Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jW1dQYIt-V6y1TRMfRUI-gf01BY.roa
File: jW1dQYIt-V6y1TRMfRUI-gf01BY.roa (raw, json)
Hash identifier: DXXlrYxIIGwKwKeU/NZbWZR3T47e219T3WymEGmh4nM=
Subject key identifier: 8D:6D:5D:41:82:2D:F9:5E:B2:D5:34:4C:7D:15:08:FA:07:F4:D4:16
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019571659EAC43F5B015E4909518ECAB4758
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jW1dQYIt-V6y1TRMfRUI-gf01BY.roa
Signing time: Fri 07 Mar 2025 16:17:19 +0000
ROA not before: Fri 07 Mar 2025 16:17:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a06:1186::/32 maxlen: 32
2a06:35c2::/32 maxlen: 32
2a0d:8f80::/29 maxlen: 29
2a0e:c783::/32 maxlen: 32
2a0e:f500::/29 maxlen: 29
2a0f:1e82::/32 maxlen: 32
2a10:37c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Mar 2025 10:34:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:71:65:9e:ac:43:f5:b0:15:e4:90:95:18:ec:ab:47:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 7 16:17:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8d6d5d41822df95eb2d5344c7d1508fa07f4d416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:ab:28:f0:20:ae:1d:90:17:be:a5:64:f6:
ac:d0:10:c6:a4:93:af:62:57:87:4d:8f:87:93:fe:
f9:59:f6:6c:e2:3d:16:51:64:72:ca:8c:65:44:c5:
fb:db:0a:d9:95:52:cb:b2:79:f4:f5:54:5f:44:b8:
9c:4e:f4:89:0e:43:66:90:57:d6:23:fb:6e:5e:f0:
5d:ee:d1:f5:5b:29:43:5a:05:99:33:fa:ec:fa:3a:
4e:5d:43:06:24:5c:fb:71:c8:e1:8a:75:20:f5:ac:
6d:96:b8:ba:b2:cb:de:85:5d:56:01:ee:1b:32:35:
2a:dc:63:5e:6a:74:f0:27:51:fe:16:94:95:49:ef:
f0:25:fb:44:a4:ba:c7:ed:af:4c:5f:df:7b:1a:6c:
b4:22:c2:75:17:0c:30:2a:63:dc:0d:64:72:53:07:
3c:7b:1b:57:df:54:1f:79:39:0c:27:d3:64:27:4d:
84:ee:39:19:b8:7e:dc:cb:0e:c1:38:85:10:62:d8:
91:d7:97:c8:b5:07:76:f5:ca:ed:93:b9:b5:04:ed:
73:80:84:91:a1:0a:bb:ee:6a:7f:e4:b0:f7:89:d4:
fa:34:bd:a3:f9:a9:98:8a:82:9a:e1:56:97:9f:78:
83:b5:db:ef:b2:64:4e:da:7c:24:21:b6:99:e6:ed:
9c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:5D:41:82:2D:F9:5E:B2:D5:34:4C:7D:15:08:FA:07:F4:D4:16
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/jW1dQYIt-V6y1TRMfRUI-gf01BY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a06:1186::/32
2a06:35c2::/32
2a0d:8f80::/29
2a0e:c783::/32
2a0e:f500::/29
2a0f:1e82::/32
2a10:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
64:74:19:7c:6c:26:8f:36:23:e5:e2:ab:8c:5c:9f:a3:d8:b0:
c5:1d:e0:eb:4a:a4:89:76:32:e0:ad:4d:49:e7:7f:7f:b4:dd:
d6:fe:62:77:67:11:f2:44:9b:3d:2e:cf:a5:28:6c:86:3b:c6:
11:4b:87:ca:d2:5e:db:6b:3c:51:31:00:52:f7:5e:4c:cf:c6:
af:c8:d1:fb:9a:91:19:f8:a7:2b:a5:9f:50:72:41:c7:b6:5e:
99:d5:bd:da:0f:dc:1f:db:52:8f:71:ae:25:1e:85:ea:7c:7c:
21:59:48:cc:2c:db:c0:d6:db:c5:e5:64:31:0b:02:2d:e1:2e:
b2:6e:9d:04:68:a7:30:38:35:c8:74:42:88:24:c1:b0:47:45:
e5:12:57:f8:49:dd:a2:5a:1a:36:18:19:51:fa:2b:2c:48:d8:
3c:ad:0c:00:a3:df:a1:e7:f2:1f:83:af:87:44:f0:de:de:3b:
9e:d8:27:63:1a:51:68:fa:d2:e3:de:ae:ab:79:ee:95:6e:54:
a2:49:07:26:bc:22:a2:26:6c:67:90:f8:f6:5e:68:d3:3d:8e:
ee:87:e6:f7:c3:c3:9a:46:8f:e9:49:29:0b:2a:e4:a4:a2:54:
41:5c:fe:d0:3b:88:29:d6:4e:2e:b2:67:77:62:95:00:e6:b4:
bc:96:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:11:33 2025 by rpki-client