Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yrmeskobP9pr2KEuK7bFVnx8f0Y.roa
File: yrmeskobP9pr2KEuK7bFVnx8f0Y.roa (raw, json)
Hash identifier: kcsZvdURqR+o+2na8ryRnds5mKEkaXNh/wt1DCSq0m0=
Subject key identifier: CA:B9:9E:B2:4A:1B:3F:DA:6B:D8:A1:2E:2B:B6:C5:56:7C:7C:7F:46
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019300F9595B61D65707D8B4D8FA0B9AED53
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yrmeskobP9pr2KEuK7bFVnx8f0Y.roa
Signing time: Wed 06 Nov 2024 10:16:01 +0000
ROA not before: Wed 06 Nov 2024 10:16:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b200::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 06 Nov 2024 12:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:f9:59:5b:61:d6:57:07:d8:b4:d8:fa:0b:9a:ed:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 6 10:16:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cab99eb24a1b3fda6bd8a12e2bb6c5567c7c7f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2a:71:15:b2:b6:79:5d:ea:11:d9:01:fd:1d:
20:e3:d3:68:84:76:09:14:f3:78:18:61:86:82:e6:
36:d4:5d:e2:2f:3b:01:ba:21:5a:1c:38:0a:f4:7a:
91:05:f7:24:de:05:84:68:c4:13:03:bc:a5:e2:d8:
6e:bb:d6:1b:3e:15:da:74:f5:3e:1c:b1:16:04:b8:
18:2c:0d:99:57:9e:46:98:a4:38:80:7d:c8:13:eb:
f5:41:f4:17:da:e4:c2:8c:24:6b:25:39:98:cd:98:
fc:89:ff:2e:4c:29:60:0a:0e:0c:df:f9:8a:23:69:
a9:0a:86:22:2d:74:23:db:c5:55:70:db:cb:15:8b:
b2:46:39:72:99:3c:9d:94:7a:d4:22:24:14:4f:87:
65:7e:f9:5e:83:1f:98:f6:c6:64:69:a9:8e:17:05:
cb:6c:6b:0d:dd:ab:27:bb:40:7e:46:45:9b:a7:33:
c6:8f:f2:06:de:c3:7e:bb:d0:e4:1f:55:e2:36:05:
c5:ca:4e:17:f9:36:3c:20:97:6f:b9:0f:b9:88:4d:
2c:02:ce:be:df:50:2e:c2:4b:13:1f:22:0a:4c:54:
cb:24:11:42:72:f9:60:6b:5c:50:11:58:96:09:09:
8a:e0:5f:fc:0c:18:39:1f:09:ef:de:76:54:b6:dd:
e0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B9:9E:B2:4A:1B:3F:DA:6B:D8:A1:2E:2B:B6:C5:56:7C:7C:7F:46
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yrmeskobP9pr2KEuK7bFVnx8f0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:dfc0::/29
2a07:a300::/29
2a0e:5800::/29
2a0f:19c0::/29
2a0f:1ac0::/29
2a0f:e740::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:1200::/29
2a11:1880::/29
2a11:5c80::/29
2a11:8700::/29
2a11:89c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b200::/29
2a11:b740::/29
2a11:e580::/29
2a11:efc0::/29
2a11:f040::/29
2a12:ba00::/29
2a12:dc00::/29
2a13:200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
ab:15:b1:49:ad:da:79:3d:99:50:f5:2e:10:ca:20:d7:81:bb:
87:8d:4e:08:d1:02:35:53:6e:c7:f9:79:22:ef:a1:8d:31:28:
f6:cf:5d:70:1a:da:54:2b:6d:52:67:29:99:28:b1:0a:22:6c:
29:6c:05:8c:d4:04:27:bd:48:5a:e3:61:90:1d:b5:bc:2c:0b:
4e:a1:31:21:f5:ec:8f:0a:6d:ba:16:6f:49:7a:f5:ab:ec:c4:
cb:ef:7f:50:1c:bf:70:59:2b:fa:06:6e:20:78:bf:38:ec:9f:
31:ad:44:98:7d:6c:4e:e1:0a:0a:97:5c:af:19:5a:13:8f:5d:
2e:08:b2:fd:63:07:59:b4:a1:25:8b:40:b1:be:61:cb:42:f9:
70:49:52:7a:61:26:c4:6d:e7:37:f6:27:ad:af:86:6d:6a:1f:
17:9e:0b:43:66:20:0a:b4:97:04:7b:b5:f9:be:9a:41:ca:42:
a4:68:8e:1c:3a:f5:06:61:e6:aa:41:7f:b2:6f:90:0a:96:c0:
bc:fd:d3:e0:18:40:ae:0c:63:8f:d4:30:e5:31:40:ad:61:c3:
5d:ed:6c:34:63:2c:a2:29:6b:8d:e4:f1:67:ef:67:a3:d7:a9:
f1:ca:a0:db:e4:66:aa:77:56:7f:44:6f:3a:b5:93:23:89:4f:
66:38:b0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:07:50 2025 by rpki-client