Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ny5Eeqqnj1zCDZbaGadermEMDZM.roa
File: ny5Eeqqnj1zCDZbaGadermEMDZM.roa (raw, json)
Hash identifier: aMHx7Xgplh32mccuZETk2NB2uPn3ljBbHNc/rOwS9+4=
Subject key identifier: 9F:2E:44:7A:AA:A7:8F:5C:C2:0D:96:DA:19:A7:5E:AE:61:0C:0D:93
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E99277A7797C14CE0A6B9D0539898DB8E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ny5Eeqqnj1zCDZbaGadermEMDZM.roa
Signing time: Mon 01 Apr 2024 10:14:45 +0000
ROA not before: Mon 01 Apr 2024 10:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 2a0f:e840::/32 maxlen: 32
2a0f:e841::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Apr 2024 06:18:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:27:7a:77:97:c1:4c:e0:a6:b9:d0:53:98:98:db:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 1 10:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f2e447aaaa78f5cc20d96da19a75eae610c0d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:44:e8:3a:4a:21:11:bf:66:a3:cd:9f:09:
ef:36:9f:ed:3f:34:1a:f3:12:51:29:c8:fe:b9:aa:
5c:dc:98:a4:7d:fa:04:4b:e3:4e:e3:e9:d7:7f:9f:
b8:f0:72:f3:5a:30:aa:84:7c:cf:a4:87:8a:93:dc:
97:b6:51:88:ab:86:87:b0:39:7d:a3:de:a2:1c:ef:
db:a8:dd:71:35:2e:eb:ce:4a:d0:e6:65:9f:87:eb:
fb:98:38:61:54:2c:0f:d4:dd:eb:8d:84:25:99:ad:
4e:34:a0:ff:8c:ba:e0:dd:c5:70:ed:56:2b:c6:06:
de:a4:ba:58:52:84:6e:fa:4b:46:ba:f0:9b:a9:aa:
14:e7:f3:01:7a:33:48:c2:60:49:d4:e8:5c:6a:48:
56:06:35:68:2e:7f:88:b6:2f:42:be:29:3c:15:b5:
da:8d:9f:a6:d4:ee:5c:41:80:b1:7b:93:f1:55:60:
79:2b:b1:46:13:73:33:7a:50:86:8f:5d:94:42:c8:
04:e5:82:10:8d:b0:c7:04:e4:56:50:14:19:b4:20:
eb:d3:ab:15:24:2e:1d:09:00:9d:eb:f3:df:f3:07:
03:da:bb:02:10:9a:9b:67:dd:5e:20:f7:41:81:c9:
81:7f:19:15:a4:25:f6:a7:c8:10:2b:8d:2f:39:ba:
16:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:44:7A:AA:A7:8F:5C:C2:0D:96:DA:19:A7:5E:AE:61:0C:0D:93
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ny5Eeqqnj1zCDZbaGadermEMDZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e840::/31
Signature Algorithm: sha256WithRSAEncryption
0a:20:19:70:5a:a4:b7:25:a0:f9:34:8a:0f:38:97:74:e9:7c:
79:1f:b8:43:37:13:37:02:f5:6e:36:b0:eb:eb:cb:ef:2b:c4:
91:e6:3c:b9:ed:66:fe:a2:f9:86:fd:d9:c9:50:58:57:f3:f4:
d0:38:01:46:5f:e1:61:8e:1a:a2:e0:2b:ab:49:63:a1:79:85:
84:b3:df:4b:46:29:15:0a:9b:6f:ea:4c:80:02:4a:01:61:ca:
3b:a0:13:fa:f7:6c:05:27:c5:0e:c4:74:35:0e:0a:4c:70:a3:
3f:ea:ea:91:ac:8f:73:db:6c:66:b4:48:3c:e0:2c:a0:cc:1f:
7d:02:6a:50:60:f7:5f:4d:12:ac:4e:17:d9:67:22:a6:53:40:
60:1a:be:df:1e:74:18:1d:31:3a:a5:9d:14:1d:ac:0a:92:c6:
c7:1f:30:43:12:40:17:4f:38:e4:e6:a5:58:4e:49:2d:8b:70:
87:48:83:bc:53:8f:d1:41:97:b0:40:f8:e2:80:ba:e6:3e:b9:
a3:ed:8b:fc:76:6e:a9:82:ba:6a:9f:e7:d8:73:42:e0:47:53:
63:18:d7:51:67:2e:21:38:3b:41:67:59:ca:56:c1:7f:c7:2e:
75:8f:de:ff:93:6d:81:90:93:55:91:50:a0:e9:73:aa:a3:46:
c9:e9:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:22:05 2025 by rpki-client