a:
ce:69:77:21:49:ce:3b:5f:08:cd:29:af:db:4e:20:b0:bf:5c:
87:ea:ee:1d:87:7e:ec:74:8f:d3:19:f9:8d:c3:33:d0:6c:f1:
ba:3d:07:9d:3e:55:f5:f7:10:0c:6f:64:fa:26:10:6d:e2:ea:
67:aa:f5:ea:c0:20:41:a1:b0:6e:d8:12:d4:c8:e6:5b:ca:34:
f1:8e:91:46:f6:0f:98:ae:92:a4:3f:b8:49:f9:1a:88:7b:6b:
63:e3:c2:4a:01:3e:6f:ec:82:71:6a:49:82:3a:49:a6:18:93:
6a:e4:31:73:a8:4d:9b:8a:cc:cb:72:5d:8d:c9:2a:8e:a8:6d:
c8:58:9e:ad:bc:0e:71:b2:32:cf:d1:de:a7:d6:d8:63:16:97:
82:83:85:fa:8e:f0:6d:28:f7:ad:f5:8d:36:b1:15:25:a6:db:
e3:3c:63:fb:e2:6f:49:ea:98:da:b9:25:7a:65:cb:bb:83:2f:
a5:86:37:b9:73:22:2a:39:48:0d:88:01:b1:bc:ac:7d:f5:1d:
f6:88:ac:1c:81:92:0a:87:70:84:8d:97:23:e4:ef:30:94:dc:
07:b0:bc:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:35:32 2025 by rpki-client