Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/szdQjpnXEYzJ7rkH_P7C3_vwUfA.roa
File: szdQjpnXEYzJ7rkH_P7C3_vwUfA.roa (raw, json)
Hash identifier: kJDAxrRG2XAjRbGU0NG4w13gZkS+J5Ijcrg7rTWqCM4=
Subject key identifier: B3:37:50:8E:99:D7:11:8C:C9:EE:B9:07:FC:FE:C2:DF:FB:F0:51:F0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01923F55EE327B6D42A677CDCC8CF4A83C5F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/szdQjpnXEYzJ7rkH_P7C3_vwUfA.roa
Signing time: Sun 29 Sep 2024 19:50:48 +0000
ROA not before: Sun 29 Sep 2024 19:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a0f:e6c5::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Sep 2024 13:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3f:55:ee:32:7b:6d:42:a6:77:cd:cc:8c:f4:a8:3c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 29 19:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b337508e99d7118cc9eeb907fcfec2dffbf051f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:75:33:4d:0a:dd:9d:80:f0:a1:77:7a:e9:d1:
b9:9d:f7:04:44:38:e7:06:f3:4e:e0:72:22:71:14:
64:59:8d:0f:7e:ad:47:cb:4f:8c:97:bd:83:d9:96:
7a:76:6e:e5:79:fc:69:ff:81:71:39:0b:11:fa:49:
c1:b7:63:24:89:0c:78:fe:5c:9d:0e:66:64:fa:e4:
cd:d8:8e:ef:a0:eb:af:d3:1d:3f:1a:b3:c2:40:e6:
d5:59:fa:2b:81:2d:f8:a8:69:4f:2b:ae:75:31:9f:
92:76:dd:41:15:c2:35:52:ed:35:a8:c2:e6:d1:40:
13:46:cb:bf:3e:a1:84:ee:ed:6a:d1:32:52:f2:09:
b2:86:e3:05:4f:a3:93:50:0e:53:6e:1d:f2:53:f8:
c5:a7:b1:49:f0:e1:a2:7e:07:3d:f6:db:bb:4a:55:
d7:ef:82:14:a1:7c:73:9f:67:f6:03:51:73:01:98:
8a:2b:77:fb:41:5e:79:fc:24:e8:92:a8:0b:10:5b:
6e:9c:59:bf:54:d9:0e:02:73:7b:0f:d2:3b:ba:96:
c6:cc:17:07:c0:4f:fc:90:a5:3a:fe:c9:99:10:59:
34:33:d5:d6:e6:e3:d6:0e:4a:93:10:43:61:9f:98:
c9:8e:1a:e9:96:61:03:1a:38:85:49:f6:a0:d2:bd:
74:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:37:50:8E:99:D7:11:8C:C9:EE:B9:07:FC:FE:C2:DF:FB:F0:51:F0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/szdQjpnXEYzJ7rkH_P7C3_vwUfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e6c5::/32
Signature Algorithm: sha256WithRSAEncryption
51:8c:88:72:e8:0f:b5:ba:d0:4a:de:0b:11:90:49:06:0b:bc:
3b:18:cb:04:10:2b:ee:57:78:4c:c5:25:72:96:0b:f2:47:98:
71:be:43:ad:bb:b2:7f:01:1b:ea:ec:87:77:28:31:0a:90:bf:
0a:3c:af:25:b3:dd:4a:66:3a:ab:c3:4f:a5:60:cd:fd:64:24:
d9:8c:76:3d:65:45:b4:38:28:4b:5b:eb:98:2e:5b:35:ff:40:
dc:ff:31:09:a1:0b:ae:2b:4b:4d:17:fc:f1:e2:e5:00:70:85:
3e:0e:0c:ea:c2:fc:ae:59:92:67:52:76:97:b9:8c:d0:7e:e3:
9e:aa:68:87:38:79:44:9a:60:84:bc:f8:39:90:0f:66:c2:b6:
a1:bd:3e:37:ec:59:84:f8:86:90:51:f1:86:29:37:41:84:24:
1e:aa:5c:98:5e:50:55:00:9f:88:4e:e9:8f:2e:d7:7c:8c:1c:
f8:b8:69:39:c7:bf:38:f7:ca:7a:79:0c:df:3c:12:7c:22:38:
32:61:7d:35:74:6b:15:8e:4b:00:1e:8c:a8:ac:3d:2a:08:e2:
87:3e:22:32:46:9e:48:ba:be:aa:ed:3d:0d:38:c4:99:31:be:
c2:39:28:37:f6:73:94:15:b3:54:ff:20:0d:91:a3:dc:8d:e2:
f4:90:37:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:40:10 2025 by rpki-client