Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PgmloTYWGqD2X-nbv9Cn4xx5FHM.roa
File: PgmloTYWGqD2X-nbv9Cn4xx5FHM.roa (raw, json)
Hash identifier: KcZ/pbq9GIcjt6EVZbz3RssXSvjPpMXKPmfNt/AT57U=
Subject key identifier: 3E:09:A5:A1:36:16:1A:A0:F6:5F:E9:DB:BF:D0:A7:E3:1C:79:14:73
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018D68BD5C4BBF84F49797991E4E86A0DEA8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PgmloTYWGqD2X-nbv9Cn4xx5FHM.roa
Signing time: Fri 02 Feb 2024 07:34:16 +0000
ROA not before: Fri 02 Feb 2024 07:34:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397423
IP address blocks: 2a0f:e840::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Apr 2024 10:14:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:68:bd:5c:4b:bf:84:f4:97:97:99:1e:4e:86:a0:de:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 2 07:34:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e09a5a136161aa0f65fe9dbbfd0a7e31c791473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:40:2e:51:64:f4:55:90:0c:6a:e0:a4:1b:57:
51:53:b0:ae:9e:91:0f:25:2b:41:74:da:67:b0:a9:
e9:78:48:63:a3:ac:05:f1:48:97:af:69:5b:3b:ae:
fb:ac:d1:17:ef:54:67:2c:e9:28:9f:46:74:37:6d:
67:e1:1a:0f:9c:4d:a9:05:10:45:16:e8:8d:a9:98:
9e:28:a4:8f:8f:45:0b:9a:33:2c:47:68:ef:a8:04:
ad:b8:72:cf:b5:87:e4:3f:89:54:51:39:1e:fd:79:
25:e8:d7:b4:35:79:f0:29:3c:73:f6:08:29:3a:f3:
f3:51:d8:4e:f5:5e:c6:07:a6:4a:0d:e7:dc:ef:59:
33:05:ab:91:b5:09:58:e7:59:42:2b:99:ec:91:84:
39:ca:1f:f4:f8:dd:80:29:b9:7a:65:d7:8b:7d:cc:
17:82:1b:99:f8:05:5a:a0:8f:97:99:14:82:ec:6c:
4f:f3:dc:e1:ff:d3:c1:8d:2b:ea:65:27:e6:f6:f0:
0a:86:b6:80:a2:01:0e:3d:25:67:51:5d:45:40:95:
91:59:53:9c:57:30:29:0c:b0:7d:41:fd:65:f3:0f:
ed:39:05:fa:4b:d5:97:de:15:10:5e:d5:6e:6f:b1:
81:d9:ea:2a:13:11:1d:14:5f:89:13:f4:f4:fa:83:
d1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:A5:A1:36:16:1A:A0:F6:5F:E9:DB:BF:D0:A7:E3:1C:79:14:73
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/PgmloTYWGqD2X-nbv9Cn4xx5FHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e840::/32
Signature Algorithm: sha256WithRSAEncryption
46:bc:30:87:38:14:c5:da:fd:fb:ba:71:5d:20:25:e6:4b:b4:
56:1e:d4:4d:8e:ff:ac:86:08:66:c7:db:54:73:66:4c:0c:72:
31:7a:49:8f:25:a7:e2:96:00:95:66:5c:96:ea:f0:37:89:7e:
ef:04:f9:d0:61:43:2a:46:75:31:de:0d:4d:02:ca:95:cd:41:
99:55:74:61:e1:c4:b4:cf:fe:ed:25:c6:dc:eb:0b:bf:ff:ec:
62:a5:8c:10:3f:9d:73:94:7c:04:16:23:7d:39:fc:79:91:91:
fc:31:99:97:c1:b9:0b:df:8e:3e:83:3d:78:f9:63:d4:14:f7:
f4:df:87:7e:48:85:08:4f:9d:c4:74:57:7f:ae:51:5b:6e:38:
4e:7a:9f:9e:91:e2:f1:f4:a3:3e:bd:b3:79:f2:d6:2e:c1:b3:
14:78:b7:e9:27:9c:d9:02:dd:0c:df:25:98:83:a3:54:84:69:
6a:cb:3c:dd:bb:db:91:ca:5a:8f:ee:bb:d7:3b:5d:dc:49:81:
ae:1a:8f:a9:27:91:04:8c:4b:2e:91:a3:fd:9a:06:21:d3:9d:
47:de:56:44:82:3c:9b:6c:b6:93:f4:93:56:5d:1d:a8:22:bc:
4c:16:90:83:0e:4b:82:f1:79:4f:ab:af:75:f7:bb:ba:78:6b:
31:7f:9a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:28:15 2025 by rpki-client