Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4pY0xgh3gGVX0q3pA4K6Lr_25NE.roa
File: 4pY0xgh3gGVX0q3pA4K6Lr_25NE.roa (raw, json)
Hash identifier: BqWXHwugn0AldQV/MzIhy9CgM0T5tDoNOBGf7zOEQAs=
Subject key identifier: E2:96:34:C6:08:77:80:65:57:D2:AD:E9:03:82:BA:2E:BF:F6:E4:D1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01904F012934EF4581E698ADF254304C571A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4pY0xgh3gGVX0q3pA4K6Lr_25NE.roa
Signing time: Tue 25 Jun 2024 10:46:34 +0000
ROA not before: Tue 25 Jun 2024 10:46:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32489
IP address blocks: 2a0f:db40::/29 maxlen: 29
2a0f:db40::/32 maxlen: 32
2a0f:db41::/32 maxlen: 32
2a0f:db42::/32 maxlen: 32
2a0f:db43::/32 maxlen: 32
2a0f:db44::/32 maxlen: 32
2a0f:db45::/32 maxlen: 32
2a0f:db46::/32 maxlen: 32
2a0f:db47::/32 maxlen: 32
2a12:f5c0::/29 maxlen: 29
2a12:f5c0::/32 maxlen: 32
2a12:f5c1::/32 maxlen: 32
2a12:f5c2::/32 maxlen: 32
2a12:f5c3::/32 maxlen: 32
2a12:f5c4::/32 maxlen: 32
2a12:f5c5::/32 maxlen: 32
2a12:f5c6::/32 maxlen: 32
2a12:f5c7::/32 maxlen: 32
2a13:cf00::/29 maxlen: 32
Validation: Failed, certificate revoked on Wed 11 Sep 2024 20:18:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4f:01:29:34:ef:45:81:e6:98:ad:f2:54:30:4c:57:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 25 10:46:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e29634c60877806557d2ade90382ba2ebff6e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:0c:16:ed:34:4b:b3:ce:bd:f6:c0:26:1a:
62:95:09:a9:1e:a3:41:e1:3e:25:58:f0:5e:06:f7:
ca:de:b5:0b:23:bf:27:40:3d:35:06:ef:e5:b9:70:
41:6f:61:27:91:7f:ac:12:20:05:c2:c6:e6:ee:08:
f0:6e:b7:88:7f:ff:92:2c:7f:30:db:2a:f9:98:fd:
9d:d9:61:70:46:5f:f5:9d:19:8d:6c:8b:e8:05:49:
b6:c5:0b:17:bb:f0:fb:73:79:22:21:f7:7f:79:4c:
1c:9a:aa:9d:07:ba:7d:1b:ad:d3:69:9e:b5:89:da:
dc:5a:ae:54:a4:3f:6f:44:4a:67:71:7d:1f:4e:81:
d0:2c:a5:94:86:7d:90:30:0b:41:88:07:3b:9d:f9:
61:3a:25:82:7d:9b:2c:d2:be:56:90:fa:e3:5f:85:
00:e3:49:0b:51:ab:48:81:b4:27:e2:6f:32:37:d1:
d0:96:7d:90:56:12:91:f3:d1:68:2e:4e:e6:9a:75:
71:0d:17:e0:8a:fa:68:d1:a7:d1:c0:97:ca:d0:5e:
83:eb:07:07:a2:2d:95:14:63:d5:9e:ed:8b:63:16:
82:17:40:af:13:2c:03:e0:dd:11:9e:c4:02:b0:ba:
b1:ef:c7:c6:72:26:5c:74:bc:67:b8:0a:02:88:1b:
e3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:34:C6:08:77:80:65:57:D2:AD:E9:03:82:BA:2E:BF:F6:E4:D1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/4pY0xgh3gGVX0q3pA4K6Lr_25NE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:db40::/29
2a12:f5c0::/29
2a13:cf00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:bf:a5:ae:14:98:fd:94:37:37:fa:c7:d1:66:c0:09:9e:97:
43:fc:d7:f9:57:3f:45:97:27:bc:fd:e2:6b:f5:e4:b1:31:6d:
bf:4e:b3:63:8c:c9:1f:09:4c:ae:2e:df:1d:33:a6:05:5d:14:
cd:f4:9c:12:fa:c6:35:88:a5:04:fa:3a:e5:51:9e:12:30:34:
7f:61:11:3a:fe:f3:df:20:df:79:cb:cb:ed:f2:12:22:55:0c:
08:be:87:b0:de:0b:d6:67:23:a1:b4:07:2d:60:36:51:0a:38:
10:76:6a:91:73:40:4b:01:50:29:13:2d:53:e8:85:7a:69:c3:
fd:0d:f3:f7:09:9e:30:d3:c1:89:f3:dd:9d:71:cd:25:52:e0:
fb:20:d4:61:74:0d:68:11:78:c9:66:11:fc:d1:bf:2b:1d:9a:
e1:f9:a1:b8:69:8b:a1:26:63:ad:5d:6d:cb:0b:19:02:87:3a:
40:f9:bc:96:1f:d5:0d:3c:b0:54:1c:50:08:66:f7:69:04:0a:
23:f6:89:d8:3c:f3:b9:b4:aa:a1:3b:7c:9b:4e:9c:86:37:72:
20:cd:8c:ca:4c:63:8d:c5:c9:1e:5d:d9:e6:fb:30:09:dd:9f:
4c:b5:e4:87:42:69:29:af:0c:88:0b:46:1e:cf:60:0d:6e:fe:
75:69:a3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:09:38 2025 by rpki-client