Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RiBJhGAyP2RK3slEFfMzfuzIEvc.roa
File: RiBJhGAyP2RK3slEFfMzfuzIEvc.roa (raw, json)
Hash identifier: 8Olk+Md0bjDCx0U0gM9L7zjxbz/A2ZSO+FhoV0ymtHI=
Subject key identifier: 46:20:49:84:60:32:3F:64:4A:DE:C9:44:15:F3:33:7E:EC:C8:12:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195AF2EBABAE45C32D71BAC4CB86C47198F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RiBJhGAyP2RK3slEFfMzfuzIEvc.roa
Signing time: Wed 19 Mar 2025 16:13:50 +0000
ROA not before: Wed 19 Mar 2025 16:13:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0c:4880::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:1840::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2ec0::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:fa00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Mar 2025 16:53:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:2e:ba:ba:e4:5c:32:d7:1b:ac:4c:b8:6c:47:19:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 19 16:13:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4620498460323f644adec94415f3337eecc812f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8b:9c:61:3b:24:1c:fe:18:22:c3:5e:ff:ca:
fa:3e:fc:c7:05:4b:7d:60:fc:14:75:0c:3f:10:ed:
7f:13:54:80:c9:dd:e7:8a:fb:a8:76:0e:b8:93:2f:
9b:4f:88:9e:76:5f:bb:f0:37:8b:63:d9:9a:2a:72:
47:b8:62:36:b4:03:70:10:51:d5:09:6a:24:76:a3:
a6:b8:c0:37:97:57:11:f9:e0:e8:9d:ee:a4:d2:59:
48:2c:80:64:f1:1e:74:d4:63:16:ce:24:08:99:45:
61:e0:77:20:85:47:16:88:2e:51:85:1f:06:42:f5:
dc:da:3a:18:a3:c2:ea:ac:64:02:3c:54:38:72:17:
09:13:12:c3:60:f3:64:f6:5f:cc:36:49:87:15:b4:
ec:eb:e9:81:a9:64:79:7c:2b:6c:25:36:86:41:46:
be:0d:fc:4f:f4:7f:de:70:c9:e6:1e:82:a1:49:af:
61:43:e7:55:d9:70:14:37:f9:91:c8:3b:f0:2c:16:
f0:a8:a1:83:1a:19:e4:5c:7e:b4:22:54:2d:da:e9:
60:3b:92:19:78:ad:14:b7:13:7a:10:29:5d:71:07:
b2:2c:22:d8:79:6c:71:8c:eb:d1:98:65:ac:3e:30:
9e:2b:8a:3b:49:12:49:f4:66:ef:2b:cb:cb:44:72:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:20:49:84:60:32:3F:64:4A:DE:C9:44:15:F3:33:7E:EC:C8:12:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RiBJhGAyP2RK3slEFfMzfuzIEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4880::/29
2a0e:e980::/29
2a0f:14c0::/29
2a0f:17c0::/29
2a0f:1840::/29
2a0f:2dc0::/29
2a0f:2ec0::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:de40::/29
2a0f:e140::/29
2a0f:e5c0::/29
2a13:2e40::/29
2a13:d100::/29
2a13:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
8d:47:5b:65:70:58:e9:50:c2:7c:8c:25:94:80:c3:d5:06:91:
f9:0b:0e:9b:9d:35:c2:f5:b6:03:19:90:8e:9a:cb:b9:8f:6f:
08:e2:86:32:76:ae:64:45:71:ee:74:ff:4b:97:60:eb:81:14:
ec:1a:70:7e:6e:22:f2:96:1c:38:78:91:80:47:67:8a:d8:8f:
2f:a4:ad:5d:18:66:3b:1f:c2:61:b3:bc:5b:87:2c:37:25:bf:
d6:9f:7c:af:9e:6c:af:e7:c5:a0:14:44:56:4a:b4:ab:0e:36:
c1:f9:3a:e2:ef:44:28:64:f3:0c:ae:76:52:c5:6c:d2:6f:b3:
65:ea:10:d8:16:cd:a4:96:ad:4c:9e:7a:e6:5e:7d:45:85:f1:
4d:98:f0:99:1a:31:d4:3f:ca:c6:fd:29:cc:35:90:3f:3f:03:
2d:47:0e:a4:f7:02:6b:17:4f:3d:65:a4:cc:46:01:07:dc:e7:
7c:b8:2c:72:53:9d:5b:65:ac:2e:6c:45:db:24:6a:9a:85:90:
95:12:e2:4e:06:d9:46:14:4e:8e:5b:d6:ed:e4:9b:cf:30:db:
7c:96:4f:f6:a5:78:e9:16:c5:ac:28:28:21:e3:2f:22:be:d8:
59:65:9d:27:2b:e8:07:58:80:9d:4b:61:b9:18:3d:de:0e:f2:
38:b3:af:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:27:18 2025 by rpki-client