Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oMwsAHszIEJyChX3lZUDw-7EbvY.roa
File: oMwsAHszIEJyChX3lZUDw-7EbvY.roa (raw, json)
Hash identifier: mVp4acbse3076eLJmuCvVfGA1EXfW9Cg8EnfD8UXfIM=
Subject key identifier: A0:CC:2C:00:7B:33:20:42:72:0A:15:F7:95:95:03:C3:EE:C4:6E:F6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01937C8F5BF959BA1E16B3038EC411088951
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oMwsAHszIEJyChX3lZUDw-7EbvY.roa
Signing time: Sat 30 Nov 2024 10:13:10 +0000
ROA not before: Sat 30 Nov 2024 10:13:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 2a13:2cc0::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 29 Dec 2024 13:39:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:8f:5b:f9:59:ba:1e:16:b3:03:8e:c4:11:08:89:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 30 10:13:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0cc2c007b332042720a15f7959503c3eec46ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:00:64:5f:0e:09:03:df:50:99:40:c6:3c:e4:
3b:93:90:39:8b:5b:29:24:92:04:ac:f2:93:be:58:
7b:52:cf:db:2e:ad:90:8d:b4:5e:23:ef:d3:86:80:
5b:57:30:f8:f4:a2:29:21:3c:4e:11:0b:c9:bf:17:
b5:95:d8:39:68:7b:cd:00:ed:ac:f9:03:00:75:39:
16:1a:aa:a7:03:2f:81:6e:07:88:a4:df:1e:34:9f:
f7:8e:cb:cf:95:5f:5d:c7:fe:28:05:92:ef:22:6a:
85:d1:1b:dd:1d:7a:31:73:f9:9c:4d:b2:93:96:26:
48:65:3a:db:44:cb:40:91:a3:a7:33:75:2f:31:14:
11:88:3f:d7:75:ed:3c:0c:0e:f3:ea:79:26:26:ed:
c0:5f:9e:48:c8:ff:fc:99:08:8c:54:6c:28:4e:d4:
58:e8:58:4c:56:a3:53:f1:29:fe:f0:22:97:cd:f7:
e0:69:2f:d7:cf:59:8c:8b:3f:50:02:b5:40:e5:e2:
2d:0c:2f:a6:f9:ae:93:e6:ac:84:89:7f:6e:83:a3:
49:6c:14:c9:9c:7e:79:c4:65:81:69:b7:99:d5:74:
3c:e6:5c:a4:c1:a9:23:1d:f7:9a:97:ec:ce:a2:92:
b2:a1:fb:c1:51:8b:4d:47:8a:d2:77:07:04:86:f4:
46:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CC:2C:00:7B:33:20:42:72:0A:15:F7:95:95:03:C3:EE:C4:6E:F6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/oMwsAHszIEJyChX3lZUDw-7EbvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:2cc0::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
0a:fe:8b:3b:d5:69:d6:98:45:08:e5:2f:53:9f:20:4d:67:c7:
f3:59:c9:39:e1:d5:44:43:0d:8b:89:12:d7:5f:0d:79:00:62:
6c:b0:25:bf:6c:83:f9:24:35:10:7b:0c:c0:70:9b:e2:52:82:
3d:51:69:bc:c7:89:31:5d:dc:c3:93:2b:3f:95:83:38:22:cb:
25:f7:a6:f6:9f:b2:1c:19:65:0b:b3:74:83:59:2d:4a:c5:07:
ba:3b:c7:8b:e3:7b:1c:c6:f3:2f:f6:a4:c4:e4:64:c6:b7:6c:
ca:cb:35:fc:6c:23:50:aa:fb:d9:57:df:93:85:f9:cc:de:11:
5c:be:4f:13:44:5e:76:4c:5e:7f:99:70:8b:1c:b9:2e:55:14:
be:06:c6:f7:df:27:aa:2a:a6:68:e2:28:01:12:df:fc:7e:a2:
97:7a:2a:cf:14:8a:76:af:3b:b9:47:94:68:9f:4d:18:97:69:
f9:42:27:92:dd:a5:ed:f4:c5:d1:46:a7:52:3a:73:90:72:07:
9e:3b:b9:2a:65:52:b6:16:e2:25:94:15:27:51:ed:73:94:9c:
45:1e:82:80:c7:a3:ff:5a:77:82:3c:3f:db:d4:c6:fc:56:bb:
3c:ce:5d:b0:c3:d0:8f:2e:a2:c0:90:75:05:5f:e9:b2:a9:19:
fb:31:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:06:54 2025 by rpki-client