Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PFA0WAgPtfM9L54PYwUTAnoPLRw.roa
File: PFA0WAgPtfM9L54PYwUTAnoPLRw.roa (raw, json)
Hash identifier: hVC6p3qkz79HZQ/H8oZyCZ29+dPC+c+4Ujt2TOLyGbY=
Subject key identifier: 3C:50:34:58:08:0F:B5:F3:3D:2F:9E:0F:63:05:13:02:7A:0F:2D:1C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D8D0733246199B650828E947AA3DEABF2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PFA0WAgPtfM9L54PYwUTAnoPLRw.roa
Signing time: Fri 09 Feb 2024 08:41:15 +0000
ROA not before: Fri 09 Feb 2024 08:41:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c1::/48 maxlen: 48
2a0f:e1c0:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c6:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a12:ecc0:f::/48 maxlen: 48
2a12:ecc6:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:e101:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 22 Feb 2024 13:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8d:07:33:24:61:99:b6:50:82:8e:94:7a:a3:de:ab:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 9 08:41:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c503458080fb5f33d2f9e0f630513027a0f2d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d2:b9:bd:b2:bd:82:28:0d:bb:b3:c0:c8:cb:
4b:51:17:e7:ab:02:8c:a2:fb:52:ed:ab:6f:5b:bd:
3f:83:62:bc:51:6f:38:c4:11:d7:9f:11:4f:3c:3e:
24:00:f0:36:ff:6a:94:5e:54:47:d4:6b:a5:57:ff:
c7:6a:e1:1c:95:1d:9a:e2:25:21:3c:0a:6a:c5:99:
f8:fc:52:01:e4:07:86:8b:c9:47:f4:86:7a:ef:c6:
eb:8d:b6:94:9a:85:2e:1d:6c:87:fb:78:68:3e:f8:
a8:31:12:45:df:06:b0:09:05:a6:12:56:8a:62:0b:
8b:1a:c1:5c:aa:60:b9:c1:d2:9d:33:8b:ca:d3:12:
48:95:8a:7b:10:5c:3c:af:c1:4a:35:0b:34:71:f4:
7b:95:4f:fb:b8:d8:dc:d3:8a:e5:98:b4:24:14:1e:
11:3e:35:03:55:82:8a:ff:5d:95:76:22:a8:6a:d2:
55:44:9b:ba:98:09:96:88:cf:6c:7e:c4:cd:a9:62:
6c:6a:88:86:29:11:16:43:89:c3:76:81:b1:06:99:
1d:ce:d4:05:65:ff:67:8e:2f:c8:34:c8:bf:18:24:
17:a7:d1:1b:fe:19:0a:9b:05:b9:83:51:3f:59:6f:
65:67:98:b2:49:ea:01:a0:3f:f4:f4:fd:ab:fc:8b:
11:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:50:34:58:08:0F:B5:F3:3D:2F:9E:0F:63:05:13:02:7A:0F:2D:1C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PFA0WAgPtfM9L54PYwUTAnoPLRw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c1::/48
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a12:ecc0:f::/48
2a12:ecc6:1::/48
2a13:3380:1::/48
2a13:c700:1::/48
2a13:e101:1::-2a13:e101:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:ca:02:11:3f:6d:a7:d8:b6:95:eb:c3:32:de:b7:71:18:0d:
af:93:dc:05:e2:74:f0:4b:db:1d:7e:ea:05:44:06:c3:23:c3:
fd:dc:b4:c9:83:1f:ed:db:91:ba:52:99:67:b2:ab:47:87:75:
61:b1:4f:07:05:98:7e:15:11:00:74:10:df:b4:6e:47:3d:19:
c3:ad:1b:0c:50:8f:e6:d2:0c:57:0d:43:79:a4:5e:9d:7d:97:
d4:11:0b:8e:8e:d6:65:df:4d:49:f6:5a:bf:a1:fe:9a:e7:1b:
50:c6:41:bb:cf:54:c7:22:5a:38:a9:67:f9:ef:57:3e:cd:77:
b8:db:dc:bb:80:3b:bc:e6:48:38:06:47:25:c5:dc:c9:75:9b:
c9:a2:4d:2d:1e:e0:50:24:86:8a:23:52:60:8d:d5:13:e2:53:
11:88:4b:60:2c:59:ee:98:32:3e:54:49:0e:8d:c3:4c:a4:24:
12:0d:1c:4c:49:93:6f:67:35:69:8b:ea:bd:98:50:63:f3:62:
9d:6c:f9:1a:60:02:78:89:dc:3b:34:5a:33:08:51:65:b6:10:
08:14:64:32:05:46:39:00:12:8d:39:25:2f:cb:1d:7e:c1:0b:
a4:ac:2b:2f:66:08:a4:27:f8:55:c4:26:83:ae:c8:55:4d:36:
00:2b:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:15:54 2025 by rpki-client