Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v49TYA8fbssBSZBU5ARnK54rYfo.roa
File: v49TYA8fbssBSZBU5ARnK54rYfo.roa (raw, json)
Hash identifier: UVTA3J5fhEqtwiyX9SJJJp2Uxr1pjV05CcXWt6gArVQ=
Subject key identifier: BF:8F:53:60:0F:1F:6E:CB:01:49:90:54:E4:04:67:2B:9E:2B:61:FA
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019050D8A91DCE3046502585F98CF5D4A070
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v49TYA8fbssBSZBU5ARnK54rYfo.roa
Signing time: Tue 25 Jun 2024 19:21:34 +0000
ROA not before: Tue 25 Jun 2024 19:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 2a0e:15c0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 26 Jun 2024 12:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:50:d8:a9:1d:ce:30:46:50:25:85:f9:8c:f5:d4:a0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 25 19:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf8f53600f1f6ecb01499054e404672b9e2b61fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:67:d4:38:b0:98:f9:5f:b8:30:f2:3e:c6:
80:e2:92:68:78:da:d7:d0:ac:da:d4:e9:73:4b:0e:
d1:21:ad:b1:40:a6:d6:e7:b3:9e:0d:3f:ba:3c:c1:
6b:a3:2e:c9:f3:2e:07:41:84:10:2f:d9:4c:fb:04:
35:63:f2:d8:3d:8d:28:7e:d0:44:f9:fe:8f:30:12:
b5:0b:f0:9b:5a:e5:2e:80:28:89:0b:3e:c7:2f:60:
8d:db:12:1b:bf:3a:4d:28:3d:55:af:7e:a2:b0:4f:
10:01:62:2c:db:36:45:11:7c:e2:b9:2e:29:33:06:
f1:42:f3:c5:37:4a:08:4b:3e:2b:90:9b:aa:fb:b5:
db:0b:0c:22:40:ec:38:21:54:37:53:08:32:92:a3:
23:a3:d9:b9:97:b4:f9:3e:b4:fa:57:ae:08:5a:66:
86:a2:85:05:bb:43:55:3d:26:30:36:2b:00:63:f7:
8d:08:53:e2:a2:5c:0c:78:10:90:c5:e6:c8:19:ff:
df:94:52:a9:13:1b:2f:13:3b:7c:59:ac:8e:29:98:
b0:f7:82:8e:fb:b7:85:eb:69:53:75:ae:79:5d:9c:
83:de:45:16:3f:c3:87:df:eb:ed:c2:54:4d:46:aa:
2a:bf:34:0e:c7:95:77:33:77:ff:c9:2c:af:b4:27:
d7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8F:53:60:0F:1F:6E:CB:01:49:90:54:E4:04:67:2B:9E:2B:61:FA
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v49TYA8fbssBSZBU5ARnK54rYfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
bc:3f:c0:35:45:7e:15:f0:40:61:c2:df:3b:3e:95:fa:be:92:
3f:20:15:ae:d0:66:7e:40:12:9a:0b:9d:2f:95:5f:0b:41:5e:
da:da:e1:fc:a4:c9:41:20:11:f7:96:9d:c3:e8:2f:45:27:83:
48:cb:a7:3d:d7:10:55:dd:d6:1e:72:c3:9c:27:43:a4:aa:70:
47:4d:a5:e9:ea:25:32:b2:06:6b:be:36:4b:76:33:32:aa:60:
a4:2e:63:2d:d7:8c:9f:ed:5e:e7:0e:20:07:7a:bb:6a:2b:51:
f3:0e:3d:11:ab:c5:9f:af:24:7a:77:c4:64:02:bf:23:51:96:
4f:c7:f4:74:ab:65:2e:a4:1f:13:64:96:f0:1d:6b:fa:95:72:
98:68:f5:2a:02:b6:58:f6:07:6a:2d:bb:75:a6:af:a8:0c:d1:
7a:b4:4d:ab:33:58:96:46:88:9a:18:b3:4a:35:6b:a7:4c:dd:
07:63:84:02:d3:df:4f:76:82:8f:5f:ad:ac:8d:ea:38:c7:cc:
2c:3d:f9:01:e8:6c:a5:ac:a9:8f:66:e0:49:7c:f5:73:21:c9:
98:ec:fe:60:3d:49:45:d3:d3:fa:22:31:ed:bd:c4:da:46:90:
9e:d0:c8:d6:e9:a3:5f:af:01:48:55:20:6c:bd:0f:5e:bf:d3:
34:17:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:00:09 2025 by rpki-client