Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mQ4GCXQk5YB-rZZH9qFH0Uy8H-M.roa
File: mQ4GCXQk5YB-rZZH9qFH0Uy8H-M.roa (raw, json)
Hash identifier: K0j12+Yl2mRamUM5msGRvFQ2nLBiSwT2Dy52StrPPF0=
Subject key identifier: 99:0E:06:09:74:24:E5:80:7E:AD:96:47:F6:A1:47:D1:4C:BC:1F:E3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018FF7789C6FEDDDD26918B0B078F15C8225
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mQ4GCXQk5YB-rZZH9qFH0Uy8H-M.roa
Signing time: Sat 08 Jun 2024 10:50:27 +0000
ROA not before: Sat 08 Jun 2024 10:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 2a0e:5800::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Jun 2024 06:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f7:78:9c:6f:ed:dd:d2:69:18:b0:b0:78:f1:5c:82:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 8 10:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=990e06097424e5807ead9647f6a147d14cbc1fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a0:73:f6:16:1b:71:46:df:7b:25:6d:b3:1c:
28:7a:54:fb:42:5e:72:a0:ee:96:9b:09:cb:5f:40:
dc:97:ee:a1:e6:39:15:5e:1e:34:61:4a:15:de:f8:
a7:8a:db:1a:13:57:70:96:2e:76:6a:03:ab:58:31:
66:99:e3:9a:6d:43:73:ea:56:5e:62:79:ac:07:28:
27:c6:d8:66:f8:6d:77:2e:65:e8:0c:10:04:75:ce:
36:16:80:4f:c4:e8:f0:56:eb:46:5e:9a:ee:ef:c7:
98:bd:3d:4d:11:ef:05:32:16:24:56:09:3d:f2:6a:
98:53:c6:cc:db:7b:90:ef:3c:77:2c:4f:c4:d2:3a:
7c:fa:bf:d5:6f:9e:ed:02:e6:7a:7a:66:59:d4:9f:
fd:fa:59:d4:bb:e6:6b:90:d7:c1:54:d6:0f:b7:d2:
9d:ff:ca:04:5d:73:12:e1:73:fb:5d:f3:01:ea:d2:
d7:c7:e3:0b:00:6d:83:92:6c:a2:07:cb:63:34:d6:
9a:76:cc:ce:6d:48:f9:a9:1b:09:14:29:0e:98:59:
59:fd:e1:59:0f:8f:9d:88:bc:70:64:52:4c:bf:b6:
de:1d:4e:d2:c7:03:ab:a3:c3:75:35:84:40:72:d2:
cf:bf:29:d0:3c:3c:d0:3a:a4:09:89:8a:fc:10:75:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0E:06:09:74:24:E5:80:7E:AD:96:47:F6:A1:47:D1:4C:BC:1F:E3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/mQ4GCXQk5YB-rZZH9qFH0Uy8H-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5800::/29
2a0f:e740::/29
Signature Algorithm: sha256WithRSAEncryption
50:cc:0a:2d:3f:74:33:0c:83:69:0d:cd:c2:c5:38:42:70:13:
2b:84:d4:60:23:ce:8c:15:cf:ce:be:40:4a:4d:e8:94:46:63:
db:de:21:71:e0:6f:ed:cb:d6:13:90:b7:27:3f:eb:0a:0e:0a:
58:bc:4c:95:24:b9:bf:9c:1e:94:99:8e:1d:52:c2:0c:ad:94:
8d:39:b6:d1:93:ae:58:d6:f1:98:8a:bb:87:62:2e:44:b8:8b:
a2:af:ec:eb:46:98:eb:81:61:80:fe:ed:5e:8f:11:7f:20:78:
dd:63:2e:99:36:da:13:fe:fc:54:56:b3:ba:0d:6b:72:3a:8a:
7b:ee:0d:b6:5c:9b:5d:13:2f:7c:e9:00:8e:94:70:f4:93:64:
50:46:73:4d:fe:70:74:54:c2:23:a8:27:25:47:e0:d3:c4:9c:
58:e4:a5:b2:da:97:62:c5:7b:e6:af:df:9b:b1:f9:c0:dc:a4:
44:0d:af:93:5b:a5:b2:97:0f:8d:f0:1e:c3:0c:c1:3e:53:e5:
e3:c2:91:35:ed:a2:25:3e:f7:cb:b4:94:63:5f:75:d4:57:66:
10:db:ac:57:ef:bc:75:5f:b0:80:b2:3e:04:3f:4c:36:89:76:
5a:9e:6f:bd:e9:de:68:88:18:e6:61:12:7a:7e:bf:c5:63:a3:
74:63:d1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:17 2025 by rpki-client