Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v7g3Xz0DnbSmWq91OPJSa98pkpI.roa
File: v7g3Xz0DnbSmWq91OPJSa98pkpI.roa (raw, json)
Hash identifier: 6VZaT1Jj4IO8TnEqtUU5z2UxgB7q3tD9j0vb4nZldNM=
Subject key identifier: BF:B8:37:5F:3D:03:9D:B4:A6:5A:AF:75:38:F2:52:6B:DF:29:92:92
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01937369724357E3FAF498071C7B4BA12AD5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v7g3Xz0DnbSmWq91OPJSa98pkpI.roa
Signing time: Thu 28 Nov 2024 15:35:10 +0000
ROA not before: Thu 28 Nov 2024 15:35:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0f:14c0::/29 maxlen: 29
2a10:3440::/29 maxlen: 29
2a11:6d40::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 04 Dec 2024 07:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:73:69:72:43:57:e3:fa:f4:98:07:1c:7b:4b:a1:2a:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 28 15:35:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfb8375f3d039db4a65aaf7538f2526bdf299292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:ad:29:8f:b1:0b:5b:69:26:53:9a:37:8c:
8d:05:f8:92:d2:0e:dc:bd:ae:0d:09:55:9c:16:f8:
88:c4:7b:f4:7c:c4:83:11:1c:2f:80:d4:e3:06:22:
79:57:24:f1:7d:c8:19:9f:01:a4:5b:cb:80:3a:62:
eb:cc:95:84:89:2d:92:b0:86:70:89:47:b5:0e:66:
a8:b1:95:7d:dd:bb:de:0e:1c:47:93:3a:3f:ad:14:
40:1c:bb:bb:a4:1e:6c:92:60:e8:cd:b0:af:73:08:
35:da:a5:f3:41:c4:1e:4d:15:06:66:43:1d:12:dd:
4e:66:f6:c0:5d:d8:2c:4b:a0:d5:b1:df:7d:eb:61:
89:47:61:03:df:7a:3e:91:21:91:8f:1a:de:95:6f:
c4:e9:a5:70:f9:19:bf:eb:0c:31:48:f8:02:7f:1b:
b0:30:5a:b1:14:a4:bc:7b:94:5d:5e:6c:29:e6:e5:
61:8d:73:de:06:90:93:8d:71:f2:7d:01:97:8e:23:
fd:7e:c1:0c:0b:6f:66:fe:ec:06:ff:46:40:12:00:
6e:f8:46:5e:97:46:ec:56:f2:fa:82:bb:d3:84:54:
f0:27:f0:b6:d5:e1:c8:82:a1:d2:ce:1c:aa:da:ef:
4d:a9:c6:7e:df:5f:45:8d:6e:eb:eb:f0:fa:6c:7a:
76:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B8:37:5F:3D:03:9D:B4:A6:5A:AF:75:38:F2:52:6B:DF:29:92:92
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v7g3Xz0DnbSmWq91OPJSa98pkpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:14c0::/29
2a10:3440::/29
2a11:6d40::/29
Signature Algorithm: sha256WithRSAEncryption
95:c1:e9:e0:b1:f3:f5:b8:36:84:d3:ae:61:c4:23:eb:8a:d9:
97:1f:68:e0:2a:ee:10:2d:f0:a4:88:fe:da:fb:4e:8f:cd:07:
c9:f8:d8:e8:ea:8c:3a:6d:ea:7d:7f:52:81:3c:2e:22:62:11:
17:4c:02:57:41:10:32:80:3e:85:90:63:92:be:e7:b5:96:db:
43:7e:71:b2:5b:93:3f:c5:5a:37:11:f9:aa:00:bd:66:2b:47:
70:09:56:4d:e0:2d:f4:29:aa:f8:75:87:5a:ad:1f:4b:e4:a8:
7b:18:89:9c:e9:46:96:df:d5:66:c7:a0:f8:31:28:c3:68:ed:
2f:91:31:96:13:b0:29:0d:27:52:94:68:74:85:27:9b:74:4d:
12:71:db:8e:f1:23:fb:e9:40:36:35:98:9c:31:fc:6e:cb:b5:
be:77:ad:1f:77:8b:31:de:9c:33:67:4a:89:b3:2c:db:e5:6d:
f4:24:2f:62:fd:8b:65:f3:5a:d0:a0:0c:8f:49:a4:97:a0:1a:
aa:cf:c0:9d:60:6e:59:d6:14:3a:5f:91:ab:b0:da:e8:27:ef:
80:2c:62:89:b5:eb:ba:ef:7e:e2:4a:72:61:80:a8:aa:66:3c:
40:0d:8f:ba:2a:c8:d5:a9:7e:4f:c7:14:ad:9f:2f:83:f8:d8:
58:1f:3d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:57:35 2025 by rpki-client