Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/x_uEoUppzywbll9VPSt8sIXV1Lk.roa
File: x_uEoUppzywbll9VPSt8sIXV1Lk.roa (raw, json)
Hash identifier: LHfWR9B3ES0VYEqBJkR1FBXKMVeOebRIX+I7OvscH/g=
Subject key identifier: C7:FB:84:A1:4A:69:CF:2C:1B:96:5F:55:3D:2B:7C:B0:85:D5:D4:B9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274825EE23BC3B4720CF0F69FAFFF62B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/x_uEoUppzywbll9VPSt8sIXV1Lk.roa
Signing time: Thu 02 Jan 2025 13:50:27 +0000
ROA not before: Thu 02 Jan 2025 13:50:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 2a0f:bc01::/32 maxlen: 32
2a0f:bc02::/32 maxlen: 32
2a0f:bc03::/32 maxlen: 32
2a0f:bc04::/32 maxlen: 32
2a0f:bc05::/32 maxlen: 32
2a0f:bc06::/32 maxlen: 32
2a0f:bc07::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 24 Jan 2025 15:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:25:ee:23:bc:3b:47:20:cf:0f:69:fa:ff:f6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c7fb84a14a69cf2c1b965f553d2b7cb085d5d4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4b:ef:c3:69:96:eb:c0:a0:c7:b1:bb:97:f0:
f0:93:fe:dd:fa:1a:ec:87:e1:eb:d4:c1:19:80:2e:
5c:fe:04:27:46:96:cf:4b:22:c0:fc:81:b7:cc:c3:
9f:77:8e:87:b9:82:44:3d:1b:84:ea:9d:d7:e8:63:
6d:5b:01:ff:a4:8c:65:ac:78:d5:16:91:be:32:bb:
c6:48:7d:94:4c:28:bd:8c:e8:a1:52:88:82:d6:16:
37:e9:25:e0:0c:3e:ee:ea:13:ce:ae:3a:01:28:d1:
9c:b4:57:89:35:1e:94:9d:01:ea:49:64:94:31:63:
fa:a5:4c:0f:6c:5a:36:f3:57:88:2e:63:bb:d9:8d:
ed:6c:8e:9c:d0:37:2b:33:63:88:3c:c9:ff:b4:2a:
55:08:83:1d:d9:0c:ab:30:b6:2c:a0:7c:9f:1d:b3:
b4:1e:67:8c:59:87:26:88:67:58:79:ac:f0:f4:3e:
20:38:64:f7:6c:43:cf:de:ff:83:bd:58:05:75:c6:
7d:5a:ba:20:18:69:2e:f1:e5:7b:d9:09:f7:64:97:
99:3d:11:43:40:4c:e8:8a:ca:04:c3:7d:3d:b1:35:
d3:ef:a3:36:88:01:ca:34:db:61:e3:bf:ce:54:1d:
a1:33:af:35:cf:5e:6b:28:9e:4d:df:34:ee:2e:37:
92:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FB:84:A1:4A:69:CF:2C:1B:96:5F:55:3D:2B:7C:B0:85:D5:D4:B9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/x_uEoUppzywbll9VPSt8sIXV1Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:bc01::-2a0f:bc07:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b9:56:2a:ce:f3:6f:16:55:b9:9e:18:94:dd:fe:f9:c7:b7:b9:
e4:b6:e1:97:43:53:af:97:b8:9f:b4:82:98:c3:f9:0b:42:53:
83:0b:a2:29:be:12:19:9c:fb:43:de:33:69:e3:49:9e:6f:11:
77:85:d5:03:63:fe:c5:24:4f:52:55:d1:05:48:12:0c:4e:d1:
fa:81:d1:75:be:22:e2:1c:74:c4:af:ec:12:98:7e:ca:bd:75:
f0:57:bb:52:80:b9:36:3e:90:26:3d:04:97:62:9b:80:a7:d7:
a1:fe:b7:eb:ab:b0:db:a2:67:cd:11:21:be:c1:05:e8:b1:1a:
e7:f8:28:b6:1b:d3:fe:0c:07:96:ee:d9:2d:56:13:0c:71:57:
55:7a:84:df:ca:43:16:3b:36:9e:fd:1a:d7:f6:67:25:8d:61:
99:65:bf:51:2a:45:6b:70:e1:98:f2:46:96:d7:59:89:d7:dd:
6f:cc:db:f5:7e:bc:d2:9e:fb:8b:92:41:23:95:49:35:4a:2f:
3a:9a:fa:a4:09:76:8c:eb:b4:9f:70:fc:33:dc:e5:28:91:cb:
82:a5:6d:b1:62:b4:03:6d:bb:52:48:3e:5a:8f:f3:98:d3:48:
c8:fd:74:02:63:55:19:e8:51:63:71:3e:24:3c:59:e7:58:ac:
1e:df:32:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:23:27 2025 by rpki-client