Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xj92Ndk9PxbKqlkMqwiaqsRwbiU.roa
File: xj92Ndk9PxbKqlkMqwiaqsRwbiU.roa (raw, json)
Hash identifier: WoZPcH1+LEbyLQJ6bi4eAV2DEGAfgIB+AG0k/U4NSvI=
Subject key identifier: C6:3F:76:35:D9:3D:3F:16:CA:AA:59:0C:AB:08:9A:AA:C4:70:6E:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F9A57ECF0165D88ABADB5C2D0DE24F6C5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xj92Ndk9PxbKqlkMqwiaqsRwbiU.roa
Signing time: Tue 21 May 2024 08:50:04 +0000
ROA not before: Tue 21 May 2024 08:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152598
IP address blocks: 2a0e:15c0:6::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 08 Aug 2024 06:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:57:ec:f0:16:5d:88:ab:ad:b5:c2:d0:de:24:f6:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 21 08:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c63f7635d93d3f16caaa590cab089aaac4706e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:77:0f:5d:c7:be:e9:d5:52:0b:54:26:91:
01:ba:67:69:d8:1c:52:5e:ec:7f:54:11:bc:62:5d:
bb:c5:90:20:95:1e:20:0e:8d:45:14:cf:85:52:55:
08:9e:10:23:e5:59:05:72:75:92:59:c0:64:ce:72:
ab:23:ba:c2:f1:79:71:dc:77:3c:47:3e:8c:31:50:
a6:4a:61:67:45:38:59:e3:89:61:84:06:1a:81:6c:
03:2b:ea:ee:ab:15:a4:b0:61:84:57:65:34:55:bd:
e5:c8:10:6c:47:0a:3a:a6:85:44:85:cb:c2:11:ae:
13:15:fc:8d:bf:07:2a:fc:36:8c:e6:36:49:ca:7a:
20:1c:dd:e7:c0:bf:bc:d0:e7:c9:b1:46:60:e9:39:
86:69:8b:e6:3c:14:96:dc:2d:2d:79:f0:c1:8f:2d:
63:e8:96:18:ef:2b:99:1b:4e:71:24:1d:97:e5:04:
83:eb:93:9a:0a:3b:d7:7c:17:79:60:f5:f6:59:af:
f6:31:de:4d:89:2f:99:fd:ff:7a:a8:29:44:c5:47:
c8:c2:56:b8:13:95:f3:c6:70:ff:8a:97:07:2c:1f:
bf:10:b1:d8:38:6b:8f:28:97:12:dc:03:a0:9d:ae:
af:85:ac:10:b8:1a:47:04:76:e8:c5:db:83:5f:54:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:3F:76:35:D9:3D:3F:16:CA:AA:59:0C:AB:08:9A:AA:C4:70:6E:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xj92Ndk9PxbKqlkMqwiaqsRwbiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:15c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
b7:e7:55:d7:f2:54:0f:03:f5:3c:e8:ed:86:16:cc:d6:26:b9:
a9:43:c9:4e:20:f6:c6:f9:8d:40:fb:22:19:ed:15:4a:d9:8e:
a2:59:71:f2:60:fa:97:d3:54:3c:d0:7e:b2:75:31:89:a9:45:
1d:a2:0a:dc:bd:d7:e1:3f:a5:0d:b8:dd:8f:5a:45:61:fe:ea:
9c:9c:ee:90:31:91:9e:cf:66:a5:f0:64:9c:6c:a0:93:72:91:
b4:4e:50:f0:23:4a:33:0e:d4:e4:7b:72:26:fd:31:5b:e2:43:
39:b7:b2:4b:99:26:bf:7f:eb:7f:d8:be:fe:ce:3d:c5:5c:a2:
ae:11:e3:fe:ba:11:ae:bd:c4:4b:09:24:fd:61:27:37:de:7e:
49:c4:cd:6c:2a:a6:a3:cf:b9:6e:dc:5e:fe:38:67:f1:cf:c8:
0d:f7:26:a4:c8:c4:5a:33:33:3e:bd:1e:a7:da:c3:95:75:bb:
38:fc:46:d2:23:8e:f3:ee:89:f2:11:18:90:58:f1:f1:d1:cb:
13:7b:7f:5e:1f:55:5d:bb:2a:5d:23:80:c7:b1:2a:3b:db:8b:
4a:a3:0b:8b:34:e0:ee:8a:52:2e:66:e2:b3:87:0b:f6:6a:22:
09:6d:84:0b:7a:83:e4:5f:d5:75:80:8e:f2:d8:39:15:24:db:
eb:66:a8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:53 2025 by rpki-client