Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C8Nb9wgRrsTVd3IRHhqpV2eX1ds.roa
File: C8Nb9wgRrsTVd3IRHhqpV2eX1ds.roa (raw, json)
Hash identifier: OSXNwcC5ILExoixwjeLWHvGisA/LFn3yxOhuMwAePsg=
Subject key identifier: 0B:C3:5B:F7:08:11:AE:C4:D5:77:72:11:1E:1A:A9:57:67:97:D5:DB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01919324B86CBA580B2F5DF16FA2315039C7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C8Nb9wgRrsTVd3IRHhqpV2eX1ds.roa
Signing time: Tue 27 Aug 2024 09:22:22 +0000
ROA not before: Tue 27 Aug 2024 09:22:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a07:8a40::/29 maxlen: 29
2a13:9080::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 Aug 2024 17:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:93:24:b8:6c:ba:58:0b:2f:5d:f1:6f:a2:31:50:39:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 27 09:22:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0bc35bf70811aec4d57772111e1aa9576797d5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a3:83:8c:bf:7d:55:bc:bb:7e:ed:65:ce:45:
7a:aa:42:97:3c:e7:95:cf:4b:74:63:88:70:4a:fa:
f2:bd:1e:80:91:f6:ab:c4:35:8a:54:52:6e:ed:b7:
f4:1c:ed:3c:f4:d3:ee:24:af:ae:55:51:05:dc:34:
21:8c:73:41:3a:43:21:1c:41:cc:bc:91:31:f0:ac:
2e:dd:62:84:7d:45:73:45:32:a5:30:73:e3:8e:7e:
d7:60:78:eb:3e:88:30:a7:28:52:fa:27:ba:be:15:
83:89:35:8a:be:b5:58:b9:72:30:4d:75:03:95:cc:
3b:09:17:14:8b:43:4a:ca:97:e0:72:77:f6:34:1a:
6d:68:b5:1e:9a:6d:76:14:b6:67:ee:e9:da:9f:da:
dc:40:50:07:be:49:8a:48:da:ee:38:17:12:8c:d1:
14:1e:3a:49:1c:b2:f8:af:fb:31:74:68:23:9f:4a:
e7:76:4f:24:9f:43:29:e1:41:36:0a:65:bb:d0:cb:
4b:86:a7:7f:8c:8b:f3:19:af:d7:94:90:0e:02:61:
16:cc:13:22:51:55:1f:0c:ce:40:40:b0:af:6f:20:
d3:af:5f:c6:3d:83:52:a2:41:a3:da:1c:81:fd:2a:
52:2e:ed:fa:ba:c2:65:f7:1a:be:99:bb:c6:3e:bf:
4a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C3:5B:F7:08:11:AE:C4:D5:77:72:11:1E:1A:A9:57:67:97:D5:DB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/C8Nb9wgRrsTVd3IRHhqpV2eX1ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:8a40::/29
2a13:9080::/29
Signature Algorithm: sha256WithRSAEncryption
6f:48:cb:e6:4e:eb:d8:e4:4b:37:49:54:2c:63:4e:30:d4:2f:
24:e3:6e:4a:7b:84:1f:c6:be:96:c7:ba:af:0b:d4:ce:6a:00:
13:7d:91:62:86:ad:db:d4:c8:4f:60:9a:39:24:a6:e6:74:e4:
b9:09:75:20:47:b2:7f:c0:0d:65:04:c4:52:22:7f:48:33:49:
9e:e9:d7:20:28:77:6d:1b:a6:b6:1b:85:21:e7:0b:a6:f2:25:
e0:6a:5a:bc:8e:63:97:db:db:fa:de:54:29:37:cd:3a:ea:4a:
ab:16:d6:1d:60:30:4e:38:43:2a:0e:3a:ab:3c:44:b9:ea:75:
ae:16:47:b4:b3:53:c1:48:73:21:89:72:45:f7:4f:a8:1b:80:
23:c9:a8:56:08:44:c9:3a:61:a4:e3:45:b7:a3:55:74:f6:a5:
21:67:c3:5f:54:44:c7:c6:3b:dc:5e:43:96:3e:bb:92:68:13:
89:3b:02:92:83:9d:b5:9e:7b:96:94:7e:67:d7:45:86:0b:c6:
06:39:93:76:55:45:e9:e1:ac:d7:5b:c9:c4:be:ef:d3:4c:83:
38:c3:21:4d:e3:d5:35:05:fd:32:00:e1:df:e9:a4:15:19:06:
74:e5:e4:91:19:ee:1a:5b:0a:09:83:03:99:2e:20:d4:24:ec:
f3:50:c5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:27:15 2025 by rpki-client