Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7aDqJA-9Vbz_mn9nLetZA5d824s.roa
File: 7aDqJA-9Vbz_mn9nLetZA5d824s.roa (raw, json)
Hash identifier: Bge2CgNkgBJbmHg6FdO29y5L+NP4IhQvqt2fNCzrTl0=
Subject key identifier: ED:A0:EA:24:0F:BD:55:BC:FF:9A:7F:67:2D:EB:59:03:97:7C:DB:8B
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018FCCD95B304E6172798FBCDF91DBC25855
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7aDqJA-9Vbz_mn9nLetZA5d824s.roa
Signing time: Fri 31 May 2024 04:12:27 +0000
ROA not before: Fri 31 May 2024 04:12:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 2a10:4100::/32 maxlen: 32
2a10:4102::/32 maxlen: 32
2a10:4102::/36 maxlen: 36
2a12:a345::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 01 Jun 2024 04:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cc:d9:5b:30:4e:61:72:79:8f:bc:df:91:db:c2:58:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: May 31 04:12:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eda0ea240fbd55bcff9a7f672deb5903977cdb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:35:a7:28:87:83:f6:98:a5:9b:76:cb:b3:37:
2e:1b:10:50:a2:a3:67:e7:b5:6a:b6:d6:a1:70:b2:
e7:60:46:c3:d7:95:a8:fe:aa:9c:c5:86:37:40:41:
59:50:6e:ab:65:6b:62:ef:7c:8b:35:98:03:20:03:
12:95:e7:3c:2d:1b:7d:7f:38:f1:9a:9d:ca:64:41:
0d:5a:4c:90:ec:91:fd:e5:8f:c7:10:57:a1:c6:af:
06:89:91:c5:25:92:b6:bb:d0:c6:15:8c:e0:f2:17:
08:e2:e6:09:c7:31:02:a5:5c:32:b9:7c:c8:41:7d:
f2:4d:f2:af:d8:73:d0:4e:e1:d8:89:16:87:f4:84:
fa:b6:3e:d9:3a:a3:4e:d9:8a:a0:2e:5a:dd:9a:9b:
b3:1f:48:98:df:47:02:72:88:64:12:be:40:de:81:
88:a2:68:bf:94:15:44:2e:4a:7d:dc:54:36:7c:8e:
73:20:08:66:59:8f:3c:ff:4e:b1:e0:7b:a5:db:99:
64:14:a4:f9:48:e4:65:38:cb:7b:65:df:7a:6c:38:
9c:8c:81:dd:4e:c6:d9:3e:b1:f1:23:03:41:22:b7:
86:78:99:76:2d:f0:eb:93:39:15:fc:89:d8:d1:80:
22:74:69:9d:69:09:45:48:f5:be:10:fe:42:46:62:
4f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A0:EA:24:0F:BD:55:BC:FF:9A:7F:67:2D:EB:59:03:97:7C:DB:8B
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/7aDqJA-9Vbz_mn9nLetZA5d824s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4100::/32
2a10:4102::/32
2a12:a345::/32
Signature Algorithm: sha256WithRSAEncryption
d6:3f:c2:4d:f9:e6:45:a0:67:73:02:ab:86:58:6b:20:a2:00:
21:d2:d8:24:09:06:4e:61:e6:4c:df:2a:a2:bf:07:62:83:54:
7f:58:0b:4f:fb:42:34:0e:12:6b:e8:b9:cc:bd:e8:6c:4f:5d:
e2:13:f3:7c:88:df:39:0f:a1:cf:60:41:cc:47:5e:0f:ea:32:
c1:2c:c9:a2:18:38:ee:fd:83:84:dd:88:0c:3f:a4:d7:29:d4:
fa:d3:1a:70:ce:2b:48:89:f6:9f:bf:8b:5c:80:43:a2:6c:18:
2e:99:25:03:a0:28:ac:e0:71:7e:b0:da:df:77:26:04:36:a4:
83:20:8f:4b:18:66:ea:b9:2a:81:bf:da:47:b0:48:07:66:73:
12:61:e5:4d:86:3a:74:03:82:03:26:ab:1e:47:99:e2:c3:62:
f4:2c:1b:63:e1:c8:ae:46:80:91:d4:d8:a0:0f:4e:f6:34:de:
ac:07:8e:06:45:12:c9:12:60:76:8c:61:43:8d:39:ce:4e:20:
7e:3f:bb:0a:a7:cf:70:0f:60:f8:01:8a:6c:42:63:d7:54:c5:
0e:bc:76:d9:2b:64:78:1e:ad:7d:19:26:bd:4d:87:80:10:77:
db:56:8b:4a:57:40:66:fc:43:61:26:2a:fd:2b:91:be:dd:51:
1e:1d:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:36:43 2025 by rpki-client