Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7QVohcjql5G9vhBh6lpb_hlNCok.roa
File: 7QVohcjql5G9vhBh6lpb_hlNCok.roa (raw, json)
Hash identifier: /8FW5xzuVjRu5X2zbn1YFMWGqpMLQl1i8d4XEBDc5AU=
Subject key identifier: ED:05:68:85:C8:EA:97:91:BD:BE:10:61:EA:5A:5B:FE:19:4D:0A:89
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195A4DB9AA9CEE681FF6EBA53BD4A6270A2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7QVohcjql5G9vhBh6lpb_hlNCok.roa
Signing time: Mon 17 Mar 2025 16:06:50 +0000
ROA not before: Mon 17 Mar 2025 16:06:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.54.0/23 maxlen: 23
64.226.156.0/22 maxlen: 22
2a06:1186::/32 maxlen: 32
2a0d:8f80::/29 maxlen: 29
2a0e:c783::/32 maxlen: 32
2a0e:f500::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
2a12:ac45::/32 maxlen: 32
2a13:e103::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Mar 2025 16:43:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:db:9a:a9:ce:e6:81:ff:6e:ba:53:bd:4a:62:70:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 17 16:06:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed056885c8ea9791bdbe1061ea5a5bfe194d0a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:f6:0c:68:0a:d2:e8:59:3d:c6:66:79:24:
59:f1:34:4d:e5:44:1b:61:62:24:89:2c:4e:04:9c:
14:63:aa:19:27:47:5e:b7:a9:e3:30:3e:cd:e7:33:
e5:5c:cd:2b:b1:69:f6:05:f6:26:07:65:6a:7a:83:
ae:83:22:fb:23:88:22:d5:70:24:32:18:7b:25:f9:
06:d6:9f:fb:a8:45:a8:0f:6a:62:19:cc:ac:13:b5:
a3:d8:fd:7f:4a:59:d6:c9:58:12:d6:c3:11:cf:19:
75:cf:7f:4c:7d:d0:ad:30:f3:6b:c0:42:ac:5f:dd:
f9:07:90:78:8e:f6:d7:21:78:0b:ba:80:05:ed:f8:
2c:12:23:f5:e8:b2:bf:2c:8a:2a:c9:fb:2a:5e:ec:
99:12:ce:bd:af:2f:96:5d:35:91:a1:47:61:49:37:
63:78:7b:2d:05:8b:c7:08:35:d2:74:a1:2a:81:a0:
f2:d9:89:fa:0f:75:52:9b:86:f8:63:df:03:ba:cd:
98:d7:0d:86:09:1c:1b:57:9d:9b:28:84:50:61:c3:
95:be:9b:5b:a0:11:eb:e7:ba:1f:92:b0:b8:0c:32:
64:aa:9f:67:94:91:ca:3f:64:00:e8:25:ae:f8:ef:
4c:f1:e3:86:30:88:6c:65:ed:38:bd:0a:2c:30:d2:
96:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:68:85:C8:EA:97:91:BD:BE:10:61:EA:5A:5B:FE:19:4D:0A:89
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7QVohcjql5G9vhBh6lpb_hlNCok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
IPv6:
2a06:1186::/32
2a0d:8f80::/29
2a0e:c783::/32
2a0e:f500::/29
2a10:37c0::/29
2a12:ac45::/32
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
0b:f2:a2:32:7c:c3:d2:ea:87:e1:ff:a0:c8:68:7a:6e:0e:ed:
5b:d9:1b:f5:0a:14:3f:51:ff:25:b7:18:8f:6e:c3:ba:65:d9:
44:b0:28:b2:e6:af:a9:44:cb:65:d7:4e:b7:38:96:3f:3a:bf:
7c:27:5f:a3:23:69:b8:34:f7:8e:ba:0c:c6:47:90:e3:5d:b9:
11:b0:99:b1:d6:c0:7f:5c:f5:5c:02:8e:e5:b4:a7:29:1b:16:
e8:ab:5e:b2:62:7b:2e:9d:ea:3f:fc:54:fd:c4:5b:e1:1a:37:
a8:da:2f:90:17:70:e5:13:9d:16:84:17:21:43:35:cd:31:2b:
ea:b0:62:71:cb:34:d1:2b:4c:05:e0:4a:8e:cd:9a:e8:f9:59:
73:7d:77:bf:24:fe:c3:67:34:ce:ba:56:f2:0a:ac:a6:fd:38:
b2:82:69:ff:de:5a:0e:14:37:b6:27:b2:23:d6:40:6c:86:6f:
34:b1:62:7d:16:c4:d5:bb:ac:65:b2:d0:3c:22:9d:ef:55:45:
ac:69:5c:b7:41:ba:d7:bc:ae:10:94:00:19:95:ab:4a:32:ba:
3f:51:f5:87:4c:76:f8:3b:17:a0:11:06:56:75:d7:63:b5:0b:
fc:24:72:c3:03:43:ec:04:63:aa:69:ea:6d:00:11:f4:42:65:
65:2a:5d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 05:59:02 2025 by rpki-client