Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g-Falrh1Jvg-6O-u667XEJvjH6g.roa
File: g-Falrh1Jvg-6O-u667XEJvjH6g.roa (raw, json)
Hash identifier: vt3JpIxzST/bGmKJIEP/IWSOLk/yFsNSCMJU0NDGdiw=
Subject key identifier: 83:E1:5A:96:B8:75:26:F8:3E:E8:EF:AE:EB:AE:D7:10:9B:E3:1F:A8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274822C7FBD43D158BFCB554B82AD1C2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g-Falrh1Jvg-6O-u667XEJvjH6g.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 2a0f:dfc4::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 15 Jan 2025 22:06:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:22:c7:fb:d4:3d:15:8b:fc:b5:54:b8:2a:d1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=83e15a96b87526f83ee8efaeebaed7109be31fa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:56:a8:77:bd:6d:a3:f5:28:5b:29:e5:dd:11:
d0:62:b2:22:9a:a3:0a:a4:dd:eb:98:98:05:46:28:
d8:7f:8b:75:53:c3:ce:10:d1:0d:9d:5e:76:f4:92:
12:41:d5:04:36:2b:85:8a:6c:0d:a0:f0:c2:42:5b:
f3:06:49:8c:e2:bf:ac:b0:f4:20:59:84:88:5d:cc:
b6:2b:ec:2a:45:13:4b:6e:bd:1a:13:4a:b0:ca:5d:
01:33:42:78:b7:40:91:f5:0b:d1:73:a3:5b:16:02:
90:71:c4:7b:75:ce:c5:31:46:fe:ac:c5:e2:03:33:
fc:5b:e1:3c:63:c3:64:f6:24:02:2c:98:27:a3:94:
b3:94:c6:10:34:6b:5b:87:4c:aa:89:c3:a2:63:62:
9c:14:3f:9c:bf:96:55:a6:61:7b:63:01:76:35:74:
58:b8:bf:85:e2:24:0e:45:75:60:82:3e:83:e7:28:
fc:93:e6:d1:eb:ec:6d:a6:69:91:0c:dc:e4:82:66:
ee:e1:6c:a2:de:9b:47:29:86:e0:0e:34:23:d1:20:
8a:0b:a4:08:23:fa:76:e0:77:98:be:83:de:77:06:
a3:c4:3a:6d:4a:07:4a:65:d9:5d:0d:ea:73:d7:80:
ea:44:71:5a:e9:aa:1a:1c:1e:e1:18:c9:ff:26:7b:
33:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:5A:96:B8:75:26:F8:3E:E8:EF:AE:EB:AE:D7:10:9B:E3:1F:A8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/g-Falrh1Jvg-6O-u667XEJvjH6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:dfc4::/32
Signature Algorithm: sha256WithRSAEncryption
79:88:47:79:c5:2b:75:ca:33:a7:5f:87:a7:2d:67:1e:20:b8:
bc:0e:e8:f8:20:82:c1:16:fb:4f:44:ad:1d:79:d2:0d:87:d2:
2a:ec:0c:96:2e:40:43:b8:52:31:21:34:57:02:96:47:6e:4b:
5a:05:81:58:d2:56:a9:c7:6f:eb:98:05:92:08:e3:39:34:6e:
5c:59:bb:df:f8:86:55:50:ff:4c:87:19:40:d9:d2:91:71:76:
42:d2:aa:8a:28:e6:fb:41:5e:34:89:4f:b7:96:20:21:30:33:
b7:e7:33:0c:2f:6e:21:6a:40:41:41:c0:ac:70:b0:1d:49:ff:
dc:f6:18:e3:0c:30:b1:90:1d:63:4d:08:99:6b:e5:b7:40:23:
aa:5c:58:d2:1c:a4:46:f6:e3:30:31:64:6e:71:ae:15:95:c9:
a2:fe:b9:32:86:d2:2d:66:c1:fc:01:74:e8:de:84:fc:62:06:
c9:6b:04:40:d4:8f:0b:66:ab:d4:df:37:9b:f7:9a:0e:a7:1b:
86:03:b7:25:04:14:41:6e:f9:43:c6:87:da:f2:01:b1:05:85:
53:53:51:d6:34:6f:db:51:21:d2:29:da:6a:3c:f5:7b:e8:4c:
db:16:21:57:38:bd:30:e3:e7:97:d7:d4:9c:10:c4:93:ff:7d:
1a:c0:7c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:18 2025 by rpki-client