Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m98BgQmAEHufGZEoB4B0fP-dbqY.roa
File: m98BgQmAEHufGZEoB4B0fP-dbqY.roa (raw, json)
Hash identifier: +9ptI5cMgQi+mq8xipY8Ym9UukZGmnbB+wXBo57rbDQ=
Subject key identifier: 9B:DF:01:81:09:80:10:7B:9F:19:91:28:07:80:74:7C:FF:9D:6E:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01927AD4148F705EE1F35937F2F6E17831B5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m98BgQmAEHufGZEoB4B0fP-dbqY.roa
Signing time: Fri 11 Oct 2024 09:06:12 +0000
ROA not before: Fri 11 Oct 2024 09:06:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 25 Oct 2024 06:34:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7a:d4:14:8f:70:5e:e1:f3:59:37:f2:f6:e1:78:31:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 11 09:06:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9bdf01810980107b9f1991280780747cff9d6ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:17:47:37:74:6e:36:4b:06:18:d5:d1:52:
b9:e8:24:11:b3:21:7d:8b:52:a2:00:97:15:0c:e1:
8c:73:09:b5:f4:7a:6e:e8:d8:85:2f:4a:f7:97:ae:
52:03:51:78:40:6b:36:90:ea:92:90:6d:a7:11:bb:
44:32:7f:70:15:24:57:e9:bf:71:22:3b:ae:8a:b8:
4c:3d:0c:7e:2d:7f:cd:3b:ef:ea:cb:d3:71:04:62:
35:8b:01:ec:4b:af:61:78:c3:6a:1f:65:f1:65:06:
7e:f7:ca:ea:62:d9:90:8d:c8:c1:c1:0f:93:ab:55:
bc:ff:ed:37:aa:57:c5:0b:2a:b7:90:4e:4a:f3:55:
bc:74:ec:31:c1:b0:63:40:e6:d6:dd:a5:4a:18:b3:
68:e6:6b:5d:60:a6:5b:38:47:80:c2:5a:1d:ea:17:
98:8d:ac:ac:a3:6a:60:ea:c1:63:2f:ba:72:8a:85:
ea:f7:fc:47:1b:3a:f5:7d:ac:73:b6:d9:1a:ab:b9:
b4:56:bb:53:b3:30:d4:fe:16:47:40:5c:ed:81:69:
69:3a:4e:b2:41:ac:81:6c:4c:62:47:23:de:43:7c:
6f:db:2a:09:84:ac:44:54:88:6e:be:13:08:5d:a1:
ab:69:00:b3:a9:bd:ea:15:61:3f:ff:77:09:89:34:
08:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:01:81:09:80:10:7B:9F:19:91:28:07:80:74:7C:FF:9D:6E:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/m98BgQmAEHufGZEoB4B0fP-dbqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:dfc0::/29
2a07:a300::/29
2a0e:5800::/29
2a0f:1740::/29
2a0f:19c0::/29
2a0f:1ac0::/29
2a0f:e740::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:e580::/29
2a11:f040::/29
2a12:ba00::/29
2a13:200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
55:0a:bf:11:e0:0b:61:a9:0c:37:99:19:8f:c7:69:a4:31:e7:
ed:dc:b7:06:7c:79:7c:3b:b0:68:b8:00:f2:53:37:d2:13:d4:
44:2c:f7:49:2e:b9:de:61:53:f6:85:5d:4b:1f:66:1c:8e:74:
9f:0d:2b:96:36:ce:77:30:25:8f:a0:12:b3:cd:d9:3e:4b:1b:
90:4c:7c:11:88:30:51:88:0c:41:24:72:ad:c3:57:83:20:47:
c5:ed:a9:c1:c4:7c:ce:ff:dc:63:de:6e:c7:da:d3:2c:f1:41:
5c:b2:27:14:62:7c:26:c7:e9:6b:55:b8:4c:a4:a4:ec:bd:12:
e9:da:d1:ef:14:ce:9c:fd:7c:44:72:3e:94:c4:cb:18:75:c9:
42:07:10:84:60:00:f6:d5:90:46:7b:3e:85:e7:cf:91:52:f3:
08:6d:65:c7:26:d1:f3:7e:7e:99:0f:d5:9f:c9:f3:75:fc:3d:
48:7b:51:b8:4d:d1:04:4f:1a:42:ec:60:f9:60:61:72:0f:02:
d7:ee:ef:15:8e:51:7f:76:20:27:8a:2a:f2:6b:5a:55:89:86:
53:79:83:3a:24:ea:42:fe:5b:c4:8c:31:bf:d4:d0:01:b0:6d:
52:20:90:35:8a:76:fa:48:20:11:39:64:6b:8a:bd:90:a7:ac:
35:b9:c9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:57 2025 by rpki-client