Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-URLAUYiPgBulstVDw-YKoEvGLs.roa
File: 1-URLAUYiPgBulstVDw-YKoEvGLs.roa (raw, json)
Hash identifier: Y1bD8lGWpbU88pseK7YVsTkhO45oApTUwkGZE5a2gL4=
Subject key identifier: F9:44:4B:01:46:22:3E:00:6E:96:CB:55:0F:0F:98:2A:81:2F:18:BB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F3B01ADBBA46A0E6D6A69C6282B282724
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-URLAUYiPgBulstVDw-YKoEvGLs.roa
Signing time: Thu 02 May 2024 20:31:56 +0000
ROA not before: Thu 02 May 2024 20:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a0f:e847:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 03 May 2024 08:20:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:3b:01:ad:bb:a4:6a:0e:6d:6a:69:c6:28:2b:28:27:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 2 20:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9444b0146223e006e96cb550f0f982a812f18bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:db:aa:37:60:ea:5d:e7:68:a6:fd:55:5e:
40:e5:d1:b0:f6:5f:59:0c:3f:72:85:0d:cd:ea:a7:
bb:51:d4:73:0f:f8:6c:52:fa:95:df:55:81:8e:7d:
27:e4:af:88:7c:3d:f5:0e:12:84:08:75:09:3a:bb:
93:fd:f5:46:32:07:fe:8b:88:24:47:a8:9f:1b:d8:
63:71:54:13:44:e5:69:33:0b:6b:49:4c:36:78:0b:
94:d1:8c:d7:cc:86:cc:d5:a9:ee:f5:42:35:8d:05:
5a:ce:ac:5d:4b:69:14:d9:ef:04:10:ba:e0:47:4d:
31:43:0f:37:be:42:2d:98:83:6e:a0:88:ca:cb:f7:
70:09:05:83:0c:ff:1b:db:9b:fe:80:f1:ee:14:67:
02:17:da:b8:c5:a6:fb:8f:f3:6f:85:ec:cb:1d:f0:
62:a2:21:01:51:a0:20:65:2f:3e:72:43:d6:6d:e1:
2d:4f:23:2f:85:41:75:31:e5:f0:52:63:f9:a7:ac:
fc:7f:73:27:c5:25:57:56:6b:32:7e:5a:51:62:7d:
f5:3c:f4:29:a0:d3:79:21:e3:d4:ee:9b:0e:dc:75:
cc:aa:b7:43:85:a6:e7:e3:18:3d:5e:26:4d:44:2a:
cf:6d:16:60:44:7d:a2:1f:2d:30:81:55:f9:c6:ce:
69:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:44:4B:01:46:22:3E:00:6E:96:CB:55:0F:0F:98:2A:81:2F:18:BB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/1-URLAUYiPgBulstVDw-YKoEvGLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a0f:e847:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
6b:16:bf:00:53:81:0a:b2:85:be:c6:d4:9a:00:7a:4a:29:80:
ae:3a:d7:57:7a:59:bf:ec:ea:51:1b:43:03:e6:36:42:23:2a:
58:5a:0e:4d:d7:a0:a3:7e:d0:27:2c:7a:d0:b5:67:97:c1:5d:
c3:49:c7:e1:d8:2a:39:3c:d6:2a:46:06:13:b5:47:b9:57:9f:
b6:32:38:fb:5f:80:e9:b9:14:1a:f9:dc:47:31:13:8a:68:e7:
17:29:ff:30:47:a6:e2:37:ee:b8:97:72:2f:fb:38:ac:97:da:
86:9d:72:6e:fd:f1:e5:94:02:3d:7c:14:0f:97:40:3c:6f:da:
74:f7:6c:28:3f:c2:34:1f:2a:dd:87:c8:58:b9:6a:43:f5:34:
c5:5e:ae:ff:3b:db:f4:c8:f6:f9:55:de:96:3a:03:6e:47:b4:
4d:e2:2e:2d:40:c0:cc:07:4d:b4:c8:6a:e6:66:0b:41:9e:ca:
0d:8b:28:51:25:f0:8b:28:a8:1c:dc:bf:f8:00:36:f4:ec:55:
6d:fc:9f:e3:30:ad:21:30:bb:7f:f2:d3:c7:f7:c4:05:82:ab:
bc:ee:c8:9a:45:16:4c:47:26:ad:be:55:de:3c:34:82:24:1c:
07:20:86:13:a7:45:ff:a4:07:2b:33:d6:19:32:30:87:66:2b:
4d:cc:70:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 13:18:28 2025 by rpki-client