Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e-Jqk3wDduIFts3qj6UFd3FrVSQ.roa
File: e-Jqk3wDduIFts3qj6UFd3FrVSQ.roa (raw, json)
Hash identifier: zGbvlQJnO22V0aPB8qdF8F6d6dk05WHDZM2PfUDRcVM=
Subject key identifier: 7B:E2:6A:93:7C:03:76:E2:05:B6:CD:EA:8F:A5:05:77:71:6B:55:24
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01914A7446CCA016507B1810C1A441C137AB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e-Jqk3wDduIFts3qj6UFd3FrVSQ.roa
Signing time: Tue 13 Aug 2024 06:36:59 +0000
ROA not before: Tue 13 Aug 2024 06:36:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a0a:2d05:bc34::/48 maxlen: 48
2a0a:2d06:66::/48 maxlen: 48
2a0f:ee00::/32 maxlen: 32
2a12:ecc0:271::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Aug 2024 06:17:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4a:74:46:cc:a0:16:50:7b:18:10:c1:a4:41:c1:37:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 13 06:36:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7be26a937c0376e205b6cdea8fa50577716b5524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8c:bd:7c:fb:6e:8a:bf:b3:db:49:4d:f4:a7:
b9:1a:41:b9:e8:ad:ae:98:d6:bc:3d:f4:71:ae:7c:
85:3c:a3:a2:e1:8f:90:8c:18:fc:17:41:b1:bc:67:
c2:6c:74:bd:d0:5e:6a:9d:11:ec:f9:0f:9c:e5:ff:
d7:48:44:a4:8f:e3:b4:3d:f1:a5:d2:3f:e9:02:9b:
9c:26:e5:4b:4e:57:c9:ee:af:9a:ee:a9:1b:a3:a8:
80:2c:2f:7c:d8:cf:1e:82:f5:91:7e:36:2d:ac:57:
f2:a4:61:c5:ee:7b:6c:5e:13:72:f5:8b:f4:27:a0:
40:bf:27:83:4c:eb:19:dc:e1:0a:a2:81:9b:8a:76:
36:7d:22:7f:54:74:a2:e2:cd:89:44:18:ae:ba:99:
bf:63:e1:85:46:0b:da:2c:25:e5:bd:0f:5d:9a:33:
8c:73:1e:0c:94:cb:3f:d8:dd:e4:52:7f:72:48:42:
07:25:dc:03:6b:1c:40:f7:40:94:24:f6:95:83:52:
39:5c:4b:23:dc:1b:26:36:32:73:47:e0:3c:24:22:
77:92:f5:51:2e:e4:b0:79:57:5b:24:eb:ec:61:f1:
a7:12:b8:19:30:96:ba:fc:e2:f5:af:36:fc:1a:22:
d9:06:cf:a4:e1:c9:22:b6:c9:78:47:38:d1:d1:24:
b2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E2:6A:93:7C:03:76:E2:05:B6:CD:EA:8F:A5:05:77:71:6B:55:24
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/e-Jqk3wDduIFts3qj6UFd3FrVSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d05:bc34::/48
2a0a:2d06:66::/48
2a0f:ee00::/32
2a12:ecc0:271::/48
Signature Algorithm: sha256WithRSAEncryption
27:3c:d0:e4:be:62:64:b3:e9:31:8a:de:ab:2c:1d:0d:88:da:
53:5a:46:a1:d9:f5:ac:26:57:ad:33:e5:4e:a2:5b:4d:04:60:
e5:e6:b1:f1:6a:98:92:2d:f9:96:31:7c:81:d6:0e:68:c7:fc:
9a:24:47:3f:3b:93:72:b8:22:dc:04:5b:cc:d4:cb:28:cc:c4:
e9:0d:1d:4b:3a:2b:24:cc:52:df:cb:7d:73:c7:16:46:bf:73:
2c:04:09:89:20:f0:30:5a:14:8c:7d:eb:cc:2d:fe:3e:95:13:
e4:a8:a3:57:8a:11:9f:e4:fd:6d:1a:9b:5c:7a:7d:16:8b:7e:
25:20:68:6c:16:36:90:ca:2c:10:67:19:69:74:da:e8:80:a1:
32:70:1b:ea:7c:bd:f2:14:7b:e8:62:17:ed:23:04:2c:47:c0:
c0:bb:b4:b8:73:a6:f8:b9:28:51:e6:f4:be:21:62:e3:3a:44:
ce:59:a5:b2:16:51:05:8f:ac:a4:d2:76:16:ec:75:fd:76:89:
30:ce:18:41:34:1c:ad:c7:90:cb:82:c1:51:86:78:99:ce:07:
47:6d:01:db:4f:11:19:26:d5:35:0c:00:70:3a:f9:34:5b:02:
d2:cf:ea:75:95:ba:b8:33:ec:77:a2:a2:ef:06:bd:12:17:0e:
6d:01:43:45
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZFKdEbMoBZQexgQwaRBwTerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODEzMDYzNjU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmUyNmE5MzdjMDM3NmUyMDViNmNkZWE4ZmE1MDU3NzcxNmI1NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4y9fPtuir+z20lN9Ke5GkG56K2u
mNa8PfRxrnyFPKOi4Y+QjBj8F0GxvGfCbHS90F5qnRHs+Q+c5f/XSESkj+O0PfGl
0j/pApucJuVLTlfJ7q+a7qkbo6iALC982M8egvWRfjYtrFfypGHF7ntsXhNy9Yv0
J6BAvyeDTOsZ3OEKooGbinY2fSJ/VHSi4s2JRBiuupm/Y+GFRgvaLCXlvQ9dmjOM
cx4MlMs/2N3kUn9ySEIHJdwDaxxA90CUJPaVg1I5XEsj3BsmNjJzR+A8JCJ3kvVR
LuSweVdbJOvsYfGnErgZMJa6/OL1rzb8GiLZBs+k4ckitsl4RzjR0SSyBwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHviapN8A3biBbbN6o+lBXdxa1UkMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZS1KcWszd0RkdUlGdHMzcWo2VUZkM0ZyVlNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAAjAiAwcAKgotBbw0
AwcAKgotBgBmAwUAKg/uAAMHACoS7MACcTANBgkqhkiG9w0BAQsFAAOCAQEAJzzQ
5L5iZLPpMYreqywdDYjaU1pGodn1rCZXrTPlTqJbTQRg5eax8WqYki35ljF8gdYO
aMf8miRHPzuTcrgi3ARbzNTLKMzE6Q0dSzorJMxS38t9c8cWRr9zLAQJiSDwMFoU
jH3rzC3+PpUT5KijV4oRn+T9bRqbXHp9Fot+JSBobBY2kMosEGcZaXTa6IChMnAb
6ny98hR76GIX7SMELEfAwLu0uHOm+LkoUeb0viFi4zpEzlmlshZRBY+spNJ2Fux1
/XaJMM4YQTQcrceQy4LBUYZ4mc4HR20B208RGSbVNQwAcDr5NFsC0s/qdZW6uDPs
d6Ki7wa9EhcObQFDRQ==
-----END CERTIFICATE-----
Generated at Sun May 11 02:12:45 2025 by rpki-client