Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h_ndDSu12mTQcclHHBe5p4BwgO0.roa
File: h_ndDSu12mTQcclHHBe5p4BwgO0.roa (raw, json)
Hash identifier: MOPJcF2TeMYh9SdgKBEp/J8CvaH8Dydi3lX/LuCzp1Y=
Subject key identifier: 87:F9:DD:0D:2B:B5:DA:64:D0:71:C9:47:1C:17:B9:A7:80:70:80:ED
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01918DBB8610CFBCF147E2A00AEAD19F9ED8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h_ndDSu12mTQcclHHBe5p4BwgO0.roa
Signing time: Mon 26 Aug 2024 08:09:22 +0000
ROA not before: Mon 26 Aug 2024 08:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151814
IP address blocks: 2a0f:3f80::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a12:d6c0::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Aug 2024 11:58:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8d:bb:86:10:cf:bc:f1:47:e2:a0:0a:ea:d1:9f:9e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 26 08:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87f9dd0d2bb5da64d071c9471c17b9a7807080ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cf:f1:1a:d4:ce:8a:00:ec:7f:d5:54:a6:37:
26:c2:b4:c8:42:9f:13:ad:00:2e:a9:76:94:08:e1:
3d:a1:7b:9f:9e:20:0b:e9:94:8c:7a:0a:9b:97:5f:
d9:6e:72:a1:9c:8d:5f:2d:5d:a0:4b:71:5c:a9:4d:
b0:5f:f9:f3:23:f5:ea:7f:a3:54:53:5b:78:bc:e3:
f9:f7:85:30:63:f9:c0:31:64:b1:59:c6:23:8d:6a:
7c:88:0c:88:26:41:2e:10:b9:6d:74:e7:5f:1d:ce:
47:50:55:81:dc:e8:74:34:05:e7:6b:be:18:e3:59:
0c:26:d6:dd:21:3e:34:1e:94:a3:e3:17:9c:d7:2c:
cd:e3:cc:b2:2d:2c:8a:c0:1d:f6:01:4e:eb:ac:6d:
96:41:3c:59:90:4b:33:20:29:18:b7:b0:44:c0:51:
51:09:92:45:d8:30:11:12:60:ff:70:00:49:1f:0a:
39:4e:c6:c8:41:f1:2c:3a:c6:eb:92:df:12:a2:9f:
24:2d:d1:0e:97:33:d2:b5:94:46:ea:90:be:30:9d:
0e:2c:a0:f9:05:c4:0b:89:b7:e3:1a:a5:8a:4e:68:
dd:a2:2c:91:4c:b7:f2:d8:88:79:64:85:42:77:d6:
93:3b:b3:02:11:cf:72:0b:9e:5c:c7:6f:67:aa:6d:
d0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:F9:DD:0D:2B:B5:DA:64:D0:71:C9:47:1C:17:B9:A7:80:70:80:ED
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/h_ndDSu12mTQcclHHBe5p4BwgO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3f80::/29
2a0f:8100::/29
2a0f:9e00::/29
2a0f:b400::/29
2a0f:c400::/29
2a0f:dec0::/29
2a0f:e540::/29
2a10:67c0::/29
2a12:d5c0::/29
2a12:d6c0::/29
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
5e:fa:0f:de:53:73:09:2c:83:61:9d:ec:fc:2b:a7:f2:db:ae:
7d:44:57:a1:d4:90:57:fd:36:ee:fd:4b:88:5f:38:9b:9a:4d:
6a:0c:62:f7:b1:c5:76:5e:0b:11:e7:16:a8:cd:c6:37:10:c3:
cc:f8:f2:41:4b:ad:b8:f4:4e:32:7b:21:1c:44:be:d5:f0:5a:
38:31:a7:14:cf:db:13:48:67:3c:9e:1f:c3:3c:f5:8c:0b:5b:
6b:a7:eb:48:fb:3a:74:a6:ee:a1:1a:c4:0a:4c:5f:f7:90:fd:
a8:14:a7:ed:c4:01:37:fa:82:31:9f:c9:ae:08:a9:7e:42:d9:
83:25:f2:ea:78:e0:9e:f3:17:04:6c:62:03:cd:e7:36:65:93:
27:6f:88:26:d8:4a:e8:76:46:64:33:60:4a:16:cf:d5:34:8b:
12:99:08:ae:b3:29:ea:6f:83:96:c5:b0:b6:b7:91:3f:8b:76:
f1:0f:5b:e4:9a:34:52:5e:a5:44:c7:cf:91:51:6b:91:da:0c:
d2:37:2e:64:f1:2f:9d:0b:96:3c:72:84:67:76:ab:0c:30:e6:
40:28:8c:08:ee:39:53:94:75:0e:58:de:65:3f:a3:95:97:58:
c0:48:36:db:e7:b5:07:33:7b:73:a2:cb:e2:84:0a:ec:4f:08:
09:3e:e5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:44 2025 by rpki-client