Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/u30QoXb8-HSYaOsQS06ZSmpNFZA.roa
File: u30QoXb8-HSYaOsQS06ZSmpNFZA.roa (raw, json)
Hash identifier: vTOSeUgnv9fyYk7WWKxFhATqZMW2Vk2NETcvx/vs9GU=
Subject key identifier: BB:7D:10:A1:76:FC:F8:74:98:68:EB:10:4B:4E:99:4A:6A:4D:15:90
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E50B863AF2C74E7BAC19B4311E17ED355
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/u30QoXb8-HSYaOsQS06ZSmpNFZA.roa
Signing time: Mon 18 Mar 2024 08:40:45 +0000
ROA not before: Mon 18 Mar 2024 08:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
2a0f:e6c6:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Apr 2024 08:43:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:50:b8:63:af:2c:74:e7:ba:c1:9b:43:11:e1:7e:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 18 08:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb7d10a176fcf8749868eb104b4e994a6a4d1590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:dd:4e:f7:84:23:0a:1b:7d:e9:bc:27:94:08:
c9:05:78:f8:3f:00:81:d6:92:53:65:b3:4b:1d:15:
be:ec:5e:6d:b0:42:91:79:eb:05:da:b2:14:af:61:
d1:94:bb:69:2f:be:a1:b5:7f:ad:46:2d:92:a3:ea:
16:1e:04:17:9f:97:59:73:93:bc:04:1f:02:24:bb:
68:0b:5c:2f:72:70:91:71:6a:8c:22:ea:9e:7d:94:
53:a2:b3:42:d7:a0:8b:b3:ad:44:54:97:ba:6c:a9:
62:d4:07:23:fb:31:6d:79:13:ae:85:3b:86:3e:8a:
37:6f:e6:b0:71:da:b4:0f:cd:ed:ba:72:16:28:25:
6f:8a:7e:44:f8:82:1f:21:c7:a6:40:68:82:2c:86:
4e:16:0f:ee:7f:04:ab:1e:23:f7:e0:d9:1f:28:c8:
69:75:f2:98:33:b3:27:71:05:87:82:4a:cb:3f:b0:
11:0e:68:e6:36:4f:af:c4:2a:9e:ef:0f:37:d8:6b:
7a:bf:e7:22:0b:48:22:da:a4:53:55:bc:86:04:20:
e9:e2:bb:73:a0:f2:ab:68:1f:00:05:37:d8:5e:6a:
7b:fa:7b:b6:44:bb:ac:90:c3:34:93:6f:0d:70:4b:
5e:ac:53:91:aa:77:15:44:15:36:ae:20:32:d4:2d:
6b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7D:10:A1:76:FC:F8:74:98:68:EB:10:4B:4E:99:4A:6A:4D:15:90
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/u30QoXb8-HSYaOsQS06ZSmpNFZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
2a0f:e6c6:1::/48
2a13:3380:1::/48
2a13:c700:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
4c:a8:00:4a:5d:5f:81:b2:ad:52:9b:b2:2c:01:55:65:36:52:
27:33:f0:12:c6:c0:df:9c:af:ce:7b:f9:61:dc:8b:46:13:76:
8e:00:e3:45:14:8b:1f:66:b6:1d:1f:7e:20:8e:ee:bc:c6:9b:
3c:a1:12:a2:ab:77:d5:40:46:88:98:12:70:5c:f6:e3:39:dc:
7c:01:09:36:a2:fd:9d:8a:56:05:ea:eb:db:4f:32:49:bc:6f:
2f:0f:7a:6a:59:2d:a3:62:8a:d7:bf:1e:d4:74:96:07:5c:9a:
ad:c5:c0:33:e2:79:30:61:e6:de:07:b6:6b:63:6f:61:79:37:
45:9b:e4:f7:42:1e:2a:fc:bb:91:23:7b:dd:40:5f:f2:7b:8f:
16:2c:b6:6c:12:8b:9a:14:20:58:cd:7f:6e:59:23:7e:a3:ae:
34:aa:12:65:1f:a4:ab:04:89:f7:6a:7e:95:fc:e4:48:96:b0:
f5:77:bb:d8:12:d0:b9:90:48:5f:fb:56:5e:a4:2d:27:bc:8b:
1d:10:d0:7e:9f:c3:be:99:02:ff:0c:87:26:fd:c1:28:2a:c4:
df:d4:2f:50:83:01:55:02:89:a7:7a:ed:cb:94:1b:9c:f6:b6:
af:cb:f1:f2:23:c6:c4:1c:9b:4a:d1:2c:7f:8c:fb:d1:3a:c0:
71:e8:44:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:43 2025 by rpki-client