Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cHiVej1u6FLFJiM_upncTmCTxUw.roa
File: cHiVej1u6FLFJiM_upncTmCTxUw.roa (raw, json)
Hash identifier: snR2eOUBjKmlMwx0W0ebP4MaPG1ib3Bqu+2iYVxXdig=
Subject key identifier: 70:78:95:7A:3D:6E:E8:52:C5:26:23:3F:BA:99:DC:4E:60:93:C5:4C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01922F0AC8928925308D9DC6ADB27D37021A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cHiVej1u6FLFJiM_upncTmCTxUw.roa
Signing time: Thu 26 Sep 2024 15:54:48 +0000
ROA not before: Thu 26 Sep 2024 15:54:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d06:66::/48 maxlen: 48
2a0f:1587::/32 maxlen: 32
2a13:8c84::/32 maxlen: 32
Validation: Failed, certificate revoked on Sun 29 Sep 2024 16:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2f:0a:c8:92:89:25:30:8d:9d:c6:ad:b2:7d:37:02:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 26 15:54:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7078957a3d6ee852c526233fba99dc4e6093c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:6d:16:38:62:3e:6b:5b:a3:3c:3a:ec:57:
0a:dd:6c:c0:43:48:25:19:12:3a:9a:93:79:bb:a4:
2f:34:81:c3:59:d4:8e:d4:2b:eb:aa:df:97:95:a4:
b2:e5:0d:91:0d:d5:d7:a4:56:5c:20:d8:4f:be:2d:
e2:a5:78:b2:bd:f5:01:58:4c:ca:b1:0b:11:04:bd:
b4:82:99:bb:00:dc:f7:7e:16:48:97:4d:8c:0b:48:
d3:e0:3f:ee:7e:87:5a:ad:56:52:f8:8c:9e:ba:15:
3d:e5:08:9b:51:94:2f:ad:50:af:47:49:af:eb:4e:
fe:70:0e:97:fc:de:38:57:7c:14:b6:69:a5:c1:17:
8b:cc:c1:79:42:16:21:e3:a3:6b:e8:39:34:a9:84:
e5:ac:89:52:24:b8:df:f9:77:71:8b:84:b9:d5:99:
57:b2:bf:91:54:16:0d:0b:c3:51:25:50:46:81:6e:
b8:05:60:f5:58:b9:ec:f5:c4:4b:59:79:4e:29:91:
4a:c1:2c:b2:e4:f2:64:b3:cb:c6:e2:63:88:21:da:
4f:fb:52:4e:54:d0:e6:af:a6:c4:9e:18:02:ca:94:
aa:56:58:f5:fa:2b:b7:84:b5:c6:42:19:5c:8e:94:
9a:77:45:a3:4f:cb:2c:4d:ca:09:9c:f6:0a:a2:87:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:95:7A:3D:6E:E8:52:C5:26:23:3F:BA:99:DC:4E:60:93:C5:4C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cHiVej1u6FLFJiM_upncTmCTxUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:66::/48
2a0f:1587::/32
2a13:8c84::/32
Signature Algorithm: sha256WithRSAEncryption
3a:8c:ab:14:ac:94:45:04:08:a5:bf:f7:af:b7:a5:d1:5f:73:
03:c2:4a:a3:5a:cf:5c:5f:f6:74:a7:72:1c:31:cf:65:a3:78:
b1:ac:bb:9d:a1:84:3e:78:76:fe:25:cf:3f:dc:45:8e:a4:a2:
09:1c:fe:2b:8c:95:6c:1e:33:e5:45:98:99:80:b4:30:f7:53:
a5:67:22:3b:14:5f:2f:95:e4:85:ae:3c:a3:08:68:a5:a4:cc:
90:d2:1b:e1:28:55:d9:30:36:eb:87:f4:34:67:2b:dd:f8:17:
b9:cd:17:35:e9:fc:5f:f4:a2:cd:f7:06:95:ef:4d:09:25:71:
5f:10:c3:90:43:d7:e7:46:1a:cb:0f:60:0d:80:67:d5:62:97:
5a:82:94:a3:08:b3:9c:06:75:6c:28:1a:0e:88:2b:dc:dd:34:
81:8b:0c:3b:85:52:a5:65:a5:28:ba:3c:97:01:a2:91:a7:95:
a6:a7:dd:9a:c1:18:5b:43:e2:7d:4e:cf:39:58:b6:21:a5:9a:
ae:b6:f4:3c:a9:c9:3f:07:dd:9d:66:83:32:77:22:76:57:21:
3d:59:d2:8f:5f:57:76:24:48:6a:fc:b0:12:03:a8:97:58:94:
4b:38:1e:06:51:44:a7:65:de:22:a9:76:fa:ed:4b:37:cb:dd:
d7:51:cb:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:05:52 2025 by rpki-client