Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tPbSBaSIDEeCLSEOn-6wnzZrzoc.roa
File: tPbSBaSIDEeCLSEOn-6wnzZrzoc.roa (raw, json)
Hash identifier: SpK9Q7dmKPGDGPXtjO6tq3N84WkSmMmfXeLbbjO7ESI=
Subject key identifier: B4:F6:D2:05:A4:88:0C:47:82:2D:21:0E:9F:EE:B0:9F:36:6B:CE:87
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01923E8D6D660F950D0213029D943DE83B12
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tPbSBaSIDEeCLSEOn-6wnzZrzoc.roa
Signing time: Sun 29 Sep 2024 16:11:48 +0000
ROA not before: Sun 29 Sep 2024 16:11:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d06:66::/48 maxlen: 48
2a0f:1587::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 04 Oct 2024 16:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3e:8d:6d:66:0f:95:0d:02:13:02:9d:94:3d:e8:3b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 29 16:11:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f6d205a4880c47822d210e9feeb09f366bce87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:2c:58:1c:21:0a:04:6a:be:be:be:3e:bd:
9e:e0:63:4b:b8:c2:3d:7a:8b:7b:3f:69:7f:89:a4:
16:ca:15:ae:c3:53:1f:19:2e:f3:03:57:c7:93:67:
66:2f:28:58:7d:36:97:7b:eb:59:a8:d1:e7:0d:94:
ce:4f:ea:77:04:3c:1b:83:f8:53:9c:a0:cc:3e:2c:
ec:16:fc:ed:18:3d:a5:f8:3e:c9:0c:d6:43:8f:8a:
e0:0f:4a:8a:d1:5f:73:54:eb:f4:28:85:a4:2b:4d:
71:a8:2f:b8:b3:39:4b:02:07:13:1d:90:a6:92:0d:
11:9c:01:bb:b9:b9:13:7f:ec:d7:56:0a:32:81:68:
dc:f0:f2:4c:6f:64:76:68:db:93:ed:2d:b0:c0:af:
94:d2:a2:03:d0:81:21:7a:e7:f2:47:f0:4f:bd:26:
f2:c6:68:70:9c:d7:6d:29:7b:0a:47:b3:75:c2:ef:
8f:a4:d4:77:53:0d:5a:6a:3b:74:bb:62:8d:50:8d:
d2:a6:a5:4b:de:94:ae:f4:92:3a:f9:74:67:46:a8:
49:8d:84:27:9b:b8:cd:90:d1:4c:34:56:c1:6e:90:
18:b1:64:91:41:c9:89:b8:04:32:93:5c:7d:49:76:
62:f7:8d:c3:c7:54:d5:f7:a3:ce:2e:8e:a9:99:5f:
66:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F6:D2:05:A4:88:0C:47:82:2D:21:0E:9F:EE:B0:9F:36:6B:CE:87
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tPbSBaSIDEeCLSEOn-6wnzZrzoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:66::/48
2a0f:1587::/32
Signature Algorithm: sha256WithRSAEncryption
41:ab:26:36:f2:97:27:01:23:13:e0:58:3a:a0:57:43:93:32:
53:d4:df:a3:ed:16:04:c7:20:d9:05:b7:3e:5d:90:68:4b:ca:
ad:96:8e:71:17:0e:fb:46:a8:b9:17:af:0c:74:ca:7c:17:0d:
e9:aa:44:7a:4a:f9:cf:2e:67:ef:93:49:7b:87:0d:b6:3a:f9:
f3:a8:c2:f6:fa:17:78:ee:5d:8f:95:e1:f8:2a:6b:98:8b:7d:
d9:97:1d:ec:bb:65:a2:58:cb:0a:00:1d:02:1f:c3:ca:cb:5c:
f6:a0:44:77:6d:fb:51:3f:fd:6a:14:f9:e1:56:e4:68:f1:00:
fe:d5:df:95:90:80:77:e3:a8:47:43:9b:e2:27:33:f0:0f:bf:
99:86:6d:2e:3f:81:69:bb:22:e0:ec:20:ee:3c:9f:12:4b:c9:
43:4e:52:3d:55:12:99:77:ff:0f:27:86:9a:60:64:0c:0f:29:
a2:c1:0b:0d:e3:06:8f:72:6f:ff:0e:ae:d5:36:54:63:15:e4:
84:d5:e0:b2:8c:a4:f7:8f:81:3f:b3:8e:ed:15:a5:55:44:b2:
66:dd:3d:e3:ea:45:8c:12:a9:6c:f0:fc:3c:ff:50:70:fd:4a:
11:a1:6b:7b:70:5d:bb:66:25:f2:be:6a:7e:81:d9:1e:f3:02:
3d:44:19:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:32 2025 by rpki-client