Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fJ9qeC_EFLecNZaaBz4VgA6Tek0.roa
File: fJ9qeC_EFLecNZaaBz4VgA6Tek0.roa (raw, json)
Hash identifier: iu/k7qaTfiNlveOVp+hRo+MsIRKrPIXaKtJg6orka34=
Subject key identifier: 7C:9F:6A:78:2F:C4:14:B7:9C:35:96:9A:07:3E:15:80:0E:93:7A:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190C4C923221D47ECAF7EC5999E28C7186C
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fJ9qeC_EFLecNZaaBz4VgA6Tek0.roa
Signing time: Thu 18 Jul 2024 07:40:34 +0000
ROA not before: Thu 18 Jul 2024 07:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0a:2940::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 23 Jul 2024 06:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c4:c9:23:22:1d:47:ec:af:7e:c5:99:9e:28:c7:18:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 18 07:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c9f6a782fc414b79c35969a073e15800e937a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:ca:b2:9f:2d:ca:d4:d9:1d:32:94:1d:ac:
1b:a2:e8:e3:f4:85:b0:8a:89:f7:ab:e3:20:f2:82:
bb:fd:24:35:17:38:6e:72:2b:a9:4d:1c:50:29:b5:
54:78:51:80:cb:b8:67:9c:61:b5:44:55:07:eb:b7:
9d:8c:c6:16:05:44:4c:d2:fb:be:c7:2d:f1:c0:09:
8a:f2:03:74:1d:fc:44:7c:d2:e1:43:8e:db:2e:eb:
a7:cf:2e:72:57:29:a6:bf:03:d5:41:b7:92:ef:58:
74:85:31:74:e9:03:df:d0:f4:50:26:6c:99:66:f6:
8d:59:91:a7:01:9f:14:ae:0f:79:04:fe:fc:8b:a5:
42:c2:fa:50:c7:39:8c:d4:0e:90:d8:9c:12:62:c0:
74:bc:b8:0d:c5:2c:e2:b1:a7:ee:5f:b7:bd:5f:4b:
21:05:0b:be:14:ee:79:93:ce:a8:c5:67:67:34:6a:
e9:f7:77:c0:7a:4b:d6:0d:39:9a:bc:25:a4:c7:56:
c9:e3:a7:a9:92:99:94:96:c9:d4:22:82:22:db:22:
71:31:7e:22:22:05:63:94:8d:9a:22:69:2c:10:92:
52:a8:ae:e8:05:95:9e:29:05:fa:a7:9f:52:82:94:
9d:3a:3c:56:21:b6:7a:34:b8:8a:44:ff:72:72:5d:
5c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:6A:78:2F:C4:14:B7:9C:35:96:9A:07:3E:15:80:0E:93:7A:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fJ9qeC_EFLecNZaaBz4VgA6Tek0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2940::/29
2a10:3440::/29
Signature Algorithm: sha256WithRSAEncryption
c8:cf:cc:6b:3a:64:11:46:be:a8:f2:98:5e:38:0d:16:ae:af:
88:4d:e4:01:d3:56:f4:a0:47:28:bf:b2:5e:86:da:b6:f7:b5:
33:9a:c0:76:a3:da:54:ba:e2:92:86:3c:3a:57:a6:86:43:9e:
04:b8:70:2d:d7:82:4f:61:e6:99:53:d5:64:62:9f:94:62:30:
53:24:d3:f6:b1:6a:61:11:1e:b5:9c:0f:fb:d4:89:e9:93:5a:
01:d5:17:a1:af:bf:e7:c0:80:4d:07:a1:35:de:a8:01:4f:64:
fa:c9:14:30:0a:53:a5:c1:93:9f:13:e0:d9:61:6f:89:33:a7:
10:60:10:ce:16:3d:68:e1:5c:d1:fe:7a:a5:c9:ff:a3:ed:59:
d5:59:1d:1c:6d:c6:03:28:fd:c2:59:4c:0e:57:51:a5:49:9f:
fa:51:25:d0:2c:24:ae:68:03:18:6b:63:0c:64:f9:68:4f:fb:
4c:6c:74:e9:dd:29:aa:f9:da:0d:6f:2f:2e:95:9a:ad:5d:9c:
ed:68:ab:21:f2:de:e3:3e:2e:ad:4e:21:29:33:e8:e5:63:ae:
93:e1:cd:0e:6c:1e:b4:a9:0b:16:45:61:ea:34:0b:d6:28:cc:
8d:fd:81:99:6e:89:9f:50:f5:84:13:65:52:2f:12:a8:dc:a1:
52:7d:c5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:48 2025 by rpki-client