Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9948pNrOpKodjoDxB2Y5LsN5CyQ.roa
File: 9948pNrOpKodjoDxB2Y5LsN5CyQ.roa (raw, json)
Hash identifier: 17PZLMyt//doge1kNlue3WbSdpC1On9zrQY2zzTg4Qc=
Subject key identifier: F7:DE:3C:A4:DA:CE:A4:AA:1D:8E:80:F1:07:66:39:2E:C3:79:0B:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CCF0127D217463FD916C7C39FB86C5ADD
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9948pNrOpKodjoDxB2Y5LsN5CyQ.roa
Signing time: Wed 03 Jan 2024 11:06:48 +0000
ROA not before: Wed 03 Jan 2024 11:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216157
IP address blocks: 2a13:f900::/29 maxlen: 29
2a13:9480::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 10 Jan 2024 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:01:27:d2:17:46:3f:d9:16:c7:c3:9f:b8:6c:5a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 3 11:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7de3ca4dacea4aa1d8e80f10766392ec3790b24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cb:d8:d2:ce:e8:f8:80:3a:40:7f:25:a7:88:
60:28:f7:ae:d8:1e:28:39:93:b4:55:94:93:af:4b:
54:be:4b:23:39:ae:2a:e1:a6:25:a7:33:72:02:4b:
8b:8d:96:a1:f9:c2:f7:1b:92:b5:00:0e:15:6d:08:
d1:cc:b3:99:28:70:ce:0a:f6:24:ba:44:d8:38:b2:
8b:25:45:ec:83:10:ce:2d:2c:a2:df:55:1c:c8:ed:
e9:9d:22:e1:e9:e6:52:5d:f3:4d:77:59:34:93:91:
3b:4a:ec:cf:e7:eb:15:a4:19:e1:d3:0e:81:b8:e2:
d1:b1:75:d5:e5:0b:eb:c2:fc:43:a9:bc:9c:35:02:
88:45:64:de:26:1d:a7:48:7c:be:a9:02:73:6f:93:
97:b8:82:3a:10:ca:f4:d2:dc:be:f8:44:dd:98:0c:
e7:43:a6:f9:75:42:5d:c4:9a:e3:f6:11:42:f1:bc:
5c:42:7f:16:90:c4:db:c0:65:1b:13:6e:48:f2:dc:
c8:e2:18:ff:b3:d5:cb:79:64:59:e5:e6:7e:03:b6:
00:fd:30:17:35:47:24:56:8f:2f:90:06:61:c3:1e:
5a:5e:33:91:52:8c:23:00:56:a6:8f:99:eb:32:75:
47:2b:08:7e:5a:84:61:1c:36:8e:e0:f1:83:8c:64:
b7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DE:3C:A4:DA:CE:A4:AA:1D:8E:80:F1:07:66:39:2E:C3:79:0B:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9948pNrOpKodjoDxB2Y5LsN5CyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9480::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
8e:41:06:26:03:35:fc:6f:15:ca:aa:e6:6f:49:09:11:e3:03:
65:0b:bc:a5:a3:f9:e7:f5:1c:03:b9:f0:de:51:38:e5:32:f7:
a9:0c:b4:0a:31:68:1b:53:07:cb:d8:33:40:3f:4b:fa:dd:18:
fe:50:08:32:a4:2f:9b:a5:43:14:c2:9c:9d:29:ae:87:9a:78:
9b:0f:e7:dc:b1:8a:33:77:82:74:ff:c2:e9:ff:4d:d4:5b:9d:
e0:65:74:bf:b7:a8:38:95:7d:2b:e9:54:3c:7d:20:d0:23:ff:
6f:20:e7:6c:a7:d3:3f:d3:83:67:bc:16:63:89:a7:bc:dd:be:
43:3c:e8:b3:0d:91:18:a8:f1:7d:2e:ea:49:09:bd:e6:68:54:
38:4d:15:e3:79:58:f6:90:49:9b:91:7a:c3:bf:8d:1a:c5:9b:
9b:c6:53:19:c1:92:a6:87:37:c4:a0:1d:b4:7a:5a:6e:43:c5:
22:3c:7c:34:fb:5d:b9:2d:5f:08:48:24:fe:30:57:18:a5:6b:
19:27:c4:04:a6:f2:60:23:9c:88:77:51:7e:0d:49:13:c7:2c:
b2:fc:37:a4:61:6b:11:e8:0b:78:1b:27:b4:a6:bd:0d:1f:09:
11:da:69:74:e3:26:78:41:ec:3b:8d:14:bd:0e:0b:ac:16:de:
7a:53:a3:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:06:35 2025 by rpki-client