Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hCQa1v9_sJmFHf1yAwMVpj-xWW8.roa
File: hCQa1v9_sJmFHf1yAwMVpj-xWW8.roa (raw, json)
Hash identifier: Y48RI/9UT6Jow1M4IPZpD5jyoldQbxjFSzrNJmVb+48=
Subject key identifier: 84:24:1A:D6:FF:7F:B0:99:85:1D:FD:72:03:03:15:A6:3F:B1:59:6F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC1E7CCACE6C610B3042555747826D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hCQa1v9_sJmFHf1yAwMVpj-xWW8.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a0f:3d86::/32 maxlen: 32
2a0e:2240:5::/48 maxlen: 48
2a0e:2240:3::/48 maxlen: 48
2a0f:3d85::/32 maxlen: 32
2a0f:a200::/32 maxlen: 32
2a0f:3d81::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:22:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1e:7c:ca:ce:6c:61:0b:30:42:55:57:47:82:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=84241ad6ff7fb099851dfd72030315a63fb1596f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ee:39:85:0c:4f:d2:08:f2:41:f5:97:dd:5d:
aa:75:a7:4e:18:a0:ba:85:09:21:5d:f0:ab:18:9b:
1d:6e:11:d6:8c:83:f3:d4:21:38:55:4c:a0:79:bf:
b2:e5:96:f8:37:03:6a:5b:f0:85:0e:ec:5b:1c:af:
0d:78:44:01:39:47:b7:83:d7:32:96:9f:27:a9:d9:
90:fb:0a:71:60:6a:0a:f8:61:62:cd:a3:45:ee:8a:
1b:61:83:cc:ad:56:7c:47:6d:f1:9f:4e:18:b7:19:
5d:c2:23:23:da:8c:c0:9c:b2:3b:58:d4:2b:98:3c:
bf:b8:69:3d:79:08:1c:3b:d1:18:d3:b8:ca:22:7d:
a7:92:c8:1d:85:7c:16:61:f9:8f:24:ce:81:aa:68:
b5:56:1f:6d:9f:21:d4:d6:f8:e9:34:e3:23:03:6f:
dc:19:d2:c1:07:a5:7e:eb:39:be:48:4f:7d:fe:17:
e0:95:7a:c2:db:4b:67:47:be:21:65:fb:d6:f4:85:
dc:08:56:b2:a5:07:bd:d0:37:8b:85:33:59:70:67:
b1:2a:a5:78:d3:41:9c:ef:d3:85:56:a0:9a:a2:cd:
7f:70:ff:c6:aa:a2:fb:2f:70:3d:0d:47:eb:67:bc:
18:02:13:9e:ef:91:6f:d3:43:88:e2:ac:52:35:c8:
32:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:24:1A:D6:FF:7F:B0:99:85:1D:FD:72:03:03:15:A6:3F:B1:59:6F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/hCQa1v9_sJmFHf1yAwMVpj-xWW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:2240:3::/48
2a0e:2240:5::/48
2a0f:3d81::/32
2a0f:3d85::-2a0f:3d86:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:a200::/32
Signature Algorithm: sha256WithRSAEncryption
39:a9:52:fd:13:c8:26:b3:8f:77:d5:08:e4:e2:78:99:ff:45:
98:14:8d:37:d7:db:fe:20:77:de:30:17:0f:65:ed:d1:50:18:
06:5a:63:8e:d1:88:73:b5:a4:62:e7:b3:fb:ee:68:e8:08:19:
a1:68:2b:a3:9d:0a:ea:93:64:e9:90:74:9c:f1:4a:4a:18:ec:
13:57:f7:e2:ac:93:46:9e:44:b2:74:4b:e5:62:8a:14:5c:3b:
11:44:4f:03:43:d8:e1:5b:f6:15:e8:06:b7:cb:07:96:69:25:
24:7f:a6:41:fe:ae:55:61:ca:64:50:49:e8:b0:ca:70:4c:6b:
85:e2:1b:39:1e:80:7c:16:ea:84:ed:17:98:e0:df:00:36:97:
cb:65:75:e9:6d:1e:d2:19:7b:78:4d:6c:35:47:f0:e3:61:04:
b5:3f:f5:c5:05:11:1f:ae:50:30:3a:b0:4e:19:f4:15:7b:fb:
60:b0:b0:ee:2c:3c:2f:68:a9:bc:eb:cd:fb:68:86:b1:99:ad:
18:b1:a4:cd:ee:ee:3c:ab:a9:22:ea:a1:a4:19:5f:30:1f:02:
22:e1:4d:28:de:29:67:32:05:60:5c:13:cb:3b:80:39:b8:e5:
53:de:be:60:4a:c9:95:26:bc:29:dc:0b:4d:53:db:60:c8:2e:
58:df:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:58 2025 by rpki-client