Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i1rDFKskqkuV7BkDA52eF9n1zgk.roa
File: i1rDFKskqkuV7BkDA52eF9n1zgk.roa (raw, json)
Hash identifier: KcvkQp3NPF6/LtEVwl2kBu9NXcUHmsRFbGEPxdRpGPo=
Subject key identifier: 8B:5A:C3:14:AB:24:AA:4B:95:EC:19:03:03:9D:9E:17:D9:F5:CE:09
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E99059AFB65E69B9D849BEF8CD5D143AF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i1rDFKskqkuV7BkDA52eF9n1zgk.roa
Signing time: Mon 01 Apr 2024 09:37:45 +0000
ROA not before: Mon 01 Apr 2024 09:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:7d04:1::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a12:ac44:1::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Apr 2024 12:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:05:9a:fb:65:e6:9b:9d:84:9b:ef:8c:d5:d1:43:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 1 09:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5ac314ab24aa4b95ec1903039d9e17d9f5ce09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:de:e4:1b:bc:52:b5:04:73:e5:f7:08:fa:
9c:5f:b0:d8:b5:18:e2:d2:c2:ee:d2:00:93:e2:e9:
8b:7b:59:6f:ee:22:fc:ba:fb:ef:33:dd:ef:48:8c:
a4:50:fc:1c:26:8f:80:e7:aa:6c:f4:10:a1:42:e8:
0e:76:3e:a0:33:4e:45:12:2d:d9:c9:c5:9d:4d:a6:
19:ab:d3:59:f9:b7:62:79:71:f1:6b:0b:eb:3d:d4:
b0:1e:d0:ae:74:1d:99:5f:bd:37:07:98:66:58:4c:
d1:19:31:d2:61:9e:09:5d:eb:00:4d:35:ba:f3:a4:
bd:08:be:4d:18:f6:c5:b5:1d:72:f8:9f:5c:86:dc:
dc:e8:5f:b3:02:d9:38:49:9d:8c:6b:65:e8:4d:a6:
2b:14:72:5f:c8:3a:a3:62:43:19:35:d9:9b:41:4c:
6a:9f:43:f2:3e:01:e5:ed:5b:70:9e:5a:e6:45:79:
fa:2a:a2:8f:34:30:a7:3a:ad:49:4e:ed:c1:8e:2f:
34:f0:dd:80:b6:15:e7:82:4e:04:29:dc:ae:4c:b0:
e3:d5:d6:62:06:cf:67:0c:fe:e8:64:2f:37:d3:9f:
f6:87:f6:5c:3d:62:ca:46:3f:19:5e:2d:46:e9:8a:
24:17:54:e0:33:3e:85:b3:ef:54:da:3e:37:3a:8a:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5A:C3:14:AB:24:AA:4B:95:EC:19:03:03:9D:9E:17:D9:F5:CE:09
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/i1rDFKskqkuV7BkDA52eF9n1zgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:7d04:1::/48
2a0f:ea00::/29
2a12:ac44:1::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
bf:d3:6d:77:37:93:fb:8e:4c:ab:b0:b0:eb:d7:bc:30:d8:1b:
30:e4:b8:49:c9:74:a6:7c:36:f7:fc:56:e4:96:39:a7:93:70:
7c:07:69:65:05:67:40:16:3d:63:2f:7a:7d:5e:19:46:6d:a7:
01:82:4b:24:ed:e1:1b:8a:e4:41:41:2e:41:bb:a7:21:e2:4e:
d0:fd:ab:34:e2:ba:9e:71:32:56:75:5a:d4:43:f5:0c:29:d8:
2f:f9:a3:a1:b5:38:a7:89:e0:96:35:92:2c:d1:7c:bd:3b:fc:
d4:1d:73:96:b5:b3:da:57:75:49:6b:00:a6:05:6c:58:90:5c:
78:34:a0:61:a7:7d:90:6b:32:4e:04:6e:fb:95:77:84:2b:48:
f3:d3:62:23:5d:45:6e:82:a3:33:fe:d0:62:a9:43:80:d3:a1:
51:b7:db:35:ac:c5:bb:55:1b:0d:cc:4f:c7:d7:4c:60:d1:3f:
2f:82:44:3c:d5:bd:3a:ad:1d:bf:eb:4c:07:96:f0:13:c1:84:
aa:30:3d:ea:4e:92:94:00:41:fc:f2:41:eb:f1:17:2b:38:69:
5e:22:bc:33:d0:9a:e5:8b:c9:b4:07:65:d2:7c:e0:99:31:65:
cc:96:b7:ab:6d:d9:d2:98:4a:d5:57:c3:0f:58:fe:43:e2:6f:
40:c3:1a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:06:43 2025 by rpki-client