Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tTjLq3OUEZTEV6cP_Ze_lc3nccI.roa
File: tTjLq3OUEZTEV6cP_Ze_lc3nccI.roa (raw, json)
Hash identifier: 7H5eSnLABb2o9qlD4ecNwerV1SndbkG3807FeCNCazQ=
Subject key identifier: B5:38:CB:AB:73:94:11:94:C4:57:A7:0F:FD:97:BF:95:CD:E7:71:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195380BF8A10415809A5746B9CE3C20FCA7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tTjLq3OUEZTEV6cP_Ze_lc3nccI.roa
Signing time: Mon 24 Feb 2025 13:01:03 +0000
ROA not before: Mon 24 Feb 2025 13:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152631
IP address blocks: 2a0f:3f80::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Mar 2025 16:55:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:0b:f8:a1:04:15:80:9a:57:46:b9:ce:3c:20:fc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 13:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b538cbab73941194c457a70ffd97bf95cde771c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:7e:98:e7:e5:e4:1a:a8:52:1c:20:5a:6c:
49:c1:df:29:fd:4c:06:fc:9a:3c:ac:dc:01:fc:52:
2f:97:13:ab:17:59:a0:70:16:d4:00:07:b0:2f:ca:
e5:14:75:60:88:3b:6b:bb:66:a3:7d:7a:af:43:69:
37:ca:fa:d4:6a:76:02:60:6b:f4:53:64:53:ea:8f:
ec:28:3d:08:08:1d:0f:57:aa:6e:21:0a:d3:19:44:
75:b8:6b:89:b1:3d:3f:e2:cc:d3:66:50:82:46:99:
58:50:e3:b7:45:1c:d0:db:24:89:bb:ff:57:a1:63:
a8:34:d5:21:de:f1:5d:cc:4f:13:5d:c4:59:08:93:
12:91:f8:aa:98:14:fc:7c:4e:8a:a6:04:da:d7:b5:
ac:2c:b1:82:63:82:c6:c1:50:00:bb:ce:e2:cd:7a:
f8:8b:7f:34:e0:ed:f1:a9:69:67:95:3a:90:fc:9a:
c3:9d:47:64:9d:ee:b7:8f:7a:18:f5:e6:40:88:be:
47:d1:a6:72:a7:b6:61:30:f8:e6:52:61:4d:36:b0:
81:75:62:83:fb:a9:b9:18:1a:cb:da:e1:b5:ab:2d:
86:50:56:7f:be:45:23:8e:a7:29:14:8f:49:a0:a2:
f5:8c:3d:3f:5f:cb:0a:60:89:dc:40:de:75:c9:5c:
fb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:CB:AB:73:94:11:94:C4:57:A7:0F:FD:97:BF:95:CD:E7:71:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/tTjLq3OUEZTEV6cP_Ze_lc3nccI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3f80::/29
2a0f:b400::/29
Signature Algorithm: sha256WithRSAEncryption
87:5f:2f:32:d3:e2:d7:d0:4c:83:c3:55:64:88:0d:ee:8a:06:
42:3a:6a:e1:3c:29:56:8d:04:07:42:55:2d:40:a1:38:44:49:
a9:ec:c9:fb:d4:ec:dc:7d:86:47:9f:6a:47:22:4a:0e:d9:90:
90:0e:a7:d5:78:00:06:34:6c:e6:3c:a0:4a:20:9c:54:55:2a:
c3:04:c2:89:6d:05:8b:54:8c:bf:c0:ae:42:db:61:c5:79:c8:
44:61:f0:88:d8:e3:33:91:eb:24:10:f8:0c:1c:c5:f0:1a:71:
c0:33:41:05:d0:1e:ac:b9:38:6e:eb:f8:67:b0:6c:27:ce:4a:
d2:9a:7b:be:d0:ca:57:70:e6:80:29:bf:fe:a9:a7:31:fa:42:
4b:18:c5:6f:84:06:43:67:c9:29:f4:e1:49:cb:f4:22:9d:c7:
5d:23:13:ab:1f:c9:69:de:be:f7:9f:b8:36:58:78:04:8e:8d:
95:02:3f:89:f6:e9:a0:27:9d:b3:8f:1c:0d:85:1f:46:c5:a1:
8e:0e:d6:52:02:a3:35:78:a6:56:e5:f2:b0:f4:c7:f7:f2:20:
30:dc:63:1c:98:85:86:75:63:0c:0a:c8:1a:db:44:2c:08:cf:
b7:99:0d:28:0a:8c:8e:6a:3e:c7:f5:a5:11:69:b4:e1:7c:b2:
cb:27:da:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:06 2025 by rpki-client