Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/so4mWTnu2tGWpxVHNQCQfBFZo_4.roa
File: so4mWTnu2tGWpxVHNQCQfBFZo_4.roa (raw, json)
Hash identifier: qWDGqz3DeKfel448OX4USwtFX+7ZCzq1hWKXTMsxfPw=
Subject key identifier: B2:8E:26:59:39:EE:DA:D1:96:A7:15:47:35:00:90:7C:11:59:A3:FE
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193CE59A9967C88948AE245BF12D462B4F8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/so4mWTnu2tGWpxVHNQCQfBFZo_4.roa
Signing time: Mon 16 Dec 2024 07:23:22 +0000
ROA not before: Mon 16 Dec 2024 07:23:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:1640::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 18 Dec 2024 08:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ce:59:a9:96:7c:88:94:8a:e2:45:bf:12:d4:62:b4:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 16 07:23:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28e265939eedad196a715473500907c1159a3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3c:6b:0b:f7:86:47:be:1e:0c:37:9c:e9:5d:
0c:6c:74:e5:dd:d0:a7:56:5f:1e:44:98:38:52:e6:
ad:fb:1b:eb:4a:32:20:79:16:ff:89:d9:3c:c1:aa:
c4:52:55:15:5a:c9:6c:5f:99:1e:cf:a0:24:8c:8c:
49:20:56:72:de:19:12:ad:2d:d8:ce:43:5b:08:a2:
24:50:ba:cb:65:7a:82:a9:26:1e:8b:ed:3d:87:08:
92:76:94:fb:6c:65:ee:4d:b7:a3:b3:39:41:56:58:
e8:06:8f:1c:60:ef:28:e0:4d:d3:08:2b:81:ea:55:
b8:90:8d:c1:e7:a3:98:ec:6e:7a:f2:75:19:74:97:
b1:79:56:5f:5f:2e:7a:a9:b0:8e:3b:25:b0:58:63:
e5:77:40:50:60:1a:06:2f:16:3f:0f:8a:f1:d0:a1:
50:cb:df:3a:2d:b3:ac:2a:3a:7f:99:60:b4:26:dc:
c6:84:b4:5a:54:ee:92:be:4d:0c:11:a3:7d:6e:33:
8c:ed:45:9d:e0:13:fd:a5:4e:5a:c9:dd:dc:b7:3e:
60:4e:41:02:61:45:04:ae:db:81:59:58:62:4e:e7:
69:9c:08:19:91:77:db:cb:03:dc:ff:fe:c5:73:ad:
d1:96:63:b1:67:25:e2:c3:7c:68:3b:72:e2:37:13:
cb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8E:26:59:39:EE:DA:D1:96:A7:15:47:35:00:90:7C:11:59:A3:FE
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/so4mWTnu2tGWpxVHNQCQfBFZo_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1640::/29
2a0f:2a40::/29
2a0f:3140::/29
2a11:7440::/29
Signature Algorithm: sha256WithRSAEncryption
cb:4e:c1:56:66:db:0b:7e:bc:49:95:f4:c2:df:8f:43:44:5f:
1f:ea:73:47:48:05:ee:94:ee:22:98:bf:0a:c3:88:e8:15:b1:
4e:e9:3a:50:3b:e7:21:f3:32:a6:cb:c6:91:04:9e:8f:bb:18:
95:1b:81:8d:10:45:1b:3b:00:b3:4e:df:97:3b:70:41:6c:2b:
0e:99:7b:8c:bf:ef:56:e3:b1:9f:4e:c3:20:54:87:55:d6:e4:
8d:55:67:fe:3b:8f:03:ee:18:54:40:87:ed:1d:cb:7a:7b:13:
db:96:26:82:91:f2:08:a0:37:81:7b:4f:a0:5f:ed:a4:8c:0e:
27:df:8c:ef:4f:0d:09:09:3f:0e:d2:20:f3:0c:f7:39:80:4a:
45:74:05:98:30:28:88:55:a5:a3:1d:6c:da:cb:bb:f9:d4:3b:
b4:ba:f5:b8:54:81:c6:f5:76:a7:a8:07:47:7d:0d:b6:aa:ce:
35:e3:9a:20:e8:ad:8c:20:97:7b:46:19:3f:cc:68:a9:1c:4e:
91:8a:d0:74:88:f7:15:00:1e:86:17:f9:22:ea:92:d5:8e:51:
a5:1d:5c:17:17:26:82:31:24:12:d3:0c:2f:26:f8:fd:be:b4:
61:f6:9d:dc:99:b2:45:f0:a0:79:aa:30:45:ca:b5:ae:45:f2:
74:99:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:16 2025 by rpki-client