Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xaxYyp8yJ00mSgWYRjy9BdZE_1g.roa
File: xaxYyp8yJ00mSgWYRjy9BdZE_1g.roa (raw, json)
Hash identifier: x8IzOYcXMIzSpk8xDE/GopVxtF2nxgSt3qcfCoIa5yQ=
Subject key identifier: C5:AC:58:CA:9F:32:27:4D:26:4A:05:98:46:3C:BD:05:D6:44:FF:58
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019006F6C7BEA6F32BA3151B0F1A48237051
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xaxYyp8yJ00mSgWYRjy9BdZE_1g.roa
Signing time: Tue 11 Jun 2024 11:02:34 +0000
ROA not before: Tue 11 Jun 2024 11:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 40676
IP address blocks: 2a13:18c4::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 08 Jul 2024 08:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:06:f6:c7:be:a6:f3:2b:a3:15:1b:0f:1a:48:23:70:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 11 11:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5ac58ca9f32274d264a0598463cbd05d644ff58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:38:76:50:d2:af:32:89:d6:63:29:a5:48:80:
6d:a4:f9:f3:44:bf:58:fd:12:47:b2:6b:90:42:32:
ff:d5:9d:01:8b:fc:3a:9d:23:78:4f:f9:c5:e2:ca:
e3:62:e3:ca:02:fe:67:02:f5:18:33:5d:5a:52:e2:
19:fa:5b:1b:4e:a4:83:1d:d8:fa:e2:08:8c:05:a8:
ae:66:bc:1b:b3:f5:6d:d5:c3:3a:b1:d5:1a:48:06:
59:47:ca:ed:39:63:9e:79:ba:57:f1:9c:84:2e:73:
84:d7:3a:0f:fc:86:01:65:44:29:56:05:aa:e1:39:
0b:f6:d9:67:02:84:6d:c2:a7:6f:d3:b4:a0:ca:e9:
99:31:dd:27:15:73:d9:4f:bc:dd:b2:31:8c:cf:f7:
77:82:24:fc:a4:dd:3a:3f:cc:8d:cf:2c:30:00:95:
92:c9:61:c5:93:43:ca:02:41:fd:cd:b9:73:b8:a9:
3a:b3:a7:76:c3:b8:64:9c:8a:5f:6d:77:bf:76:40:
fe:1c:a2:69:bb:8e:16:e0:1b:fe:ec:a4:53:fc:36:
aa:7d:0b:ce:52:5c:e1:f0:ad:3d:c9:9e:c6:47:a6:
8d:3c:92:6a:83:46:9c:27:0e:5b:21:a0:4a:3b:2d:
32:87:29:7d:ea:ae:18:7f:28:9b:3b:25:46:2d:36:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AC:58:CA:9F:32:27:4D:26:4A:05:98:46:3C:BD:05:D6:44:FF:58
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xaxYyp8yJ00mSgWYRjy9BdZE_1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:18c4::/32
Signature Algorithm: sha256WithRSAEncryption
26:90:94:eb:09:4a:33:44:78:81:ad:1b:f8:fd:a7:a8:2d:b9:
12:10:50:09:96:94:f2:36:b9:45:ce:d3:bc:e8:09:b3:59:c2:
48:db:4c:87:15:9a:d5:77:10:05:ec:66:2c:e1:c8:fe:2d:d6:
1b:98:d3:3a:76:55:6b:59:f8:8e:ad:17:2d:96:86:39:0a:09:
5c:06:37:d2:11:d9:ec:7d:73:38:bb:b5:fc:ea:fe:9f:60:ce:
8a:c2:57:f2:a0:a4:26:1d:39:56:64:a0:ae:96:af:12:bc:6f:
d8:b4:4f:a9:86:ab:d8:be:04:d1:ad:22:19:db:80:b5:27:e8:
40:e7:eb:dd:df:4a:7e:dd:cd:fd:9f:7d:d5:ad:34:1e:3a:cd:
15:20:c3:ca:59:b2:61:a2:29:ee:ef:64:14:a9:55:42:12:1e:
d0:63:11:59:8b:09:f5:cc:04:df:01:24:5e:bc:32:18:2d:59:
22:02:1f:de:03:d7:07:29:b7:99:1d:07:78:8a:2b:63:f5:c8:
88:05:77:4b:55:08:0e:13:2b:1b:d8:aa:a9:e0:43:ec:5a:17:
da:2a:17:b0:eb:57:7b:29:02:f0:1a:0b:a8:8e:f6:8d:03:6b:
c7:ab:94:95:8e:25:32:dc:15:29:da:34:18:ce:b2:53:66:4e:
31:1b:c7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:04:18 2025 by rpki-client