Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qDtx0flIDWwLfWtsf8KXXy5WQCM.roa
File: qDtx0flIDWwLfWtsf8KXXy5WQCM.roa (raw, json)
Hash identifier: W/hXCvkP0Vz4d/Mjy4psStfRuf8jJWYxqgo0G3ch9Ms=
Subject key identifier: A8:3B:71:D1:F9:48:0D:6C:0B:7D:6B:6C:7F:C2:97:5F:2E:56:40:23
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019131828BD65AF05F2FE01ED7BAA683C789
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qDtx0flIDWwLfWtsf8KXXy5WQCM.roa
Signing time: Thu 08 Aug 2024 10:22:04 +0000
ROA not before: Thu 08 Aug 2024 10:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c6:bf88::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 Aug 2024 07:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:82:8b:d6:5a:f0:5f:2f:e0:1e:d7:ba:a6:83:c7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 8 10:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a83b71d1f9480d6c0b7d6b6c7fc2975f2e564023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:d2:37:f1:cc:f3:2d:40:b0:ff:8c:61:d2:
9f:00:0e:90:e7:1f:dd:9f:b2:bc:cb:56:98:fb:b6:
7b:ff:c3:ac:10:8e:ae:87:4c:6d:55:6f:df:fe:e1:
23:55:bb:80:02:c6:13:60:e0:e6:42:0f:f9:0e:c0:
b4:2a:61:4f:2e:95:55:c2:7e:7f:24:55:d2:11:76:
93:30:87:80:b6:13:c3:f5:39:33:0b:82:77:84:72:
da:29:3e:09:62:06:e4:09:98:cb:f0:f4:97:16:ea:
c6:ea:8f:f9:cc:c5:d8:2f:cb:39:8e:cd:2b:35:a0:
7c:30:2d:a9:99:51:90:27:14:bd:cf:b2:a6:57:6e:
ce:23:3b:50:ea:e7:ea:d8:be:ac:0f:fb:c3:c4:17:
11:3c:68:6a:09:98:f4:6e:29:7c:8c:87:3d:d9:c6:
e2:65:b3:22:d8:36:18:93:de:30:5d:d1:48:2d:c7:
70:90:6c:90:65:1f:99:08:fc:c9:09:36:0c:7e:e7:
18:a8:21:29:9c:c1:4b:da:d2:7c:6a:b4:b3:a9:14:
26:5d:15:2e:f5:40:c8:dd:a7:c3:28:b8:fa:62:e6:
57:77:64:00:2e:88:4d:2a:bf:1e:cd:3b:55:a1:73:
d6:4e:9f:7b:c0:04:16:8b:1a:c6:9f:5c:2b:ea:de:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3B:71:D1:F9:48:0D:6C:0B:7D:6B:6C:7F:C2:97:5F:2E:56:40:23
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qDtx0flIDWwLfWtsf8KXXy5WQCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0f:e440::/29
2a0f:e6c6:bf88::/48
2a13:c700:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
b5:ba:db:bb:30:d9:5a:93:93:50:43:85:c3:2f:25:1e:6b:80:
2a:86:c5:ad:e8:97:6a:e0:44:bc:1b:64:13:41:05:37:8d:68:
a7:87:0a:86:27:16:3f:a2:89:60:fe:cc:c6:9a:21:d3:21:46:
46:e5:eb:25:50:1f:85:4e:ac:23:52:38:47:16:75:eb:f4:6d:
a5:64:d8:00:46:ca:23:15:be:76:70:6c:62:cc:ed:26:65:fc:
74:8f:54:49:16:1f:56:30:58:e1:51:60:79:02:ed:2a:4f:5f:
37:3c:2e:36:b0:89:23:b0:8d:2f:e1:7e:ae:93:2c:9d:ea:e1:
9d:51:59:f9:cb:3c:5a:68:cf:bf:89:f0:47:05:3b:a9:9d:99:
08:3f:fb:a1:95:88:f3:69:1a:ac:99:c5:0f:fa:07:0e:24:b3:
82:39:82:76:02:79:bb:1f:6f:09:75:f5:5f:95:97:12:6a:24:
00:4c:5b:7e:6f:c0:77:cc:50:9d:13:6c:85:f0:43:c0:ed:99:
e2:11:da:7d:a2:98:f3:2e:4d:59:fe:06:7b:65:ff:b0:a7:42:
59:ec:81:fd:94:e4:3c:2f:b1:d3:b4:7a:e9:4b:d0:11:ec:7a:
ae:24:64:95:39:c0:c3:d5:d4:93:ca:bc:60:6e:ec:4b:a8:1c:
4d:1f:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:10 2025 by rpki-client