Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/teSedrzMNPZu2Jak9XLH_gIyY_Q.roa
File: teSedrzMNPZu2Jak9XLH_gIyY_Q.roa (raw, json)
Hash identifier: Upb0TmI/bBga22G/S5Roi8qf4aHg8P9PZHZ74vGPVf0=
Subject key identifier: B5:E4:9E:76:BC:CC:34:F6:6E:D8:96:A4:F5:72:C7:FE:02:32:63:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC21A3204468A2766EDEFB409E4AD6
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/teSedrzMNPZu2Jak9XLH_gIyY_Q.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29066
IP address blocks: 2a0f:4a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 30 Mar 2024 09:27:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:21:a3:20:44:68:a2:76:6e:de:fb:40:9e:4a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5e49e76bccc34f66ed896a4f572c7fe023263f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:e4:1f:a0:6a:b6:ec:a1:71:e0:2a:ba:5d:
4d:8c:6e:aa:99:9b:98:92:ed:fd:69:ff:c0:ac:7a:
44:80:24:1c:2a:a8:5e:6c:46:62:07:e8:6c:c3:ec:
57:a6:b7:a4:f4:97:f0:4f:4e:66:56:66:1d:b8:9a:
fc:33:43:93:2e:b2:74:31:56:59:b4:4d:ba:30:4c:
8a:7a:22:20:8e:bc:e7:2c:ee:e8:84:4c:70:97:4d:
e6:c4:b4:8f:e6:93:71:1f:1d:b2:d9:37:23:3d:3d:
a2:8b:83:f2:24:f6:56:09:54:ab:2f:e7:2c:41:39:
f7:58:ba:82:94:11:7d:6b:b1:0c:06:a7:1c:6f:74:
cd:d1:51:8e:d6:26:64:5a:44:f2:72:16:88:d0:bb:
7f:11:87:5f:ba:cf:a2:09:8b:b4:62:c6:20:aa:3e:
a8:ac:1c:11:d1:74:32:c4:25:34:d9:55:9c:dc:75:
6a:1e:d7:79:2b:bf:1b:66:d6:b0:b7:a6:b2:d1:f1:
fd:4e:81:a7:14:ec:87:e2:17:97:77:51:8c:a0:75:
11:b3:ca:e6:85:dc:c3:e7:9d:2b:19:55:6e:55:c1:
e4:b6:b7:e2:49:c3:56:3e:ba:1c:9e:ae:2b:2f:e3:
e3:a9:2d:a2:3b:bc:21:7f:e8:0a:27:4b:9d:64:a9:
39:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:9E:76:BC:CC:34:F6:6E:D8:96:A4:F5:72:C7:FE:02:32:63:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/teSedrzMNPZu2Jak9XLH_gIyY_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:4a00::/29
Signature Algorithm: sha256WithRSAEncryption
7f:ea:92:8f:5c:5d:23:bf:5f:68:ce:f9:08:6a:db:0f:2a:78:
dc:29:e2:7b:1d:e7:37:7c:0d:f3:da:e5:d1:96:96:5a:81:d0:
e7:00:29:37:c4:08:d9:de:ee:c4:24:9c:f4:97:5a:70:84:3a:
d2:d1:73:f0:e6:03:0d:32:ef:0f:6f:10:61:7e:67:4e:02:cd:
31:52:cf:a9:b9:92:48:cc:c4:5b:e0:1c:ac:a4:50:6f:a6:18:
91:01:35:82:01:f3:89:be:83:17:fe:76:c1:11:80:28:e6:4d:
2c:73:56:c4:ad:be:aa:cc:6f:36:8f:23:a3:8f:cf:c2:21:51:
cb:ec:20:d5:0c:c7:c2:c4:9a:8a:56:35:b6:78:f9:ad:85:f3:
e7:65:cc:f0:74:fc:90:d5:62:64:c4:e9:7f:4e:89:a2:15:a3:
48:69:27:35:bd:a2:03:6b:2b:95:e0:77:99:c2:87:ac:02:65:
70:59:8e:69:9d:54:d4:5a:50:48:f9:e3:c2:40:02:05:b8:b5:
ad:6a:ec:64:1c:ed:ab:e8:36:eb:9f:84:01:ba:32:77:3c:11:
95:8c:bf:06:d6:65:f3:b9:2c:39:e6:28:b5:fd:74:50:ab:2f:
4d:e3:74:f6:4d:78:07:6c:2a:56:99:a0:44:2e:6e:62:25:99:
39:4c:a9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:25:54 2025 by rpki-client