Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xDPhwCxeOZk3TY5hpR7fjGb8kHM.roa
File: xDPhwCxeOZk3TY5hpR7fjGb8kHM.roa (raw, json)
Hash identifier: 3br2nIGwzTpKYkDv/TsgWdCKqogsMBqraZObAP8X6PM=
Subject key identifier: C4:33:E1:C0:2C:5E:39:99:37:4D:8E:61:A5:1E:DF:8C:66:FC:90:73
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191C33AE5EC1F46514272876B984BE221F1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xDPhwCxeOZk3TY5hpR7fjGb8kHM.roa
Signing time: Thu 05 Sep 2024 17:28:22 +0000
ROA not before: Thu 05 Sep 2024 17:28:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 2a06:1184:100::/48 maxlen: 48
2a06:1184:101::/48 maxlen: 48
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e202:55::/48 maxlen: 48
2a0f:e202:100::/48 maxlen: 48
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e7c6:88::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:e844:33::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
2a12:ac46:77::/48 maxlen: 48
2a12:ecc0:168::/48 maxlen: 48
2a12:ecc0:178::/48 maxlen: 48
2a13:18c6:55::/48 maxlen: 48
2a13:18c6:77::/48 maxlen: 48
2a13:18c6:88::/48 maxlen: 48
2a13:8c86:10a::/48 maxlen: 48
2a13:8c86:120::/48 maxlen: 48
2a13:8c86:130::/48 maxlen: 48
2a13:c900:88::/48 maxlen: 48
2a13:c900:99::/48 maxlen: 48
2a13:e107:99::/48 maxlen: 48
2a13:e107:9c::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Oct 2024 19:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c3:3a:e5:ec:1f:46:51:42:72:87:6b:98:4b:e2:21:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 5 17:28:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c433e1c02c5e3999374d8e61a51edf8c66fc9073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a4:a3:d4:1f:66:ac:fe:1f:61:a4:6a:52:36:
ec:79:1f:41:84:d0:a3:93:fb:ed:6e:4c:ef:be:78:
e7:ef:42:28:d6:d3:5e:4f:6a:23:52:b6:1a:24:3e:
cf:bf:07:45:61:58:c3:85:ac:57:60:74:ed:64:0c:
9a:ea:f3:6f:72:bf:57:7c:5c:b7:10:4f:1e:99:d1:
2e:ad:5e:b0:bf:b7:7f:61:2e:63:01:1a:77:7d:b6:
22:32:cc:fc:9a:92:09:76:5f:2c:87:f7:fd:93:7d:
0c:54:54:e8:59:f1:88:e8:8c:3e:8f:34:bf:dc:ba:
41:cb:da:ed:0e:c5:75:39:36:e5:c7:f5:8f:4a:9a:
49:91:44:30:01:64:eb:35:dc:ec:bc:81:59:5d:e6:
8d:8e:d0:4b:82:72:5b:e8:86:6b:a0:cc:fa:a8:eb:
3e:bd:9d:c8:dc:e6:e0:05:7f:23:51:be:c8:21:28:
5a:23:79:61:31:3f:e6:b9:c7:f0:cf:eb:96:fe:54:
9f:3c:22:be:62:c5:5b:2b:6e:8d:6f:c8:71:b7:f1:
8d:99:78:f4:90:42:75:11:0e:44:2e:c2:0d:c0:e4:
30:ea:76:5c:97:4e:c6:5c:54:2d:0b:7f:c4:d6:d0:
96:5a:b7:c0:91:ba:11:9d:08:5f:69:54:d8:a3:5f:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:33:E1:C0:2C:5E:39:99:37:4D:8E:61:A5:1E:DF:8C:66:FC:90:73
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xDPhwCxeOZk3TY5hpR7fjGb8kHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1184:100::/47
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e202:55::/48
2a0f:e202:100::/48
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e7c6:88::/48
2a0f:e844:22::/48
2a0f:e844:33::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
2a12:ac46:77::/48
2a12:ecc0:168::/48
2a12:ecc0:178::/48
2a13:18c6:55::/48
2a13:18c6:77::/48
2a13:18c6:88::/48
2a13:8c86:10a::/48
2a13:8c86:120::/48
2a13:8c86:130::/48
2a13:c900:88::/48
2a13:c900:99::/48
2a13:e107:99::/48
2a13:e107:9c::/48
Signature Algorithm: sha256WithRSAEncryption
bc:93:d5:7e:6d:c4:d0:19:b0:07:3a:ae:84:c0:13:1c:de:c3:
03:5d:0a:a6:a0:ed:2d:5c:87:92:4a:21:fb:a8:f7:a1:07:97:
40:dc:a8:4b:87:e3:37:1b:b7:b9:a4:52:d4:78:0b:55:01:a6:
b6:2b:48:7d:db:6a:70:40:92:b6:68:16:87:e2:3c:b2:d0:8e:
cd:f3:79:93:c3:a6:33:d2:4c:16:bb:d2:71:98:f4:93:ae:a4:
41:96:7e:43:a2:da:65:97:27:11:ea:27:c3:de:a0:48:2f:60:
09:c4:77:0c:68:a9:e5:4c:99:70:4c:d9:53:11:6e:a3:4a:2c:
3b:db:a8:7f:83:0f:ed:ab:1c:52:c8:a2:d2:a4:6d:ef:66:a3:
dd:58:39:37:bb:47:d2:3a:c6:2f:6a:8a:ff:4f:23:9f:f5:e1:
f5:77:0d:05:78:f4:dc:5e:95:07:20:b6:5d:fb:a2:84:a0:6a:
85:11:1a:c4:1c:1e:f1:3f:8c:b1:46:18:a1:f6:b1:3f:19:fb:
5a:9a:41:46:05:97:28:9a:7a:5e:e3:e4:db:1a:12:3e:72:e0:
e6:1a:a6:86:59:1f:7c:67:25:46:ce:58:b4:9b:eb:73:2c:87:
68:92:11:e1:ae:a0:61:27:49:5b:c4:ca:aa:31:e4:0b:90:3c:
ab:ae:d9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:51 2025 by rpki-client