Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/igg-QG8ElLEAMTlq2p0cu6dfZQg.roa
File: igg-QG8ElLEAMTlq2p0cu6dfZQg.roa (raw, json)
Hash identifier: UhwdAHjliJNRJn0UVEtfCEQacoyoLjiRFRZguqgLdDg=
Subject key identifier: 8A:08:3E:40:6F:04:94:B1:00:31:39:6A:DA:9D:1C:BB:A7:5F:65:08
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191A2CB1101D7CE3DA725B7A323A715CDA0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/igg-QG8ElLEAMTlq2p0cu6dfZQg.roa
Signing time: Fri 30 Aug 2024 10:18:22 +0000
ROA not before: Fri 30 Aug 2024 10:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:3bc0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:35c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:5200::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Sep 2024 11:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a2:cb:11:01:d7:ce:3d:a7:25:b7:a3:23:a7:15:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 30 10:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a083e406f0494b10031396ada9d1cbba75f6508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:09:cd:02:a9:5b:bb:a2:15:52:e2:3a:50:bb:
82:0f:22:65:30:2c:9d:fa:a0:1c:72:ab:a9:ab:9f:
03:ac:68:8d:03:33:b4:00:64:8a:1e:12:8b:6d:55:
8d:2a:82:7c:ba:35:5f:57:8f:2f:c0:2a:a2:76:29:
c8:94:7f:df:84:b2:0c:2d:03:6c:d6:b0:f3:a4:a8:
44:c2:8e:14:40:7d:df:f3:5f:b1:bf:90:e7:d1:1d:
53:37:92:87:6e:8e:67:34:92:b0:2b:5c:69:7c:65:
4e:3d:31:28:4c:0f:67:22:07:99:1f:61:f1:3c:4b:
e1:1e:7b:bc:65:6f:e3:25:33:6b:e3:4c:ea:a1:54:
52:26:cf:eb:72:b6:40:c8:17:96:ec:58:8c:e0:aa:
fc:5c:b3:93:75:59:9e:a8:e9:f0:2c:55:19:95:60:
d0:95:7a:b6:3b:6f:d0:32:10:d3:cc:ac:41:54:7d:
be:b1:ad:a7:71:97:4e:4f:13:40:d6:df:83:2f:6c:
74:4c:6e:76:36:c5:fb:ac:e4:c9:2a:a4:be:af:f4:
13:32:94:1c:ba:7f:cb:b2:f7:28:cb:c9:bd:33:55:
17:1b:54:4c:f7:ec:8a:f1:8c:62:ac:b1:35:97:f9:
26:82:b1:f5:19:85:77:a4:24:50:1a:d3:9a:4c:d0:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:08:3E:40:6F:04:94:B1:00:31:39:6A:DA:9D:1C:BB:A7:5F:65:08
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/igg-QG8ElLEAMTlq2p0cu6dfZQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3bc0::/29
2a06:dfc0::/29
2a0d:a9c0::/29
2a0f:17c0::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:cc00::/29
2a0f:df40::/29
2a0f:e940::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3540::/29
2a10:35c0::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:6500::/29
2a10:7700::/29
2a10:7b00::/29
2a11:5200::/29
2a11:8880::/29
2a12:d100::/29
2a13:200::/29
2a13:2dc0::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
34:92:c7:1c:8f:c3:18:e6:9d:43:7a:45:d2:09:56:b6:e2:b9:
80:3e:f9:1b:91:0a:fc:a2:87:2d:1d:71:98:0d:c6:11:39:6a:
b3:71:81:ad:e2:f7:1e:ef:6b:9e:63:f0:b0:b4:43:ae:02:e6:
df:80:55:3e:ed:7a:16:b0:b2:fd:49:66:78:2c:55:ee:14:e7:
80:01:09:d5:98:15:76:f9:9b:d4:a2:b7:25:77:e4:43:2e:5c:
ae:e4:7f:92:eb:be:34:0d:ac:64:ed:76:ee:59:c6:7f:4b:2b:
48:fb:4d:24:de:18:0c:1c:48:29:6f:80:66:9c:24:d8:d9:e6:
78:2a:50:f2:f5:bd:87:2e:82:89:2b:4d:6a:1c:3f:82:b8:e2:
bf:c8:73:31:32:ce:fa:b0:bc:5f:a1:dd:26:e9:fe:40:3a:6c:
09:a5:ee:63:00:f2:a4:1a:d0:75:04:4c:2d:51:00:c3:85:9e:
b6:21:f4:85:f3:11:4f:1a:e1:be:fd:1a:7f:9a:2a:70:12:94:
fe:db:df:7e:6f:b1:c1:6c:75:f3:91:3e:54:ac:45:01:37:19:
c6:af:d0:68:d9:e6:03:5b:a0:55:e5:33:39:b3:be:d2:b8:be:
34:c3:b4:6c:0c:63:dc:c1:53:9a:91:03:3d:a1:ba:c0:85:7b:
7b:fa:a8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:14 2025 by rpki-client