Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cUgEAUJRk7mBiiYHg_n2cHqBIkY.roa
File: cUgEAUJRk7mBiiYHg_n2cHqBIkY.roa (raw, json)
Hash identifier: qo+gNkfVd+sCNxlIwpT4gZhvWxYxiK+zhmBdBymwBnw=
Subject key identifier: 71:48:04:01:42:51:93:B9:81:8A:26:07:83:F9:F6:70:7A:81:22:46
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E99A6BCC578961D3FDB17859B232ADB4E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cUgEAUJRk7mBiiYHg_n2cHqBIkY.roa
Signing time: Mon 01 Apr 2024 12:33:44 +0000
ROA not before: Mon 01 Apr 2024 12:33:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:7d00:1::/48 maxlen: 48
2a0f:7d04:1::/48 maxlen: 48
2a0f:ea00::/29 maxlen: 29
2a12:ac44:1::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Sun 07 Apr 2024 08:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:99:a6:bc:c5:78:96:1d:3f:db:17:85:9b:23:2a:db:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 1 12:33:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71480401425193b9818a260783f9f6707a812246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:47:55:71:05:2a:55:b2:5b:ef:8b:f7:96:87:
55:d1:e8:02:38:7b:51:3a:7a:61:db:95:0d:35:b6:
5a:43:6c:63:88:a8:98:0e:9c:ea:11:d5:bf:51:57:
5a:e5:c6:4e:92:a1:44:96:22:18:dd:eb:30:63:02:
d1:ee:70:68:52:f6:84:10:1a:cd:25:e2:99:1d:4e:
70:30:50:84:20:96:ac:34:d7:97:b6:09:ff:bc:b2:
3f:bc:22:b9:fa:bf:f4:5b:25:e7:86:09:2f:c5:dc:
70:67:db:a8:bf:88:c1:76:ce:74:4c:b6:c8:78:fb:
dc:10:4d:30:ae:fb:3f:7f:56:f3:5e:fb:86:41:8d:
7a:1c:27:1b:f2:46:53:06:ad:3a:c1:2a:63:8f:90:
61:ef:ac:0e:86:5c:82:b9:06:1f:0d:e9:e7:19:93:
af:64:b1:2d:4e:ce:f9:2f:51:7f:2c:fe:c1:55:1c:
40:d2:e2:cd:e0:72:ad:30:ed:57:13:f7:8e:d6:a8:
6b:0b:21:00:92:99:0f:9d:52:05:e1:91:b8:8f:f7:
d4:de:99:60:cd:83:e0:62:c4:cf:45:6c:a9:a1:73:
71:53:3a:1d:db:73:02:88:5f:91:c7:f4:03:51:bd:
5f:00:76:c0:95:49:30:be:08:5f:fb:ca:a3:c2:09:
e7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:04:01:42:51:93:B9:81:8A:26:07:83:F9:F6:70:7A:81:22:46
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cUgEAUJRk7mBiiYHg_n2cHqBIkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:1a84::/32
2a0f:7d00:1::/48
2a0f:7d04:1::/48
2a0f:ea00::/29
2a12:ac44:1::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
60:44:16:da:78:d0:e3:f1:d2:cb:cc:1f:1f:4a:59:62:25:7a:
86:13:cf:ba:b3:7c:53:f5:a9:f2:70:8f:4f:69:c6:98:fc:36:
ba:88:a8:1d:f9:fc:9e:ce:92:23:ba:df:7d:d9:e1:04:d6:39:
42:25:c8:aa:a6:f1:14:44:d6:24:d8:89:ea:bf:4a:d9:a0:6d:
54:c1:10:d0:e8:8d:41:93:bb:d0:8a:5a:40:21:c7:4b:c1:37:
ba:71:d2:fa:86:a0:18:5d:d1:81:57:9f:88:d7:c4:08:cd:8a:
08:fb:23:e5:ed:ce:15:2a:0a:c2:d4:03:0e:1b:5b:60:9f:61:
79:23:eb:0e:21:fc:70:a7:66:36:a7:e5:a3:6b:bd:7e:22:73:
79:4b:83:00:a7:9a:d4:ab:bf:44:6a:2b:ac:50:a8:81:70:a0:
5d:c2:d7:5a:a8:bd:3a:e1:72:4a:d0:48:88:88:57:b9:02:f3:
4f:65:68:2b:56:c4:b5:ee:d9:e0:39:6e:cf:0d:cb:5b:5a:03:
65:b1:12:8a:f2:e1:35:8d:50:4d:49:e4:4c:8d:38:ae:7a:4a:
50:1b:d6:f4:87:0e:3d:34:34:71:02:ee:cc:04:72:51:96:01:
07:32:55:19:63:a5:eb:ad:28:cf:12:80:20:b2:47:44:75:68:
53:45:09:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 08:03:52 2025 by rpki-client