Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P3_BrvQy_dRszDKy54DSvWvfPFY.roa
File: P3_BrvQy_dRszDKy54DSvWvfPFY.roa (raw, json)
Hash identifier: RNZxTkzqo3JF8lgRqwO4Znej+5VBhBaydCweHYXZ8e0=
Subject key identifier: 3F:7F:C1:AE:F4:32:FD:D4:6C:CC:32:B2:E7:80:D2:BD:6B:DF:3C:56
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01955CB460EE7A095682BCA0CEB48092EB4D
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P3_BrvQy_dRszDKy54DSvWvfPFY.roa
Signing time: Mon 03 Mar 2025 15:51:19 +0000
ROA not before: Mon 03 Mar 2025 15:51:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213542
IP address blocks: 2a0f:df45:25b::/48 maxlen: 48
2a0f:df45:fe5e::/48 maxlen: 48
2a0f:e7c3:1::/48 maxlen: 48
2a0f:ea43:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 28 Mar 2025 13:41:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5c:b4:60:ee:7a:09:56:82:bc:a0:ce:b4:80:92:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 3 15:51:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f7fc1aef432fdd46ccc32b2e780d2bd6bdf3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b2:58:37:7f:f0:ad:8b:92:4b:a9:ac:25:c4:
d2:7a:80:a3:d8:81:f9:c9:0f:68:22:df:02:8e:8d:
8b:92:93:77:e0:19:1c:4a:b7:13:5f:5f:d1:6b:60:
d9:e9:3c:e5:c6:4c:46:3d:d7:12:61:b6:b1:61:ec:
42:d8:d5:8e:a6:22:6f:37:54:14:0c:0a:85:26:06:
7c:3d:ca:0a:90:f4:49:56:e0:05:31:14:45:c9:3c:
50:e2:66:0d:ff:14:00:f3:42:5a:a6:2d:6d:a2:08:
44:7e:35:22:26:49:75:a7:29:10:d0:5a:2b:4b:f9:
b1:db:ea:de:38:74:2a:97:a7:73:25:9b:6f:dc:8e:
ba:c2:18:09:c0:8a:e1:45:46:22:2a:d3:a0:33:44:
53:68:0f:93:cb:bd:2c:fd:62:aa:3e:74:9a:a3:0a:
f3:a6:62:0a:4c:6b:3b:ec:7d:43:f4:49:37:f5:48:
08:ac:2d:f3:87:cc:53:c4:2d:d2:c4:80:7a:13:0e:
f5:6e:60:1d:b2:a2:79:b6:f1:d6:36:c3:2d:e6:c2:
28:4c:ef:b6:89:e0:b2:a9:96:07:20:71:52:5b:c7:
4b:71:7d:79:d2:ed:24:7f:43:1e:ee:ba:8e:b6:68:
3c:a4:10:2b:4a:73:f6:e7:78:7d:8d:4a:3e:db:85:
4f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7F:C1:AE:F4:32:FD:D4:6C:CC:32:B2:E7:80:D2:BD:6B:DF:3C:56
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P3_BrvQy_dRszDKy54DSvWvfPFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:df45:25b::/48
2a0f:df45:fe5e::/48
2a0f:e7c3:1::/48
2a0f:ea43:1::/48
Signature Algorithm: sha256WithRSAEncryption
66:c4:76:b5:95:2b:87:35:78:49:8a:e1:14:a5:05:d7:5c:94:
80:c1:c7:f4:db:04:40:e3:3a:f5:13:a1:d1:13:d5:11:23:47:
20:94:97:09:d5:e8:66:4e:0b:2f:b1:b0:96:2c:4e:5a:3e:8a:
a8:66:93:af:9d:a9:09:11:dc:05:8c:1e:33:99:de:35:80:5c:
4c:0c:5f:c1:e4:79:c2:10:c0:6b:e2:f2:cd:79:0a:43:53:b4:
bd:f5:92:96:da:b1:65:09:7e:85:a0:97:73:19:43:f7:66:c2:
bc:a4:a9:a5:e1:41:5e:7f:39:98:98:c1:05:bb:86:02:02:2e:
5c:a4:04:78:d6:b2:3a:5e:ee:ac:68:14:d7:42:65:99:10:4f:
49:32:09:ce:ec:00:84:53:58:52:be:e8:3d:61:ea:28:a4:98:
61:c2:4b:f6:c4:37:21:45:3e:d0:52:89:ca:33:d5:49:03:9e:
4e:5a:05:1d:0b:03:11:e3:19:0b:af:b3:15:57:14:fa:0f:e8:
73:af:16:48:92:25:c3:ad:67:13:11:18:08:0d:da:96:38:53:
23:9b:ef:c3:19:8d:19:ca:f9:1a:01:a4:79:5c:37:ed:20:f0:
a7:ba:81:86:9f:f2:ab:c6:ec:64:c3:45:02:95:33:3b:54:b1:
f8:06:d0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 07:34:49 2025 by rpki-client