Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aFDDmuDUskaIxniVu4xrz032Gyc.roa
File: aFDDmuDUskaIxniVu4xrz032Gyc.roa (raw, json)
Hash identifier: ADWjAsgZf0MfEOpd/ENbMHe2/+ZiV1Z+vxACfPLllSI=
Subject key identifier: 68:50:C3:9A:E0:D4:B2:46:88:C6:78:95:BB:8C:6B:CF:4D:F6:1B:27
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196AA83CB55B7F3655CADB3E847ADFE1A8E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aFDDmuDUskaIxniVu4xrz032Gyc.roa
Signing time: Wed 07 May 2025 11:31:25 +0000
ROA not before: Wed 07 May 2025 11:31:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208022
IP address blocks: 2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 07 May 2025 12:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:83:cb:55:b7:f3:65:5c:ad:b3:e8:47:ad:fe:1a:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 7 11:31:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6850c39ae0d4b24688c67895bb8c6bcf4df61b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7d:d7:60:e8:46:2b:02:1a:b1:08:ad:9d:2c:
6a:41:5a:d4:ea:8c:3e:52:9e:33:c1:f9:18:fb:66:
4e:cf:69:d7:82:a7:38:40:91:e8:3d:03:48:c8:cb:
58:a9:b0:89:30:a7:3b:2e:e5:72:db:72:15:cf:e5:
4d:c1:a8:1b:1b:11:50:df:60:c3:37:68:00:67:c3:
34:73:d9:40:29:d0:93:31:f1:ca:0c:1c:15:83:ba:
3c:7c:3c:af:38:69:5a:45:ef:70:d3:63:7e:27:29:
ce:bb:06:d8:df:88:0c:67:fe:1c:a7:59:b5:b1:b0:
32:a0:f6:1d:04:5b:27:37:4d:12:aa:94:78:58:de:
a9:94:11:dc:0b:54:67:db:66:c0:97:df:22:0c:9a:
4e:85:1f:f1:e5:88:5f:ba:59:33:27:59:34:cd:ad:
0e:b5:ac:6d:39:d0:9b:50:2f:37:01:14:71:3b:3c:
90:71:3b:7d:2c:53:c4:fd:96:c1:2d:9b:50:b9:e2:
f5:eb:6d:73:df:0d:3e:62:32:f9:3c:9e:e9:a3:2f:
2a:c9:71:b8:34:98:19:87:c4:bc:61:8d:3e:d0:7f:
00:b5:7d:ec:91:83:4f:f3:1e:e1:90:e7:89:99:74:
e2:e2:d3:cc:40:96:95:c6:3f:ae:74:56:c2:b3:c9:
81:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:50:C3:9A:E0:D4:B2:46:88:C6:78:95:BB:8C:6B:CF:4D:F6:1B:27
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aFDDmuDUskaIxniVu4xrz032Gyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
03:ed:4f:75:5f:8c:06:69:28:30:e3:15:ca:b8:70:0f:12:92:
55:2a:a2:ba:cc:07:70:eb:d9:74:8e:1b:09:06:35:0f:66:33:
81:d4:2b:3c:bd:2a:6f:2f:1b:7b:f4:f2:ec:22:5e:25:cd:2d:
2f:d4:29:78:fe:05:03:96:04:92:7c:1d:38:b3:7a:b9:b3:4e:
e7:30:08:c7:a7:98:f2:80:48:bf:43:cf:83:33:9f:8a:a5:6f:
a4:c2:28:da:24:14:b7:62:72:93:c9:88:82:f4:2e:fe:90:5f:
29:af:2c:5f:a7:f8:f2:30:dd:b6:94:1b:96:c4:1b:e6:83:bc:
86:a4:7f:51:69:74:85:7c:7e:6c:a6:1c:ae:64:6d:e9:56:db:
f3:5f:c7:d8:2e:2d:66:cc:56:4d:cd:27:1b:da:01:3d:6c:11:
ec:1e:39:02:85:56:66:60:3b:83:62:63:b6:d8:f7:15:a0:98:
00:1f:e7:9c:ef:94:4a:ac:d4:b2:a9:e0:ab:84:fa:43:8c:84:
4a:c1:02:f3:2c:04:dd:b7:9d:0d:ef:a9:50:5d:6a:82:2d:ae:
f9:38:0c:bb:74:df:a5:45:3b:fe:f1:dc:ff:7b:65:13:8f:53:
75:70:48:72:1e:b7:ca:87:c6:fb:72:ee:32:b2:29:bd:27:72:
b1:55:a6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 20:35:03 2025 by rpki-client