Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yrFEJwrHVcIg95Bo7HIFOjPtQ2o.roa
File: yrFEJwrHVcIg95Bo7HIFOjPtQ2o.roa (raw, json)
Hash identifier: Ebh0GVLGEMYxKwEsieiaS5ec1eZ390UWNplNsl4JIwg=
Subject key identifier: CA:B1:44:27:0A:C7:55:C2:20:F7:90:68:EC:72:05:3A:33:ED:43:6A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DF4376861DF6E29BAD34BF88EAC5B29E4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yrFEJwrHVcIg95Bo7HIFOjPtQ2o.roa
Signing time: Thu 29 Feb 2024 09:34:48 +0000
ROA not before: Thu 29 Feb 2024 09:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23470
IP address blocks: 2a0f:e847:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Apr 2024 13:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f4:37:68:61:df:6e:29:ba:d3:4b:f8:8e:ac:5b:29:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 29 09:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cab144270ac755c220f79068ec72053a33ed436a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:8e:c1:06:0f:de:07:82:80:61:1b:99:f5:
dd:b6:a5:62:cd:b6:16:86:bd:27:ed:f3:d7:8e:1d:
1e:9d:ac:05:04:af:bb:4f:56:0a:ee:d4:ee:1c:81:
a6:3d:c8:1a:43:42:a1:c6:cc:a0:37:b4:a8:aa:c3:
25:2e:58:40:b4:73:7e:0a:70:62:a9:10:af:eb:26:
09:00:8f:9a:d2:b8:fd:3a:6e:be:99:5a:e4:73:d5:
42:15:dd:e8:33:0a:41:c0:fd:8a:fa:4b:b3:5f:61:
2f:89:db:e8:f2:35:42:fa:0c:e5:d2:d6:7c:ff:12:
5a:47:cf:f4:2c:81:9d:92:a6:6e:bc:69:31:90:ae:
e7:8b:69:1b:a3:ad:56:02:f3:bb:bc:17:cb:39:98:
92:87:fe:69:d2:33:4c:02:69:b4:ff:69:4a:1f:70:
a7:df:cc:4b:d4:55:20:47:c5:25:cb:00:00:2a:c3:
e2:cf:71:5e:2d:4b:95:62:f4:dd:9d:e6:de:51:1d:
69:bd:a3:06:db:df:b9:ac:1b:5b:44:c4:13:31:1d:
32:73:1b:d9:4b:c0:94:13:f9:e1:ad:59:c7:b0:bd:
d4:4f:19:3b:5f:36:5b:f7:9e:ad:a5:f5:d8:ea:10:
a0:ed:d9:44:66:be:00:1e:82:12:98:04:7b:38:da:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B1:44:27:0A:C7:55:C2:20:F7:90:68:EC:72:05:3A:33:ED:43:6A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yrFEJwrHVcIg95Bo7HIFOjPtQ2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e847:1::/48
Signature Algorithm: sha256WithRSAEncryption
89:69:17:95:5b:07:03:62:09:94:2d:2c:11:d7:7b:21:f8:dd:
b1:4a:26:29:5e:15:86:97:51:d1:c1:16:85:23:07:6a:ae:bd:
4a:66:df:57:6d:8b:5c:c2:bc:ab:6e:0e:4d:40:3f:b6:b0:d0:
7a:b3:6f:30:2b:d7:9b:87:ce:d0:1a:a4:f0:92:f9:d8:50:34:
f4:81:b5:67:86:86:f8:e5:a3:42:dc:d8:c3:47:b7:04:7e:63:
c9:57:7a:ea:03:71:c1:f7:05:64:a6:92:d8:cb:a7:76:6a:a2:
9c:ca:ca:8a:72:b6:10:d6:ce:81:94:d0:b6:25:73:10:54:12:
81:c5:14:24:f3:39:57:60:cc:97:ca:74:46:7a:e1:d9:e1:45:
5a:a7:5b:3e:c0:0f:75:f3:6e:7a:74:59:3e:4f:b5:b4:66:b7:
f0:07:5c:7b:90:d6:19:d5:88:21:16:0a:70:0e:a8:e5:b4:f6:
0f:2a:22:11:e5:24:c2:aa:68:0f:ad:c4:51:f9:d7:79:36:28:
65:db:bd:e5:28:58:0b:f6:41:13:cb:e6:12:e5:7b:83:94:4a:
54:fd:ef:20:07:9d:d2:3c:ad:d2:14:8a:a3:a1:29:84:a4:4b:
4e:95:08:c8:de:c2:ad:6e:78:82:55:36:c3:0c:0a:39:f7:2c:
6f:42:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:14 2025 by rpki-client