Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iV3qCAuKq8pX8nIcqutuQFATuaY.roa
File: iV3qCAuKq8pX8nIcqutuQFATuaY.roa (raw, json)
Hash identifier: VbRRkbXBPT2n9JjaDQfZRmFNVWrsL8iTBj0kqcfezyQ=
Subject key identifier: 89:5D:EA:08:0B:8A:AB:CA:57:F2:72:1C:AA:EB:6E:40:50:13:B9:A6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019179EF2AB9AE706E4F27491DC9917C84DA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iV3qCAuKq8pX8nIcqutuQFATuaY.roa
Signing time: Thu 22 Aug 2024 11:53:22 +0000
ROA not before: Thu 22 Aug 2024 11:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401279
IP address blocks: 2a0e:f600:5f::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 17 Oct 2024 06:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:ef:2a:b9:ae:70:6e:4f:27:49:1d:c9:91:7c:84:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 22 11:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=895dea080b8aabca57f2721caaeb6e405013b9a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:01:c2:c2:cf:d8:ae:73:dc:3f:ed:b8:72:5a:
4a:f8:d3:65:c3:4b:9d:4d:e0:b6:ed:00:5d:af:db:
99:bc:90:43:d2:f9:f6:2b:c6:46:69:51:80:de:17:
fa:8b:d3:c0:e3:9e:53:27:bc:f5:04:82:7a:a6:52:
56:b1:59:be:76:5c:5b:36:3c:08:b5:ff:ff:a6:e1:
af:9e:74:7f:ac:e1:04:ce:ee:38:9c:e4:a2:f7:93:
51:34:08:f1:d4:96:0e:2e:66:aa:c8:3e:8c:77:ed:
74:a2:69:b5:45:22:d5:e6:67:8f:e3:8e:5c:9e:82:
51:9b:5b:25:51:41:88:94:a3:4c:90:a7:08:4a:34:
98:98:4c:38:b4:0c:8d:51:a3:b5:00:96:68:9b:b2:
60:a4:36:fe:66:d5:49:36:a5:6f:5c:2f:d4:dc:b5:
2f:39:8e:9e:78:88:c6:61:b5:bd:8b:bb:df:89:da:
93:0b:e2:aa:a6:1e:6a:69:6f:70:4b:5f:57:f3:e5:
b0:0f:aa:a9:0e:a4:43:f6:d1:7b:68:7b:84:93:8b:
35:5a:ab:0f:a7:78:e1:22:0e:a0:18:39:1e:38:fa:
1f:83:fd:c3:90:b0:4e:f1:8f:14:19:f8:92:e1:06:
20:3a:39:35:96:84:aa:8e:30:2f:b6:8d:68:01:ad:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5D:EA:08:0B:8A:AB:CA:57:F2:72:1C:AA:EB:6E:40:50:13:B9:A6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/iV3qCAuKq8pX8nIcqutuQFATuaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f600:5f::/48
Signature Algorithm: sha256WithRSAEncryption
16:6c:eb:69:17:8f:29:77:7a:d7:7f:38:fe:b0:0c:8e:43:3f:
f3:d5:bd:6c:8b:29:74:6d:b1:79:8a:cc:84:cb:6f:aa:9b:f9:
be:cc:87:c2:4d:dd:44:f9:50:1d:f8:02:9a:ef:6e:bc:33:f1:
fc:7b:38:ac:a9:7f:6a:1e:47:43:d3:d2:4b:16:ac:24:22:54:
c7:6c:78:2a:72:1a:3b:60:f4:12:d9:57:27:b9:87:20:d4:94:
5c:06:21:e5:38:55:a2:36:86:9e:d0:95:94:88:26:e1:eb:31:
f7:c5:46:01:48:8f:a4:68:f4:e2:23:b8:10:f4:82:f4:af:5d:
42:7d:31:ca:9a:9f:87:41:7f:23:4e:45:37:65:4e:0c:f5:3d:
c7:00:fe:77:4a:cc:d2:cf:d1:42:62:02:81:a4:91:cb:5c:95:
7b:9e:56:ef:8b:c3:ad:d4:da:a9:83:91:1f:2d:a3:15:37:8f:
29:d1:fb:f0:7b:05:e8:46:39:34:a3:cb:9b:9a:65:ee:85:f8:
40:bf:58:70:9a:69:15:8f:83:ab:63:45:2b:89:e9:34:a2:2c:
42:3f:39:85:01:b8:dd:f1:d2:04:45:33:3e:15:17:bd:9b:d8:
3f:cf:df:1c:e3:f6:d3:30:6a:c6:e7:3d:16:07:14:3f:77:e0:
f9:10:d5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:13:20 2025 by rpki-client