Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r5vIGrSP9NQOuO2XUYDHP4aV-rA.roa
File: r5vIGrSP9NQOuO2XUYDHP4aV-rA.roa (raw, json)
Hash identifier: F+2+vp6DJgSxZhxQVDp4eQjlxi4bi4swkXJnyZI+MFM=
Subject key identifier: AF:9B:C8:1A:B4:8F:F4:D4:0E:B8:ED:97:51:80:C7:3F:86:95:FA:B0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D7D5FEEB0378A4CC809562FDF655DD74D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r5vIGrSP9NQOuO2XUYDHP4aV-rA.roa
Signing time: Tue 06 Feb 2024 07:44:15 +0000
ROA not before: Tue 06 Feb 2024 07:44:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197730
IP address blocks: 2a0f:3d80:3::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Feb 2024 19:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:5f:ee:b0:37:8a:4c:c8:09:56:2f:df:65:5d:d7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 6 07:44:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af9bc81ab48ff4d40eb8ed975180c73f8695fab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e4:15:0e:b8:db:90:cb:c3:2a:ac:c4:69:e3:
cc:d2:8c:20:5e:04:13:ac:b3:3d:1a:33:39:0a:6a:
83:e1:f8:a3:01:bf:b7:da:c2:fc:ca:6b:b1:70:a1:
a1:e9:4d:5f:38:50:57:ca:1c:cf:00:ca:be:8f:2c:
62:be:c6:b6:c4:2c:70:6d:a2:d4:d4:86:44:41:39:
4a:a4:ae:c3:e4:18:85:3c:e3:cd:1d:34:a6:ee:6f:
f6:f8:f3:f9:0d:56:df:53:39:a0:31:01:80:dc:6e:
87:c3:52:63:1d:48:47:56:60:f7:4f:0c:ec:bb:76:
9b:b5:c5:6a:69:7f:db:60:68:8a:6e:b5:0f:03:e1:
92:e6:2b:a2:3a:8e:dd:02:4e:b3:1a:2b:b4:97:37:
ca:b7:56:49:b4:ea:9e:55:db:d2:73:b0:6a:f0:ab:
c6:a2:96:58:f7:e5:3e:b9:d5:f2:fa:7a:5b:be:83:
bb:5b:be:16:0d:82:3c:7e:94:72:02:41:ff:d0:ca:
60:00:76:f0:4d:cb:8b:d0:63:fb:d2:71:30:ff:db:
95:09:34:d4:f1:5e:73:7f:c2:76:42:0d:5b:ba:88:
51:11:f1:20:50:31:48:cc:2b:e9:a6:bc:c3:56:cb:
ef:a5:6f:bd:b3:c3:df:81:5c:a6:0c:6d:bb:80:dd:
39:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:C8:1A:B4:8F:F4:D4:0E:B8:ED:97:51:80:C7:3F:86:95:FA:B0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/r5vIGrSP9NQOuO2XUYDHP4aV-rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3d80:3::/48
Signature Algorithm: sha256WithRSAEncryption
65:21:72:69:63:06:cb:c3:12:be:e7:5a:cf:c5:cd:5f:c1:c9:
54:c3:12:78:89:79:54:ac:09:cd:ed:90:66:20:9c:b4:8c:f0:
22:fd:cd:e8:b5:31:d9:62:16:b1:0a:ac:ea:20:86:6e:2c:c7:
34:17:c7:ac:01:fd:6d:00:e3:1d:e5:ac:66:bf:9e:ca:e9:94:
80:ff:7b:16:08:3e:17:25:9e:73:7c:46:9b:b2:e5:31:46:0b:
db:37:8d:39:bf:d7:9c:1c:ec:4c:8e:72:3d:a2:4c:ff:34:43:
76:56:e3:1b:b7:b5:b9:cf:2f:52:7e:04:25:c8:5f:f1:13:4e:
14:18:5e:22:d1:9a:72:27:ba:1c:26:b2:7b:79:25:e5:28:b9:
de:38:7b:35:0b:f1:8d:68:23:e2:bb:61:43:61:23:f0:5c:7f:
47:84:74:ca:71:3d:f0:ce:88:3b:b8:52:ee:36:9c:e7:14:13:
a9:a3:f4:c7:aa:76:f1:25:30:61:00:fd:7f:15:df:d0:6c:b6:
68:65:92:e3:79:23:08:f1:e0:d0:16:e1:53:87:7f:e2:81:0f:
aa:c2:1b:10:81:a1:18:8f:0c:c2:6a:8a:d1:01:cd:85:57:4b:
e8:77:2d:99:e1:00:82:25:34:6c:af:9d:72:31:59:03:ef:1e:
c5:66:6d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:42:02 2025 by rpki-client