Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E8w-1ePqykf0man_gRtzI1GUK00.roa
File: E8w-1ePqykf0man_gRtzI1GUK00.roa (raw, json)
Hash identifier: 2CyMf0U/tRU6/g45bMJefCRi6NRFWl65TgyuQbxuLyc=
Subject key identifier: 13:CC:3E:D5:E3:EA:CA:47:F4:99:A9:FF:81:1B:73:23:51:94:2B:4D
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019362B18312DAEFA73AF8231C1D8E4BB5C4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E8w-1ePqykf0man_gRtzI1GUK00.roa
Signing time: Mon 25 Nov 2024 09:40:20 +0000
ROA not before: Mon 25 Nov 2024 09:40:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204916
IP address blocks: 2a0f:140::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 27 Dec 2024 08:44:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:b1:83:12:da:ef:a7:3a:f8:23:1c:1d:8e:4b:b5:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 25 09:40:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13cc3ed5e3eaca47f499a9ff811b732351942b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:63:8c:5c:e6:22:1b:2f:93:84:cf:32:c9:
7d:a8:2e:7e:0e:c7:63:d6:95:8e:f3:27:13:00:58:
48:3c:f1:37:0f:13:bc:78:26:32:33:52:5b:1d:2a:
cd:1a:73:7d:c4:35:df:52:bb:47:bd:90:41:86:9b:
66:ad:46:0b:14:94:89:71:fa:8c:68:5f:95:22:9d:
d7:55:59:58:ec:b7:a7:eb:f6:74:b3:2c:00:62:44:
d6:32:3d:dc:a8:57:3a:fa:95:1d:0c:25:ce:46:3b:
bb:1e:20:71:89:d3:2d:50:f0:2c:cb:76:07:bd:92:
4a:54:3a:3b:10:7d:9b:13:56:0e:d6:c8:28:58:0c:
2d:3a:56:00:d6:29:49:ba:9d:ed:bd:03:b2:a1:8d:
56:49:16:30:90:72:13:67:8f:45:80:fe:24:81:64:
17:37:b6:ca:a7:fa:0a:d6:52:14:42:9a:f0:33:20:
1a:5d:90:36:bc:e8:de:5c:13:37:f2:9a:30:f6:df:
81:a6:9d:9c:d1:5f:ad:63:f9:ac:5f:01:ef:33:90:
c8:1d:12:91:e3:30:32:e3:3f:62:55:db:6d:75:89:
c0:fa:41:87:4e:0f:79:b2:c5:5c:88:66:28:ba:71:
73:da:62:79:d4:61:f8:a6:1b:9c:8c:9b:f8:4d:73:
58:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CC:3E:D5:E3:EA:CA:47:F4:99:A9:FF:81:1B:73:23:51:94:2B:4D
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/E8w-1ePqykf0man_gRtzI1GUK00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:140::/29
Signature Algorithm: sha256WithRSAEncryption
bd:76:d7:af:76:a7:6f:5c:af:bd:1e:fb:92:cf:1b:05:b3:5e:
a1:bc:4f:9f:58:50:4a:80:3d:25:49:d8:46:ba:ce:f2:53:e2:
9b:94:de:b4:b0:1f:6c:f6:fc:22:c7:e9:08:ad:5c:22:cd:82:
d7:9e:a5:dd:76:86:51:11:9e:29:de:41:00:9c:63:63:fa:87:
da:57:b1:06:ec:00:2d:09:af:6f:a2:a1:69:b5:fc:e6:64:6b:
58:00:40:e5:bc:c3:c2:5e:fc:2f:92:5a:0d:ac:fd:1c:d7:9c:
fd:b9:b5:cf:96:8e:3c:76:5b:3b:2b:2a:ce:a7:6f:52:62:8a:
dd:0b:5c:06:17:9d:8d:6c:52:67:1f:07:cd:ae:7c:1c:60:4e:
cd:c6:e6:a8:bd:15:6c:80:d2:e6:52:98:07:94:73:1c:7f:f1:
24:33:69:ae:2f:c9:ac:7c:36:33:19:27:84:a0:6c:da:e6:66:
ce:a6:fd:dd:8f:73:cf:2d:12:bb:de:09:23:24:7b:07:b3:c7:
58:00:6a:1b:3c:7e:75:0e:d0:d7:43:de:74:25:6e:da:c7:d5:
f7:fb:1a:75:9c:e7:e4:ea:50:e7:2e:76:57:32:ec:af:7a:91:
83:c6:24:da:30:c7:97:ea:39:40:e1:74:ac:d8:7c:70:64:b4:
e5:56:37:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:40:57 2025 by rpki-client