Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vA81zUTqaRLI3AMMKDEd4iC8aiw.roa
File: vA81zUTqaRLI3AMMKDEd4iC8aiw.roa (raw, json)
Hash identifier: DluVJlPJzuiiD2pndC+eDed0Ju1gxpweFcFZFiWN600=
Subject key identifier: BC:0F:35:CD:44:EA:69:12:C8:DC:03:0C:28:31:1D:E2:20:BC:6A:2C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019126CBA07BFA197E8666B1226A14E1FFEE
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vA81zUTqaRLI3AMMKDEd4iC8aiw.roa
Signing time: Tue 06 Aug 2024 08:26:04 +0000
ROA not before: Tue 06 Aug 2024 08:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:3bc0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0e:f500::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:6d80::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:cc00::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:df40::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:e940::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a0f:fc00::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:5200::/29 maxlen: 29
2a11:8880::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a12:eb40::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2dc0::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 12 Aug 2024 08:12:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:26:cb:a0:7b:fa:19:7e:86:66:b1:22:6a:14:e1:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 6 08:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc0f35cd44ea6912c8dc030c28311de220bc6a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:69:54:fa:48:0e:58:8e:54:b3:d2:44:3a:
58:18:09:b2:7b:46:4b:34:7b:25:9a:82:be:6f:fe:
12:81:b8:39:36:a0:89:75:c0:39:99:52:77:c8:7f:
52:6c:fc:d9:11:c1:5b:80:28:95:dc:54:69:b4:29:
57:00:6b:fc:d7:f2:90:66:9a:30:28:10:db:87:3f:
08:30:4d:44:d4:85:03:88:77:ad:9b:c8:87:34:99:
1c:89:4e:d2:ed:2e:2a:b6:83:64:de:df:83:ce:f7:
fc:51:f5:ac:f0:6b:b2:64:9d:25:6c:f2:67:5b:93:
51:b4:68:70:d5:72:e3:26:16:9b:84:1d:be:9e:a6:
c6:f8:f3:a5:e7:e1:25:bb:7a:e6:cc:26:d0:a3:82:
34:0e:72:a6:66:c2:69:74:80:28:ab:b4:6f:d4:84:
88:c8:63:8a:36:b3:fb:e2:f5:e9:27:31:85:58:4e:
45:ff:1e:de:ce:27:89:ce:5d:7a:c3:6a:df:14:12:
a5:2a:ee:52:f5:e7:48:92:99:19:d8:e8:57:8c:94:
75:e3:c0:68:a2:f4:dc:be:84:ca:0d:37:41:fb:16:
c2:9b:39:ab:77:df:0c:8f:cb:41:57:d4:42:7d:07:
f3:c6:41:df:46:cb:5c:e2:f8:0a:0d:07:31:69:5e:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:35:CD:44:EA:69:12:C8:DC:03:0C:28:31:1D:E2:20:BC:6A:2C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vA81zUTqaRLI3AMMKDEd4iC8aiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:3bc0::/29
2a06:dfc0::/29
2a0d:a9c0::/29
2a0e:f500::/29
2a0f:17c0::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:6d80::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:cc00::/29
2a0f:de40::/29
2a0f:df40::/29
2a0f:e4c0::/29
2a0f:e5c0::/29
2a0f:e940::/29
2a0f:e9c0::/29
2a0f:fc00::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:5200::/29
2a11:8880::/29
2a12:d100::/29
2a12:eb40::/29
2a13:200::/29
2a13:2dc0::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
72:02:4f:bd:94:52:ef:3a:5d:7e:69:a0:8c:91:4c:3e:ec:e7:
6e:5b:a4:73:8c:59:67:79:0d:27:13:1a:ef:15:af:40:9c:9c:
ab:fa:75:14:5a:41:66:ae:f0:cc:4f:96:14:93:63:69:ca:9a:
7d:f6:10:cd:1e:87:b7:9b:4f:e2:e3:38:56:84:2e:b4:9d:ea:
dc:ed:78:a8:d2:18:b7:c5:c6:13:1d:e4:ba:7b:47:f8:cf:13:
81:b1:46:64:65:aa:94:e9:55:09:e5:38:11:80:6a:96:1b:cf:
e1:53:c1:a8:be:13:5f:d2:34:8b:20:b0:53:bf:c0:0f:4d:46:
5a:35:e4:e1:eb:e0:8a:95:66:5d:8c:08:d4:e9:95:25:ce:c9:
32:96:39:58:3e:39:20:cc:92:17:85:38:76:32:47:ee:a0:e8:
62:1d:23:1f:16:ac:4d:75:d9:3b:34:a3:28:be:e7:fd:8f:2d:
b0:11:b8:98:e3:06:8f:f6:1c:31:96:f6:73:bd:89:31:0e:72:
9e:14:1e:6c:68:f1:e3:6e:5e:8d:d7:2f:24:09:09:b5:9b:81:
99:47:b5:9b:1a:40:d9:93:82:14:d9:62:3b:8b:8d:23:ee:55:
4b:c8:9e:ef:f0:fd:04:f7:a0:3a:0d:55:2f:ab:54:22:7a:17:
a7:5f:9c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:00:48 2025 by rpki-client