Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qsxjDMdtkhGLNCwTqNxSIg-L2Zo.roa
File: qsxjDMdtkhGLNCwTqNxSIg-L2Zo.roa (raw, json)
Hash identifier: cXzypiIom9019MNfjvolW/p6uEGr+G9PuxzaUJiiu1g=
Subject key identifier: AA:CC:63:0C:C7:6D:92:11:8B:34:2C:13:A8:DC:52:22:0F:8B:D9:9A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E7A498B75500F7AFE7ACDC6E2C0874E5A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qsxjDMdtkhGLNCwTqNxSIg-L2Zo.roa
Signing time: Tue 26 Mar 2024 10:23:43 +0000
ROA not before: Tue 26 Mar 2024 10:23:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a04:9f40::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0e:8880::/29 maxlen: 29
2a0f:1540::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:cb40::/29 maxlen: 29
2a12:3f00::/29 maxlen: 29
2a12:ef00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 27 Mar 2024 09:44:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7a:49:8b:75:50:0f:7a:fe:7a:cd:c6:e2:c0:87:4e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 26 10:23:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aacc630cc76d92118b342c13a8dc52220f8bd99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8e:9e:7a:04:79:82:90:1d:b3:5b:45:34:a8:
d2:6e:cc:1f:9b:de:b7:d8:84:04:8b:63:c8:95:3c:
18:70:46:b4:16:a4:bc:c2:5f:07:4d:4e:f2:99:04:
93:a2:50:c1:8c:b9:45:3f:39:83:f5:01:59:88:4a:
83:1b:34:6a:0c:d4:0e:ef:d7:f3:d7:b0:db:b6:72:
34:c2:63:9e:8c:3b:f6:5b:7b:d9:47:43:20:b5:9f:
40:78:54:d0:e8:99:c1:99:e5:b3:9f:8d:a5:da:39:
40:8e:df:fd:8e:06:9f:d8:1d:64:a2:79:35:ca:37:
c1:d7:6e:f2:6b:c9:c8:be:32:a7:0f:ad:a2:cd:7f:
e3:1a:f3:5d:1d:84:a1:49:db:62:58:52:68:d1:e5:
63:e6:6e:dd:81:ee:57:64:80:6d:08:73:1d:71:ef:
dd:41:4a:ac:48:a6:8e:78:45:a0:4a:7a:bd:1e:0c:
5f:ed:d3:b8:d6:8a:26:80:60:47:d8:0a:7e:3a:dd:
ec:f5:72:b4:dc:33:bf:5b:24:43:e9:14:33:aa:57:
0a:1f:22:a2:b8:fb:40:75:36:81:7f:a6:e1:51:88:
67:ca:b3:68:1c:74:79:96:80:3a:c5:38:7e:c8:af:
4a:23:9c:ea:31:1f:eb:73:b4:cb:42:95:66:21:63:
1b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CC:63:0C:C7:6D:92:11:8B:34:2C:13:A8:DC:52:22:0F:8B:D9:9A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qsxjDMdtkhGLNCwTqNxSIg-L2Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:9f40::/29
2a0d:8f80::/29
2a0e:8880::/29
2a0f:1540::/29
2a0f:3740::/29
2a11:1880::/29
2a11:b740::/29
2a11:cb40::/29
2a12:3f00::/29
2a12:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
6e:af:12:dd:e1:3d:af:05:87:8c:9b:e4:5d:77:e7:39:00:b3:
52:18:92:b0:3c:c4:7f:24:50:40:8d:32:d7:01:b2:5e:91:67:
0f:fd:fb:ea:9f:29:41:96:f3:bd:86:74:c6:a5:ae:b3:34:bd:
5c:d3:15:52:47:78:11:4e:c0:32:2c:84:d2:fb:b4:a1:00:4e:
59:61:42:f9:61:09:ff:b9:21:11:dd:2b:1f:c3:8e:e1:62:ed:
8a:33:3b:0b:d1:9a:1f:7d:7c:24:18:24:87:81:68:a1:0c:19:
a9:35:50:46:1b:a8:cb:b3:8f:5e:8f:3b:e8:bc:ed:2f:b6:39:
7d:b0:da:ca:1f:a9:a8:44:74:c0:06:ee:01:b9:e4:2c:b7:42:
69:24:4c:58:4c:32:c5:fc:fc:b3:93:8f:4a:76:b2:dc:13:ee:
fe:7f:a1:ad:20:3e:a4:5b:c8:5c:a7:bb:85:54:e5:a2:56:2f:
2e:90:c4:d5:6d:5b:0e:0e:20:92:84:4d:28:54:76:31:5b:3d:
f5:13:d9:34:29:00:3c:68:c0:ea:50:35:2e:38:4e:6f:45:65:
d1:de:21:cb:98:8e:c3:db:9f:aa:4a:e4:52:f9:df:4f:ff:78:
86:bc:59:32:7c:75:0b:16:17:c3:e4:03:29:7d:fd:fc:63:6e:
eb:4d:66:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:16:38 2025 by rpki-client