Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gNmFtlKiTWvgNYGydhcK9Oyz6_s.roa
File: gNmFtlKiTWvgNYGydhcK9Oyz6_s.roa (raw, json)
Hash identifier: Bi9h1KVU4pmRAYkvjxFmZQy16iQ39p9QYPiyDdUDiU0=
Subject key identifier: 80:D9:85:B6:52:A2:4D:6B:E0:35:81:B2:76:17:0A:F4:EC:B3:EB:FB
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193F4976E395ED2867390F667E468CE6468
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gNmFtlKiTWvgNYGydhcK9Oyz6_s.roa
Signing time: Mon 23 Dec 2024 17:36:25 +0000
ROA not before: Mon 23 Dec 2024 17:36:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214481
IP address blocks: 2a0f:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:97:6e:39:5e:d2:86:73:90:f6:67:e4:68:ce:64:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 23 17:36:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80d985b652a24d6be03581b276170af4ecb3ebfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:46:0d:e0:00:e3:98:b6:a9:28:32:c6:b6:15:
49:b9:25:8f:c3:ee:1f:94:d0:40:50:11:e2:15:99:
54:b2:93:58:a8:86:ca:67:69:a7:de:2d:ed:a3:71:
0a:76:c7:6a:e8:41:54:77:1d:d1:41:8b:f8:e6:9e:
49:a9:b6:f6:04:bf:00:c9:8a:ea:cf:96:22:5d:a2:
58:7b:c2:cb:fa:01:91:0f:01:b3:9b:89:ff:7c:80:
80:08:83:02:69:a3:1f:9f:63:ab:95:84:e4:2b:cd:
d7:15:60:04:28:c9:d1:97:d3:69:11:13:54:9e:ee:
31:2a:da:77:07:2f:9a:3d:65:ec:e8:a1:09:41:9d:
c1:4f:b9:a4:1b:70:b4:c2:7c:5b:03:ed:35:8f:bf:
4c:4d:e3:1f:71:9e:79:d0:cc:c6:39:0b:6b:a8:7b:
dd:7c:b6:92:c5:3c:56:b5:19:93:e4:a5:25:c2:65:
13:81:c4:e4:9e:05:c5:2a:7d:33:52:8d:3e:9b:84:
35:d3:53:30:e1:88:8a:f1:69:96:8e:e0:10:13:12:
03:2c:43:ba:10:8c:8c:d9:f8:d7:74:05:47:4f:6e:
20:21:0e:d9:3e:1a:e0:e7:5c:9f:df:9e:fe:d6:49:
95:78:85:9b:fe:ef:7f:46:87:41:26:94:a6:57:6b:
76:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:85:B6:52:A2:4D:6B:E0:35:81:B2:76:17:0A:F4:EC:B3:EB:FB
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/gNmFtlKiTWvgNYGydhcK9Oyz6_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
72:74:5e:4a:6a:94:80:2d:ec:77:b8:0f:e4:9b:69:ea:0e:c0:
37:89:4c:03:e7:49:89:65:64:e3:85:7a:6d:eb:f1:da:6a:d7:
d0:7f:55:d8:ef:12:bc:ea:b4:f1:6a:1b:24:08:39:d5:62:a8:
0d:fc:c0:e3:f7:89:34:c0:9f:a8:85:c4:79:50:a5:09:e2:2c:
16:d3:0a:19:a6:9a:4d:a7:48:f1:bd:e9:01:70:02:b7:29:34:
43:bc:19:be:24:24:46:f0:42:ba:f7:58:b9:f3:e6:84:63:e3:
d7:c0:c2:7c:f0:5d:11:e0:5f:41:8f:66:76:cf:04:a8:ef:c3:
5b:2a:e1:70:f0:76:bd:ae:ae:14:d8:c1:02:6e:d1:f3:d0:d1:
84:86:df:80:bd:0c:2d:9b:de:9d:84:79:9b:f2:ab:fe:f1:da:
e5:dc:80:81:dc:4e:78:1e:93:a2:b7:41:e1:52:93:e8:5a:fd:
bb:12:88:5b:0d:87:3c:19:9b:7c:45:db:0f:77:ca:2c:fb:99:
90:b3:9c:7e:3c:41:6f:7e:d8:c2:85:a1:47:05:44:16:f3:a9:
26:22:7a:3f:e9:01:58:a6:3e:17:8a:72:d1:23:71:0a:7b:dd:
77:ed:62:26:13:71:e9:ec:d4:3e:60:58:3c:dc:d4:6a:46:a9:
11:11:ea:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:45:48 2025 by rpki-client