Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fDTDSxLqTSmTXPztDeTmGQ3twa8.roa
File: fDTDSxLqTSmTXPztDeTmGQ3twa8.roa (raw, json)
Hash identifier: YaMa2q8iUjraTjtyHzQqe5cBFJUKcdJ4UcQwih/A+68=
Subject key identifier: 7C:34:C3:4B:12:EA:4D:29:93:5C:FC:ED:0D:E4:E6:19:0D:ED:C1:AF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019137F58C4AA1F48F86BF844F14CD06A641
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fDTDSxLqTSmTXPztDeTmGQ3twa8.roa
Signing time: Fri 09 Aug 2024 16:25:24 +0000
ROA not before: Fri 09 Aug 2024 16:25:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d06:66::/48 maxlen: 48
2a0f:ee00::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Aug 2024 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:37:f5:8c:4a:a1:f4:8f:86:bf:84:4f:14:cd:06:a6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 9 16:25:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c34c34b12ea4d29935cfced0de4e6190dedc1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3f:ee:88:2c:d4:41:80:e7:93:e6:0c:0d:61:
a2:1f:9c:33:9f:86:f6:a7:f7:94:1a:f2:ee:8e:c5:
be:a9:85:d2:d6:fd:68:11:16:a0:bb:28:0b:fd:91:
13:7a:18:9b:3f:5b:00:1e:be:d3:85:2d:3c:26:bb:
6c:4b:a4:ec:13:c8:1e:1c:60:81:9d:87:69:df:76:
2d:79:a7:3a:34:b7:4a:78:9a:82:e3:29:f7:5b:c0:
d2:5e:b8:d5:84:28:3f:16:b1:51:3b:40:50:da:de:
d6:97:27:f8:c9:a1:92:37:8e:de:fc:4b:03:fb:2f:
47:f2:38:a5:84:cd:56:87:68:93:45:85:a1:c9:dd:
65:24:d7:ce:a6:b6:74:f2:ff:cc:9d:27:4b:6b:e6:
be:29:df:7b:68:f8:6b:88:76:4f:2f:91:14:97:80:
cf:f8:89:ce:f4:17:23:53:e1:7e:8f:d9:43:01:d2:
17:91:f1:ab:bc:cb:ff:1c:b3:91:fd:49:22:53:37:
fd:be:ed:95:d9:2a:d6:54:27:d1:6f:af:ba:ba:fc:
ba:c4:bf:9f:8d:29:18:cd:9d:31:9b:d7:27:98:76:
01:b0:98:8d:b0:02:4b:31:1f:a8:cb:a0:fb:3e:d8:
97:4f:90:a8:22:fc:be:d4:0f:29:0e:15:be:a3:00:
35:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:34:C3:4B:12:EA:4D:29:93:5C:FC:ED:0D:E4:E6:19:0D:ED:C1:AF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fDTDSxLqTSmTXPztDeTmGQ3twa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:66::/48
2a0f:ee00::/32
Signature Algorithm: sha256WithRSAEncryption
70:05:2a:4e:72:ed:31:fb:1d:cd:1e:7a:28:c6:48:77:44:5c:
3a:e3:81:9e:0e:97:ff:f3:f7:39:bf:65:0c:06:b8:f3:14:fb:
38:28:08:a3:61:0b:3e:c1:ee:07:b1:33:e2:1c:24:77:c5:b6:
3c:ab:ae:25:0f:4c:30:be:d7:c3:b1:83:1d:68:67:ce:ad:8d:
40:42:7a:c5:11:93:2e:8d:e9:4f:7e:3f:61:bd:83:6b:03:a3:
79:3c:a8:60:62:d9:0a:a7:6a:ba:b3:31:96:ac:cd:6e:2a:1b:
79:b2:9e:58:3e:e7:e3:a2:e5:ee:6c:f1:8b:87:5a:96:8e:70:
4c:2d:85:4e:cc:92:2c:93:97:34:61:ca:e2:dc:9c:f9:df:88:
71:70:04:a3:e0:20:5c:eb:07:2d:ad:f5:d2:ec:58:b0:c7:ac:
d1:a4:37:1a:a3:3d:f4:53:b6:bb:60:d5:35:96:cc:2e:ce:5c:
0a:53:05:62:8d:8d:6f:2f:18:ef:87:a7:8e:c9:aa:b6:6c:bb:
33:1a:36:d2:65:f7:c2:37:28:0b:2b:c5:ae:de:95:93:35:17:
e2:87:1c:71:ca:64:20:e4:7d:64:fb:fd:25:cd:5a:58:02:95:
11:72:f0:72:0c:ed:78:99:6c:a5:3a:c4:ac:05:bc:8b:a0:bb:
62:5f:1f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 00:55:56 2025 by rpki-client