Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FluWtJ4Kxx11xBKpshK0aYNWRtw.roa
File: FluWtJ4Kxx11xBKpshK0aYNWRtw.roa (raw, json)
Hash identifier: w0qqZhVgSfje2oKE1SSohbroin1fEgCYKLxncL8ovnU=
Subject key identifier: 16:5B:96:B4:9E:0A:C7:1D:75:C4:12:A9:B2:12:B4:69:83:56:46:DC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC20646912C6D0CB62D20A5367E0C3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FluWtJ4Kxx11xBKpshK0aYNWRtw.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0f:7d00:1::/48 maxlen: 48
2a0c:7884::/32 maxlen: 32
2a0f:ea00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 13 Feb 2024 07:24:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:20:64:69:12:c6:d0:cb:62:d2:0a:53:67:e0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=165b96b49e0ac71d75c412a9b212b469835646dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:47:79:3d:d6:34:2d:3a:0c:d6:6c:2a:8d:
9c:95:15:65:57:22:81:f6:62:7c:d2:1e:1f:d3:1c:
11:83:7a:88:51:53:0a:eb:ac:c4:28:08:9b:57:d4:
62:7f:74:f7:20:0a:45:c2:a5:1d:58:bc:6f:4a:0b:
06:04:6f:5a:7c:c4:c7:7c:1f:22:ab:98:c9:3a:07:
9a:70:bc:04:17:50:64:07:41:7f:18:e2:4f:c3:d4:
58:2b:2d:07:6a:fe:dd:a6:0c:c1:5a:db:92:00:c5:
96:6e:46:e3:80:3c:61:a4:d2:9e:a5:4f:79:99:d3:
b6:bf:eb:7b:bf:da:52:83:8c:8b:a7:12:e5:32:1d:
15:4d:90:67:fc:ba:f9:f7:6d:4a:fa:e8:8f:f3:3f:
b8:30:83:95:af:76:f8:40:b9:b0:13:15:43:b3:e2:
17:e2:3f:bf:a3:2a:28:7b:4f:69:8a:fc:b2:79:91:
9c:25:95:de:e9:35:14:04:ca:ef:0d:64:1d:7f:ef:
63:9a:77:db:3f:0a:b2:a1:d4:a9:85:69:5c:de:88:
0d:e2:5a:ea:0b:84:30:f0:41:9b:b8:9e:62:58:0c:
37:4d:82:96:de:d3:36:9b:8c:dc:c8:a0:0f:7a:39:
63:4b:4f:51:e3:37:0a:f7:49:67:68:9e:8b:16:84:
d4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5B:96:B4:9E:0A:C7:1D:75:C4:12:A9:B2:12:B4:69:83:56:46:DC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FluWtJ4Kxx11xBKpshK0aYNWRtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0f:7d00:1::/48
2a0f:ea00::/29
Signature Algorithm: sha256WithRSAEncryption
5b:15:51:42:34:bd:07:21:f7:04:5a:5c:a8:9e:56:91:93:98:
87:52:dd:79:8f:6a:0b:8b:1e:75:ac:35:09:b2:fe:5d:ae:9f:
6f:bc:fd:31:6a:9b:63:92:0a:08:24:70:ea:56:c9:19:6e:a7:
81:04:da:f0:14:29:1a:ea:c3:8b:d4:6a:6b:40:78:e1:df:db:
49:81:0f:ec:4c:fb:da:33:93:1e:cb:d6:32:ba:d4:a9:10:78:
87:10:eb:89:70:e1:58:ea:0c:f4:ec:d2:5d:a6:f7:ce:22:54:
be:2c:8d:04:b4:70:66:67:e2:ad:2d:d2:07:16:df:27:f4:c7:
00:a6:5f:c4:48:8b:72:f5:c7:95:b2:dd:b2:3b:2c:c4:15:05:
59:cf:fb:16:ea:78:3b:23:92:0a:4f:ff:e6:fa:25:6a:da:b0:
98:96:a6:5f:59:f7:44:3d:c6:c8:3e:de:8c:02:df:c7:26:f9:
67:42:91:ec:99:a8:ce:17:23:a9:6d:3a:5a:85:75:f5:70:10:
cf:21:30:c2:a2:ab:a4:4d:c2:a8:2d:6e:92:6f:a7:9f:45:6c:
ab:d1:ee:29:f2:c6:a7:d5:0b:b6:f2:15:91:6e:9c:42:2d:e3:
12:7f:a5:9a:ec:7f:81:59:4e:b2:91:03:d6:59:97:09:4c:76:
3c:10:25:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:15:45 2025 by rpki-client