Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sUAADx05Cm5inofANOFsymobpuc.roa
File: sUAADx05Cm5inofANOFsymobpuc.roa (raw, json)
Hash identifier: 6bWNyl6q/nz2tjJYlrTh7N0y3f1aX5loVF8NKM9srLM=
Subject key identifier: B1:40:00:0F:1D:39:0A:6E:62:9E:87:C0:34:E1:6C:CA:6A:1B:A6:E7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F154F5B126964A0F6550E56F443DB37EC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sUAADx05Cm5inofANOFsymobpuc.roa
Signing time: Thu 25 Apr 2024 12:51:13 +0000
ROA not before: Thu 25 Apr 2024 12:51:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:7d01::/32 maxlen: 32
2a0f:7d04:1::/48 maxlen: 48
2a0f:e7c6:1000::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Mon 29 Apr 2024 08:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:4f:5b:12:69:64:a0:f6:55:0e:56:f4:43:db:37:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 25 12:51:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b140000f1d390a6e629e87c034e16cca6a1ba6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c8:07:46:4f:59:78:0b:9e:b4:98:b5:ea:af:
7a:26:74:bf:ad:9c:64:c6:93:f9:da:1f:33:bb:ef:
b1:3b:f7:2c:67:95:ba:17:cf:7b:8b:cf:58:e6:38:
6e:0f:6c:ba:a6:fd:18:cb:16:77:b8:26:a8:a5:19:
99:5a:bc:70:33:f1:3b:37:8f:0c:e0:fd:f0:cb:07:
90:b0:59:63:7a:54:c1:2d:c5:10:41:4a:3c:ad:d9:
69:fe:0b:04:ac:25:39:ea:7b:f2:96:ce:b7:f1:14:
44:c0:cb:42:48:56:33:c7:82:a8:8e:5e:76:38:d3:
d4:8d:c6:09:b9:d3:8f:7f:c6:b8:cb:32:ac:f3:fd:
52:e6:fa:d1:c7:7e:ec:aa:9f:34:7f:d7:ac:56:b7:
c3:13:53:e9:bc:7e:a3:18:3b:98:56:ea:a2:ff:c7:
ac:d1:29:43:f5:a0:04:25:a9:07:57:83:d5:5f:4d:
bb:83:ac:19:e1:af:75:89:e8:18:d9:2c:9a:d0:df:
15:c7:72:20:b8:3c:33:dd:52:9e:14:27:83:b8:fa:
50:e9:db:4f:46:7a:de:e3:55:b7:42:1b:fa:72:41:
ff:be:07:90:cf:2a:23:37:f1:ff:3b:45:3a:f4:e0:
8a:d4:f9:4a:32:26:28:c8:5d:db:e8:20:b0:bc:41:
3a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:00:0F:1D:39:0A:6E:62:9E:87:C0:34:E1:6C:CA:6A:1B:A6:E7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/sUAADx05Cm5inofANOFsymobpuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:7d01::/32
2a0f:7d04:1::/48
2a0f:e7c6:1000::/48
2a0f:ea00::/29
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
25:14:69:db:ef:f2:05:48:e5:12:30:b7:14:06:0a:8d:1b:45:
ba:2e:a5:0f:60:dc:8d:76:66:60:51:a3:b5:a3:69:73:57:b8:
70:25:53:ca:e8:19:c9:f4:3f:86:ff:01:2e:b0:03:21:61:ce:
f9:c4:79:25:eb:c0:65:95:49:4e:87:54:d0:df:36:76:77:eb:
b9:e3:41:9b:7a:23:e3:3f:fa:d2:a7:59:e3:2d:0c:23:90:f9:
e5:5c:d9:ee:cc:78:9a:a2:9d:ef:b8:73:ba:62:b7:04:bb:a4:
44:d5:f8:f3:02:6d:e5:e8:8c:84:0c:0c:98:1b:7a:9a:5d:d3:
ca:1d:a7:bd:58:d7:a2:a1:07:37:05:e3:a8:8c:31:31:18:6c:
bc:42:96:5a:b3:d1:ff:d9:5c:58:45:78:41:77:a8:ba:66:b5:
51:7f:e1:f8:84:82:a1:fc:83:3d:5d:c3:b5:8e:c7:b6:e6:28:
7c:9c:1a:2f:46:90:e4:15:b9:ac:b9:8a:ba:59:38:dc:99:e1:
2f:52:a4:32:23:30:6f:91:20:5d:a4:41:83:28:c1:75:61:f4:
e5:1b:00:77:ee:3a:52:66:2d:60:50:19:27:9e:0d:77:8d:7d:
46:aa:8d:84:34:e1:64:3f:9b:bb:3c:6a:fa:ec:70:0d:e5:98:
b1:ec:1d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:40 2025 by rpki-client