Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUSdyo6fWQDxsidLIEg672z4ohU.roa
File: gUSdyo6fWQDxsidLIEg672z4ohU.roa (raw, json)
Hash identifier: 0xpibqh2jgNw8f2z09LEJ9MwQsPgSBcVD2EjApONf6A=
Subject key identifier: 81:44:9D:CA:8E:9F:59:00:F1:B2:27:4B:20:48:3A:EF:6C:F8:A2:15
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190B1ECA539E66320D701E6733FAE31F5C2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUSdyo6fWQDxsidLIEg672z4ohU.roa
Signing time: Sun 14 Jul 2024 15:46:34 +0000
ROA not before: Sun 14 Jul 2024 15:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151814
IP address blocks: 2a0f:2100::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 23 Jul 2024 06:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b1:ec:a5:39:e6:63:20:d7:01:e6:73:3f:ae:31:f5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 14 15:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=81449dca8e9f5900f1b2274b20483aef6cf8a215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:73:a0:66:42:ee:91:09:56:93:b8:28:92:19:
0a:d7:07:33:e5:22:c9:fc:03:b1:6b:52:a2:20:28:
93:89:57:ec:83:3d:24:28:b5:02:ce:cf:ee:b2:c1:
c4:a8:0d:1f:cd:42:e8:d2:d2:ba:c5:a5:2c:58:10:
8d:17:b1:1a:14:82:b9:bf:28:88:db:ea:b1:f8:e5:
35:0e:29:c6:89:6e:0e:b2:91:13:65:10:e2:0d:cb:
d9:9f:71:e5:17:ef:4b:47:2d:73:ba:19:3b:e7:be:
73:41:78:e2:09:4c:46:ce:2f:83:cc:03:12:6c:cb:
4b:cd:87:12:19:a2:af:49:0d:22:b3:98:fe:ef:db:
1e:87:a2:02:5a:7e:e8:7a:bb:bf:ad:6b:8a:c4:8b:
f3:dc:b0:f6:c7:51:2b:46:a5:ca:a7:20:c0:0d:0a:
f2:20:f8:be:85:b9:e2:03:03:67:10:cf:d5:af:b8:
82:40:63:15:2e:8c:f6:89:97:24:f1:b5:c0:c4:00:
eb:d0:b5:f6:b2:72:57:37:1c:73:78:46:45:90:4d:
07:16:b6:08:4d:88:3c:4e:9d:40:7b:36:30:ba:c6:
51:3e:64:9d:96:03:53:1b:09:a9:6e:88:e3:62:0e:
4b:73:a1:9d:f5:83:1c:44:a6:33:0a:c7:dc:46:88:
cb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:9D:CA:8E:9F:59:00:F1:B2:27:4B:20:48:3A:EF:6C:F8:A2:15
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gUSdyo6fWQDxsidLIEg672z4ohU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2100::/29
2a0f:c400::/29
2a0f:dec0::/29
2a0f:e540::/29
2a12:d5c0::/29
2a12:d6c0::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
b8:3e:b5:8a:e9:ce:43:71:6d:9a:88:b2:cb:a1:9f:ff:c8:6e:
22:e6:a2:0f:ce:d2:5c:9a:32:07:1e:f2:cc:c0:54:2f:89:b2:
73:7d:04:4e:24:b4:ca:bc:91:ec:6e:c9:65:18:ab:a5:a6:6c:
de:e1:2d:37:e8:b2:90:f9:02:90:df:74:3f:21:16:66:ec:e3:
24:e4:99:62:99:72:19:c3:b7:49:28:02:8f:c9:fd:6f:71:83:
0d:39:cf:8c:9f:f2:f6:6c:f1:a0:32:18:3a:80:6c:32:0b:10:
85:47:8d:e6:65:db:24:b2:f4:3d:8e:f9:08:e7:c8:f5:ec:01:
1b:cd:82:ba:a9:23:a4:c1:4a:6b:54:e4:61:bf:01:39:dc:3d:
62:3a:b2:3b:a4:9c:0a:25:6d:83:9f:6f:83:54:54:13:1d:ab:
a6:9e:b3:4b:e3:b1:c8:3d:f8:3a:6f:4c:7c:4e:72:3a:b0:2c:
70:53:06:ff:6e:82:32:e9:10:3d:3d:1f:cb:40:5d:86:44:aa:
13:a8:cd:76:6d:bb:72:31:13:51:06:ec:4f:b0:8d:6a:32:75:
27:d6:8c:4e:5d:0c:5e:dd:64:01:d8:6a:c6:2f:ba:df:65:a2:
15:59:34:62:dd:36:cb:36:ae:bf:e3:77:82:7f:7e:ea:0c:3e:
bf:e3:47:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:45 2025 by rpki-client