Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lEsf7NIUbsKAJnJGelL9eOk-TL4.roa
File: lEsf7NIUbsKAJnJGelL9eOk-TL4.roa (raw, json)
Hash identifier: fxkDiRrxwCiFQaX40lA31OhX2hDRcmmrG/J8AjMHIcU=
Subject key identifier: 94:4B:1F:EC:D2:14:6E:C2:80:26:72:46:7A:52:FD:78:E9:3E:4C:BE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194553A9A7166E6872C91EB314C9BEB2664
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lEsf7NIUbsKAJnJGelL9eOk-TL4.roa
Signing time: Sat 11 Jan 2025 11:58:11 +0000
ROA not before: Sat 11 Jan 2025 11:58:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a06:35c1::/32 maxlen: 32
2a0d:8f80::/29 maxlen: 29
2a0e:1a86::/32 maxlen: 32
2a0e:f500::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 16 Jan 2025 07:22:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:55:3a:9a:71:66:e6:87:2c:91:eb:31:4c:9b:eb:26:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 11 11:58:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944b1fecd2146ec2802672467a52fd78e93e4cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:ca:7f:45:23:df:bc:a0:49:4b:cc:0d:c1:
32:11:90:b0:0b:98:d4:e9:45:47:71:cf:2d:f3:52:
5e:c4:78:b1:27:5d:62:a5:7a:af:05:30:5a:6a:92:
73:fe:d3:ee:64:fa:5e:87:90:aa:29:11:38:48:53:
1c:20:ce:d0:f6:90:47:0e:9e:2f:5e:48:26:06:b7:
4a:95:3c:d7:a5:85:3f:32:f1:1a:81:d6:d8:e8:a3:
0a:8a:06:1f:63:3d:0c:83:eb:99:87:9d:fa:a2:08:
a5:a6:ff:d1:36:e0:ce:76:12:53:bf:9e:e5:c0:94:
44:2a:a7:d7:89:4f:c2:7c:1f:c5:ac:cb:ab:3c:76:
c7:9b:1f:58:21:f0:02:6d:de:fd:45:96:a0:45:6c:
59:9b:0b:70:75:fb:fa:c0:af:f5:0e:73:ab:17:a6:
69:ad:9e:6a:fc:43:19:35:b9:36:f8:e2:1f:15:49:
c7:2c:bd:03:43:3f:c1:92:df:af:55:0b:34:13:63:
55:20:0e:4a:a2:51:b3:3a:a0:81:8d:22:94:36:c6:
b9:29:a0:d2:00:cb:c0:64:f7:2a:e1:3d:a1:ce:c4:
d5:05:69:ef:26:ae:d4:ae:8c:74:35:25:08:bd:38:
36:c0:a8:e3:72:10:f6:93:e3:76:dd:70:af:28:a8:
a6:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:1F:EC:D2:14:6E:C2:80:26:72:46:7A:52:FD:78:E9:3E:4C:BE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lEsf7NIUbsKAJnJGelL9eOk-TL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c1::/32
2a0d:8f80::/29
2a0e:1a86::/32
2a0e:f500::/29
2a10:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
60:35:4c:3c:28:5c:d0:2e:34:01:98:a6:e9:95:3d:36:13:37:
15:64:03:7c:78:66:b5:db:5c:8a:b5:97:04:f3:fd:7b:12:5a:
65:90:f2:f8:f4:7f:b6:b6:03:da:87:94:11:44:24:3e:86:00:
82:91:b7:4b:03:64:f0:b1:89:f2:a1:38:2d:07:54:41:63:2a:
98:85:bb:8f:b8:0a:55:35:26:96:2f:19:7e:21:26:9e:f2:fb:
19:1e:8e:23:78:02:e0:76:5d:10:1f:e5:21:a0:a3:f9:27:59:
23:c9:77:e3:53:15:a8:f0:2e:78:d4:8d:d7:f4:7d:fe:27:0f:
6b:65:51:24:6b:bc:a7:8d:29:e0:07:af:d0:a3:ca:e7:bb:21:
ed:f1:64:10:88:f2:d9:42:77:91:78:12:80:46:08:6c:f7:8c:
e1:a1:7a:4c:25:1d:f1:ec:e2:d6:36:13:89:c4:15:eb:02:30:
a6:e8:df:7f:78:cc:3c:04:46:76:22:f7:41:e0:e6:2e:dd:af:
e4:58:cf:fe:c8:67:ad:48:0f:64:3d:94:c0:7d:2b:7e:40:9d:
bd:4a:ad:d3:2a:c0:c3:95:bd:8a:db:ab:06:25:68:3e:ba:b3:
36:8c:76:79:fe:34:fe:bf:fa:99:f1:ad:cc:04:b7:c6:44:3c:
ec:6f:e4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:14 2025 by rpki-client