Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ktvJEbUAI3lYZeAGttyKsDxLMHw.roa
File: ktvJEbUAI3lYZeAGttyKsDxLMHw.roa (raw, json)
Hash identifier: ZfIeYFxGxo8vZ3uG1GnGtgtDyg7y0sQoEtpwsrrxLUI=
Subject key identifier: 92:DB:C9:11:B5:00:23:79:58:65:E0:06:B6:DC:8A:B0:3C:4B:30:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01917FAC975B87D3FDEF3363E1F12AA33628
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ktvJEbUAI3lYZeAGttyKsDxLMHw.roa
Signing time: Fri 23 Aug 2024 14:38:22 +0000
ROA not before: Fri 23 Aug 2024 14:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 2a06:1184:100::/48 maxlen: 48
2a06:1184:101::/48 maxlen: 48
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:66::/48 maxlen: 48
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:158::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:66::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:110::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:77::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:88::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 26 Aug 2024 17:55:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:ac:97:5b:87:d3:fd:ef:33:63:e1:f1:2a:a3:36:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 23 14:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=92dbc911b50023795865e006b6dc8ab03c4b307c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:df:6d:21:9e:12:3a:18:55:32:e1:49:ac:
e1:59:39:62:92:96:c3:23:35:69:e8:89:27:57:4c:
46:74:3a:1e:82:80:4b:78:eb:a6:1e:47:27:9c:2b:
b3:70:8d:6f:81:8d:c8:3b:36:ab:66:e8:d1:77:ab:
d4:c8:e6:3e:be:39:b1:17:ff:30:53:b2:2d:97:63:
fb:38:1c:9b:d3:6b:f7:b0:bc:47:1a:b9:95:ef:6a:
d9:5f:55:f9:9d:7c:7c:cc:5c:ea:16:37:c9:cd:c1:
5b:71:e2:73:94:5a:93:55:2b:f7:04:6b:02:f5:e9:
ef:31:04:3d:ba:ab:69:24:d2:6e:c1:04:9f:bb:c2:
c5:76:eb:26:84:9e:66:3c:a9:7b:c6:f3:20:32:a7:
28:d7:3b:70:87:f5:96:b6:02:e6:e5:78:b4:cf:07:
19:79:1c:94:8a:8c:5c:79:8f:cd:4f:85:db:4b:03:
30:90:2b:4e:4f:97:39:fd:27:ac:57:84:c0:a7:a5:
bd:df:27:f8:46:90:a7:c1:3c:06:a8:56:20:f9:8a:
50:51:55:7f:c5:4c:cc:9d:ee:13:9f:be:f7:2b:7c:
eb:45:37:d1:e8:bd:73:47:dc:d2:28:6c:56:16:73:
e8:04:ad:fb:da:b6:8c:0b:9c:e7:7a:58:2e:21:45:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DB:C9:11:B5:00:23:79:58:65:E0:06:B6:DC:8A:B0:3C:4B:30:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ktvJEbUAI3lYZeAGttyKsDxLMHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1184:100::/47
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:1584:66::/48
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a12:ac46:77::/48
2a12:ecc0:158::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:66::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:8c86:10a::/48
2a13:8c86:110::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:77::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:88::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
65:b9:3b:11:42:47:22:eb:67:96:15:d4:37:58:fb:29:57:4d:
fb:20:2b:40:01:5c:38:7f:5d:4d:5a:ec:a7:9b:30:0b:63:c6:
3d:80:ff:c1:53:ac:ac:6d:b5:f2:3b:27:e3:9a:60:10:4a:f7:
b9:8c:f4:b5:7c:a5:c3:a6:41:09:e5:0f:1e:d2:0e:09:47:22:
5c:d2:86:90:95:79:be:4d:ef:71:db:3a:99:9b:25:de:f3:27:
bc:cb:0b:02:b9:cc:c7:c4:e7:27:0e:90:b7:f5:bc:e6:de:68:
c0:bf:de:07:0a:40:96:6d:b9:62:e5:85:44:23:93:7e:0a:b8:
b2:6e:7c:a6:47:88:15:13:fd:45:01:e8:bc:80:f7:1e:c6:82:
2c:43:32:11:30:24:e7:92:d2:67:5c:eb:e2:86:64:34:bd:95:
bb:c0:c9:bf:24:18:46:ef:58:46:9d:c3:69:c6:f1:9e:09:b2:
42:8b:a0:23:32:ab:f4:ba:05:23:5d:44:18:ef:5b:36:19:e5:
4a:f1:0c:5c:51:2f:26:35:a8:16:0e:bd:81:c4:0d:4d:30:59:
63:7c:c9:d7:f8:f7:ca:50:83:a1:e8:92:c3:e6:46:4b:63:64:
47:0d:34:2f:15:74:da:b3:59:7e:d0:02:d4:e2:11:89:63:e4:
86:82:b6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:18 2025 by rpki-client