Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rt8mkmsMv3gUGJIx0RDqkh8BTGk.roa
File: rt8mkmsMv3gUGJIx0RDqkh8BTGk.roa (raw, json)
Hash identifier: 9gSNUjiI1Kd4OM5pgWCoiZPEA5BWhmMA641FTSiYNTw=
Subject key identifier: AE:DF:26:92:6B:0C:BF:78:14:18:92:31:D1:10:EA:92:1F:01:4C:69
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195D43D6C6713789AFB3EC5CCFB29EB13AC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rt8mkmsMv3gUGJIx0RDqkh8BTGk.roa
Signing time: Wed 26 Mar 2025 20:55:50 +0000
ROA not before: Wed 26 Mar 2025 20:55:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62513
IP address blocks: 2a09:17c0:8743::/48 maxlen: 48
2a0e:c785:2::/48 maxlen: 48
2a0e:f600::/48 maxlen: 48
2a0f:1581:100::/48 maxlen: 48
2a0f:3d80:49ff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Mar 2025 13:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d4:3d:6c:67:13:78:9a:fb:3e:c5:cc:fb:29:eb:13:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 26 20:55:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aedf26926b0cbf7814189231d110ea921f014c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:bf:83:ab:2f:6d:13:19:f6:da:b6:b7:c5:
4c:32:9c:98:6c:a5:62:64:6a:35:f9:60:ec:84:e5:
8b:2b:f4:e7:91:3d:12:be:5e:09:dc:4b:82:e1:0f:
96:18:e7:2d:9f:38:16:03:a9:45:83:95:89:51:b6:
49:cb:e9:78:27:69:b9:23:fd:9a:c4:8e:1c:7f:72:
f8:24:1b:cc:a2:39:e7:80:8c:5f:21:90:a1:21:f0:
3a:29:0f:d2:59:05:f7:0b:c4:b5:53:db:b3:6d:b9:
2e:6e:7c:02:81:be:b2:c5:e8:61:b2:73:75:e0:4a:
df:e6:9e:84:6b:cf:53:1e:8e:9f:2a:b0:b9:30:f2:
29:74:a7:25:41:79:36:78:b8:61:1b:b0:87:95:81:
13:60:85:b4:d7:73:1f:be:21:9b:b4:5f:dd:cd:61:
67:63:ca:91:b6:3d:34:f7:89:2a:b5:08:d8:1b:9c:
4d:69:6c:17:2b:d0:e1:f4:00:4b:51:88:09:53:03:
8b:ff:3b:28:4b:22:60:92:cd:98:f3:94:0c:76:0c:
97:c7:cd:f9:10:c2:d7:ce:d0:dd:b6:5a:d1:c4:ba:
21:e3:18:48:e3:35:62:5d:38:22:9a:43:08:0e:64:
7a:c3:bf:24:e7:c3:b0:45:03:e9:d0:eb:3d:58:6a:
d8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:DF:26:92:6B:0C:BF:78:14:18:92:31:D1:10:EA:92:1F:01:4C:69
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rt8mkmsMv3gUGJIx0RDqkh8BTGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:8743::/48
2a0e:c785:2::/48
2a0e:f600::/48
2a0f:1581:100::/48
2a0f:3d80:49ff::/48
Signature Algorithm: sha256WithRSAEncryption
68:a8:54:c9:d6:a5:83:97:5d:a6:2d:69:d0:43:c1:5a:89:7e:
36:1c:cc:52:b3:1a:d9:d3:0f:cb:2e:9a:6c:36:86:13:05:37:
37:8d:a8:59:10:f7:74:51:3b:98:63:dd:2c:53:b9:29:4e:78:
ba:35:7a:ae:df:38:84:f8:a0:83:1c:ee:15:62:ba:34:07:ae:
89:a9:1a:53:a6:7b:de:37:04:ee:0c:0c:ff:94:cf:bd:ab:fd:
fa:9c:d7:54:0e:9e:1c:a2:bb:61:ef:d7:9e:c6:09:42:9c:62:
2c:38:e3:66:24:97:05:ad:c7:68:5d:ab:87:db:da:f5:92:ba:
78:46:a8:0f:ab:4d:b0:e9:23:a1:05:39:8b:87:da:6f:ff:1d:
c5:70:62:07:9c:c8:f1:de:46:99:46:5a:f5:ec:82:d1:32:9e:
e8:fe:70:cc:30:6b:e7:41:01:8e:0e:7a:7e:7f:a4:2a:97:95:
2c:e3:ce:d3:36:b8:e2:01:6b:61:85:59:e3:2e:79:3b:fd:1e:
fa:52:d4:c7:52:a3:eb:25:10:18:77:31:7f:67:16:06:a8:e2:
c4:a4:ae:f1:af:23:4b:2b:ff:86:10:53:e9:60:90:89:1f:b0:
fb:66:a8:d8:83:3d:b6:1e:4d:17:f4:55:69:6d:04:33:f7:8a:
65:f0:9e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:27 2025 by rpki-client