Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_Hb-DsYqlEtGPYJGvMqg86YiZeg.roa
File: _Hb-DsYqlEtGPYJGvMqg86YiZeg.roa (raw, json)
Hash identifier: qA0amaPg54dYp/NI59D3iq7zi7gI+Mey3bno1CBwC1Y=
Subject key identifier: FC:76:FE:0E:C6:2A:94:4B:46:3D:82:46:BC:CA:A0:F3:A6:22:65:E8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CC9BC1ED8FA4921E3C6BC6811D83548AA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_Hb-DsYqlEtGPYJGvMqg86YiZeg.roa
Signing time: Tue 02 Jan 2024 10:33:18 +0000
ROA not before: Tue 02 Jan 2024 10:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 64.226.156.0/22 maxlen: 22
64.226.54.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 02 May 2024 20:31:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1e:d8:fa:49:21:e3:c6:bc:68:11:d8:35:48:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 10:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc76fe0ec62a944b463d8246bccaa0f3a62265e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7c:63:a2:40:f8:a6:68:a2:a7:e4:58:38:75:
42:b0:98:00:0b:5c:9e:7f:9e:b6:ab:32:79:66:1e:
4d:0b:7b:c9:77:66:2d:66:76:fa:ef:2f:43:2c:f6:
8d:1d:1c:05:a8:80:3d:f2:67:f9:f2:fc:fd:c8:a7:
9e:78:69:4a:50:4f:5f:e0:48:55:c3:1c:cd:42:08:
68:2b:d1:81:d9:f0:92:af:55:e1:5e:c3:45:13:04:
73:3d:53:27:40:02:2b:a7:72:81:d4:84:b1:2a:c1:
18:d5:31:88:19:73:a9:d8:33:c7:60:2e:8f:9b:9f:
70:43:01:e5:a5:e3:d3:1a:bd:39:3c:54:d4:93:73:
95:d6:05:87:29:dd:de:05:31:ea:e4:15:ee:c4:a0:
01:b8:76:31:3f:de:c0:1b:b0:43:27:66:58:80:60:
95:08:1a:53:e1:9f:25:09:1c:fd:e1:93:cb:f1:cf:
6d:a6:ec:7e:5b:aa:b3:e1:ea:e5:1a:1e:4f:b0:39:
16:2e:1d:9c:59:33:1e:44:5e:8e:f5:af:74:f1:eb:
64:41:4c:e5:e3:43:0a:6a:50:0c:c3:71:63:84:d6:
64:c3:13:93:fd:a5:4e:dd:ae:9e:c5:05:f7:37:0e:
aa:ac:04:5a:00:42:aa:d8:5d:b9:61:45:5d:71:e1:
b6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:76:FE:0E:C6:2A:94:4B:46:3D:82:46:BC:CA:A0:F3:A6:22:65:E8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/_Hb-DsYqlEtGPYJGvMqg86YiZeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.226.54.0/23
64.226.156.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:c2:ca:a5:05:77:44:2f:dd:2d:f4:30:1e:8a:0c:cb:2e:c6:
40:31:10:b1:39:2a:4d:23:44:63:a6:8d:cc:09:4e:ea:ef:b1:
db:5c:a3:a8:57:0e:ac:5b:40:db:41:63:27:13:3d:f3:35:34:
b7:b6:a5:df:21:1c:b7:89:ed:b2:9d:d7:ef:f9:b6:3a:6d:c9:
ac:a9:e1:24:be:80:4a:59:54:5b:38:72:73:e0:58:82:38:18:
b2:77:cb:f3:06:61:a5:ea:e8:0b:83:61:43:fe:5d:19:b3:60:
23:b4:c5:49:ff:cd:0a:96:b3:e9:30:fd:1a:25:a5:12:d1:ce:
7b:79:9a:ac:30:66:46:58:48:a7:eb:65:c7:bd:4a:3e:1c:2c:
1f:29:82:28:3f:fa:30:1f:d3:d4:fa:6a:d1:70:38:a0:8e:4a:
09:2d:4e:cf:ce:91:bb:a7:fa:76:74:bb:4b:85:46:3d:32:3a:
89:91:64:f4:a4:e7:4b:2b:e3:b2:7f:67:f3:9e:f6:7b:91:87:
c9:0c:fd:ff:00:ad:1d:4c:76:3c:ff:fc:73:7e:fa:c5:3a:e2:
ca:41:f9:09:ca:c8:08:5c:99:32:d1:37:89:4c:ea:0d:6a:54:
19:12:60:78:d2:91:64:f9:9a:13:c0:8e:d8:78:57:c4:b8:7f:
07:c9:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:25:57 2025 by rpki-client