Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z3MFdFjPnio00R4alD24Ee3R1G0.roa
File: z3MFdFjPnio00R4alD24Ee3R1G0.roa (raw, json)
Hash identifier: wvIuTCQOuEE6i+pT3KdHxEs5ob97+DtJ3JYy8VeT7nU=
Subject key identifier: CF:73:05:74:58:CF:9E:2A:34:D1:1E:1A:94:3D:B8:11:ED:D1:D4:6D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191B33640982EA332F51609AB8824600A5A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z3MFdFjPnio00R4alD24Ee3R1G0.roa
Signing time: Mon 02 Sep 2024 14:49:22 +0000
ROA not before: Mon 02 Sep 2024 14:49:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21738
IP address blocks: 2a10:36c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Sep 2024 18:10:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:36:40:98:2e:a3:32:f5:16:09:ab:88:24:60:0a:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 2 14:49:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf73057458cf9e2a34d11e1a943db811edd1d46d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:0a:75:54:7d:be:ab:58:69:52:f0:c8:3d:77:
8f:c4:4d:68:95:67:44:82:d4:86:1e:1c:9d:dd:f5:
e6:f7:a7:9d:72:93:8d:67:a0:3b:e6:49:8d:82:c2:
49:12:d5:12:fe:a7:60:fb:36:01:a1:26:20:ed:95:
c8:57:73:aa:5c:1e:5d:00:41:1b:9c:4e:e3:4a:08:
36:74:43:a1:87:aa:0a:83:86:e4:73:5b:22:6e:4b:
21:78:af:56:1a:4e:c1:32:82:67:b8:13:2f:73:65:
1a:98:14:44:1e:2d:16:70:e0:1f:d9:89:f1:96:99:
0f:0a:c4:31:9b:41:4d:4a:0e:e6:0a:a7:9a:4d:11:
07:37:c5:26:d6:50:44:97:f5:75:f2:a6:98:d0:69:
fe:56:01:25:38:0c:c1:56:93:6b:d0:4e:c5:bc:20:
d4:54:16:a8:be:37:7e:a4:24:a5:cc:5c:69:79:17:
d9:a3:06:eb:2b:a6:d4:ee:bd:de:56:bf:bf:56:c9:
f2:69:d2:d4:89:a1:9a:8b:83:97:9f:3a:47:7a:11:
83:d4:43:b0:f8:8f:79:b0:aa:26:1a:98:f7:6d:1a:
aa:7f:24:ec:8a:26:28:bb:06:22:6d:90:0e:48:69:
47:bf:44:92:d8:04:89:87:e4:0a:a9:69:b0:6c:eb:
f9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:73:05:74:58:CF:9E:2A:34:D1:1E:1A:94:3D:B8:11:ED:D1:D4:6D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/z3MFdFjPnio00R4alD24Ee3R1G0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:36c0::/29
Signature Algorithm: sha256WithRSAEncryption
c7:f0:a2:1b:32:1a:05:27:45:b4:99:94:14:9b:18:ec:29:12:
4c:01:a1:29:22:cd:ea:d8:1b:08:b0:86:7d:89:97:f1:58:bd:
b9:fa:1c:68:91:77:3d:7e:72:34:51:b8:b8:80:77:5b:7e:b9:
71:aa:23:da:d7:8a:79:c8:46:61:f1:e5:6f:c7:62:58:59:4a:
56:90:9e:79:a7:79:a7:cb:78:c4:cc:3b:11:42:83:b4:a7:08:
91:79:2f:3f:97:de:2b:2a:a6:a7:04:a8:dd:b4:96:74:c2:e5:
0f:73:89:eb:ba:95:90:c6:4f:c0:97:7d:f2:b5:9d:97:e5:43:
14:c4:58:a8:15:4b:31:a9:3a:2f:f7:16:e8:fc:3d:6b:be:d9:
b6:11:8c:e8:71:43:62:29:f5:ec:84:c3:6a:2f:71:87:76:03:
c1:5d:40:a4:e7:cc:c4:75:b3:64:f9:40:ba:f8:0d:8a:5f:6d:
5d:a8:31:7d:2d:3f:8f:55:84:52:82:ba:82:62:77:ad:64:3f:
8f:ac:32:98:5a:28:c1:90:c9:61:1c:48:84:33:fe:a6:59:b7:
f5:ce:23:2e:09:1d:b9:8d:48:e9:53:e1:00:82:98:e3:bf:00:
cf:42:a7:16:b7:6a:f3:13:20:8b:70:db:34:4a:d7:2a:6e:dd:
06:00:31:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:50 2025 by rpki-client