Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vUkFrzOvug8a_zzvIgmDhD6lY88.roa
File: vUkFrzOvug8a_zzvIgmDhD6lY88.roa (raw, json)
Hash identifier: eLx+CCBzQs1lsT4X/5ng0lC+GQyXDlbIQsA0uU/Fpbs=
Subject key identifier: BD:49:05:AF:33:AF:BA:0F:1A:FF:3C:EF:22:09:83:84:3E:A5:63:CF
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D92C3B40702655B1C352A09B23D1BA9F3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vUkFrzOvug8a_zzvIgmDhD6lY88.roa
Signing time: Sat 10 Feb 2024 11:25:15 +0000
ROA not before: Sat 10 Feb 2024 11:25:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a06:35c0::/30 maxlen: 30
2a06:35c4::/30 maxlen: 30
2a13:2d40::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
2a13:2d47::/32 maxlen: 32
2a13:2dc0::/32 maxlen: 32
2a13:2dc1::/32 maxlen: 32
2a13:2dc2::/32 maxlen: 32
2a13:2dc3::/32 maxlen: 32
2a13:2dc4::/32 maxlen: 32
2a13:2dc5::/32 maxlen: 32
2a13:2dc6::/32 maxlen: 32
2a13:2dc7::/32 maxlen: 32
2a13:2f40::/29 maxlen: 29
2a13:9180::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
2a13:c900::/32 maxlen: 32
2a13:c901::/32 maxlen: 32
2a13:c902::/32 maxlen: 32
2a13:c903::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
2a13:c906::/32 maxlen: 32
2a13:c907::/32 maxlen: 32
2a13:d100::/29 maxlen: 29
2a13:d700::/32 maxlen: 32
2a13:d701::/32 maxlen: 32
2a13:d702::/32 maxlen: 32
2a13:d703::/32 maxlen: 32
2a13:d704::/32 maxlen: 32
2a13:d705::/32 maxlen: 32
2a13:d706::/32 maxlen: 32
2a13:d707::/32 maxlen: 32
2a13:d900::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:d902::/32 maxlen: 32
2a13:d903::/32 maxlen: 32
2a13:d904::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:fb00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 19 Feb 2024 07:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:c3:b4:07:02:65:5b:1c:35:2a:09:b2:3d:1b:a9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 10 11:25:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd4905af33afba0f1aff3cef220983843ea563cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cd:d6:af:57:bf:16:f9:7c:13:6a:4e:ac:b3:
5c:78:fe:d6:28:a9:4e:ae:c6:0c:31:82:3c:62:55:
f4:24:5c:a0:67:08:ab:02:6c:5f:87:71:5b:bb:41:
04:68:b8:10:ef:5e:63:0a:05:99:f9:e9:62:e6:5e:
29:39:8d:31:5d:b5:e7:0e:e2:11:33:d2:40:c2:3b:
9d:d5:c7:19:b3:55:ae:8c:e2:6f:5f:c4:ba:88:5f:
a8:53:4a:c1:0e:8b:5f:4b:20:97:4d:ac:0b:31:91:
d7:fd:79:fe:32:85:87:4b:e0:90:ff:bd:52:fc:d9:
18:4c:91:09:f6:a4:1b:3a:af:b6:6a:22:d3:91:c3:
63:2e:17:e0:0e:ed:0d:50:e8:19:d4:b5:94:02:f3:
79:ac:7e:a6:03:08:70:aa:13:a4:4f:5d:3f:ce:13:
6c:58:4b:ee:90:ec:1a:f0:04:8b:08:e8:91:77:5b:
53:ce:8d:7f:69:d9:95:16:bf:24:c6:7a:65:b3:91:
aa:eb:28:c9:ec:2a:e6:ea:c0:59:9a:41:59:6d:9c:
a2:0c:22:4f:a6:22:d9:fe:3d:33:62:6f:f6:e2:50:
d5:26:66:0e:43:16:6f:f2:d2:d3:6c:48:1e:5f:78:
1e:ca:6a:85:d3:97:70:b4:bd:a8:0e:ff:bd:cf:be:
12:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:49:05:AF:33:AF:BA:0F:1A:FF:3C:EF:22:09:83:84:3E:A5:63:CF
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/vUkFrzOvug8a_zzvIgmDhD6lY88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:2f40::/29
2a13:9180::/29
2a13:9680::/29
2a13:c700::/29
2a13:c900::/29
2a13:d100::/29
2a13:d700::/29
2a13:d900::/29
2a13:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
8c:93:d0:42:bf:6e:a2:2f:c5:f9:74:27:e3:0c:f1:41:c3:50:
66:d1:72:35:85:e4:cf:3a:ee:48:e0:b4:2e:6e:15:1e:bb:84:
6c:74:3c:f9:7c:8f:3d:83:9a:51:8e:20:f5:af:19:0f:32:7e:
83:98:fd:f9:e9:e5:bd:56:c8:22:c7:88:7a:e0:fc:a5:27:b6:
99:6e:3c:25:3a:39:b9:45:d9:5f:9b:37:03:55:2d:95:50:ae:
56:1b:61:d7:98:c0:53:d0:71:a1:41:8c:8b:55:a2:f4:40:75:
e7:6e:27:a4:90:43:c4:a2:29:b0:70:6c:10:96:ce:d8:bf:b7:
a5:da:b1:7a:80:e5:03:bf:94:de:7c:e4:1f:8e:8b:4b:5e:d1:
dd:05:4e:c4:56:f3:f4:2a:d2:90:46:9f:e2:e7:34:80:52:ef:
5d:3d:70:85:e5:93:1b:de:35:86:67:55:ba:f0:c8:d0:f7:2b:
b1:a5:b4:19:45:8f:71:90:0d:97:1c:77:56:d9:1c:b7:12:aa:
ce:24:3c:fb:a1:0a:5b:5f:33:22:72:33:1f:4c:3c:21:29:1a:
c1:7b:06:67:e7:66:c6:d5:0d:2f:a3:0d:b9:62:92:37:bc:13:
85:bb:8f:30:cd:e6:8b:9e:6d:93:4c:45:fa:20:e9:44:1c:d9:
70:ae:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 03:33:24 2025 by rpki-client