Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/naimu3x4uoaKo9vgny7aSRcAbzI.roa
File: naimu3x4uoaKo9vgny7aSRcAbzI.roa (raw, json)
Hash identifier: stmaHCU73M2jOYhPfMcGpyTVKYAQW4ZAgQdbtrxPFRI=
Subject key identifier: 9D:A8:A6:BB:7C:78:BA:86:8A:A3:DB:E0:9F:2E:DA:49:17:00:6F:32
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019671E6C3987D554C9F2DF5B01461080E5F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/naimu3x4uoaKo9vgny7aSRcAbzI.roa
Signing time: Sat 26 Apr 2025 11:41:10 +0000
ROA not before: Sat 26 Apr 2025 11:41:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209858
IP address blocks: 2a10:3340::/29 maxlen: 29
2a13:9f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 28 Apr 2025 05:40:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:e6:c3:98:7d:55:4c:9f:2d:f5:b0:14:61:08:0e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 26 11:41:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9da8a6bb7c78ba868aa3dbe09f2eda4917006f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:74:8a:a9:c3:8c:ff:5b:66:85:69:6e:e1:
04:12:02:10:03:af:e5:fb:87:f4:52:78:64:ad:69:
6d:cb:9a:67:22:1d:a7:43:11:de:37:fd:e1:e2:01:
20:72:86:a5:f7:ed:74:0d:0d:b8:66:f0:2c:c9:ce:
a0:f5:73:3d:d6:67:80:ab:49:47:2f:81:c3:48:5c:
aa:06:e2:2c:09:b1:25:a7:23:f6:dd:27:9e:d2:fb:
60:a8:bf:cf:b0:ff:ef:25:74:6e:d4:0c:25:34:7f:
fb:f3:82:65:72:ea:45:4b:9c:70:66:4c:0d:85:c6:
5d:12:66:2d:89:36:d2:f9:98:69:4c:a4:e4:df:a8:
54:e2:8c:8b:dc:fb:dc:e0:31:73:a7:8c:65:f2:da:
69:8b:1c:e4:25:33:5c:5c:86:9a:08:4b:6d:03:8f:
6b:e8:12:9f:af:fe:41:3b:8a:21:63:df:89:40:7f:
d3:a8:38:f9:db:09:d9:47:12:bf:bb:37:6c:2a:ba:
aa:8a:d1:74:a0:de:78:7a:7e:93:6c:43:8b:f7:a6:
3e:16:c4:be:ad:b6:98:2d:cc:e1:aa:d0:eb:bf:89:
ff:c4:fd:d5:b1:b6:b6:b0:0c:fd:f9:4c:8f:ea:f9:
e6:1a:8a:7f:3d:d3:95:b4:af:db:f3:de:06:7e:af:
a6:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:A8:A6:BB:7C:78:BA:86:8A:A3:DB:E0:9F:2E:DA:49:17:00:6F:32
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/naimu3x4uoaKo9vgny7aSRcAbzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:3340::/29
2a13:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
20:f9:dc:c7:6b:0d:93:eb:b7:91:f0:26:5c:ef:32:43:a3:03:
c8:d7:23:b1:27:44:2f:5a:a7:1b:15:e0:35:b2:79:f3:84:d1:
91:cb:35:3e:80:07:56:e6:2b:df:2d:53:3e:30:5a:b8:d4:48:
92:00:4a:c6:8d:d2:33:03:f7:4c:9a:68:85:37:1f:44:c8:c2:
dc:70:9b:19:dd:fd:fb:00:51:26:8e:2b:30:4e:3b:d7:2d:70:
55:97:fe:0c:55:ba:d4:b8:30:c1:26:71:c3:5d:23:28:ef:f1:
96:6f:e5:f5:f1:d7:c8:1e:93:7c:f5:21:2d:33:ae:d3:99:be:
84:64:ab:8b:de:f3:28:56:f6:07:7c:9a:ee:ea:13:d5:fa:af:
37:de:b8:07:2d:5f:f8:dd:c6:ce:fb:4b:11:d4:81:a0:ce:8d:
72:1c:15:b8:db:fd:d0:83:b8:d8:f6:a5:d2:47:55:47:d9:6b:
58:0e:21:88:20:7b:36:fe:d6:55:18:5f:cc:6a:59:97:ae:68:
7b:5a:9f:74:65:c8:43:92:93:37:b3:ed:c5:ff:bb:9e:09:94:
eb:71:48:e0:0f:a6:6f:ec:15:e2:a4:31:04:ca:1d:65:04:cc:
75:84:19:16:4f:69:07:d7:5e:24:8f:61:d4:ea:78:ea:9c:2c:
d6:35:22:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:59:13 2025 by rpki-client