Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rOOL61dU8--jt2nKuVQfY-KpS8Y.roa
File: rOOL61dU8--jt2nKuVQfY-KpS8Y.roa (raw, json)
Hash identifier: tNI8JKdNCW0G7Nmwt/+Ksk7of/YDt2OR1jgaHyWB1H4=
Subject key identifier: AC:E3:8B:EB:57:54:F3:EF:A3:B7:69:CA:B9:54:1F:63:E2:A9:4B:C6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191E179001F5CA0F13FE6E13F2186C596EA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rOOL61dU8--jt2nKuVQfY-KpS8Y.roa
Signing time: Wed 11 Sep 2024 14:24:49 +0000
ROA not before: Wed 11 Sep 2024 14:24:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213230
IP address blocks: 2a0f:e7c7:c7::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 11 Oct 2024 09:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:79:00:1f:5c:a0:f1:3f:e6:e1:3f:21:86:c5:96:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 11 14:24:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ace38beb5754f3efa3b769cab9541f63e2a94bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:d3:e6:a2:d6:55:3c:29:b1:a3:b1:d2:0b:
75:13:14:bb:5b:9f:6c:ed:b4:1f:34:21:6a:45:2b:
3b:64:af:f9:ff:01:55:e3:bc:2e:02:a7:c9:66:4a:
50:b7:3a:98:61:8e:bf:60:ce:92:a8:fe:bd:b3:ea:
27:37:1b:c3:a9:d3:c9:04:2f:c7:ff:6b:3c:43:d7:
22:22:2e:63:3f:e8:99:55:32:61:34:18:95:b4:36:
b6:ae:aa:ae:79:0a:90:53:98:a4:e3:10:0c:62:98:
b3:2a:7d:d6:53:8e:fb:77:16:d8:ed:f4:2c:4e:aa:
3d:11:55:eb:c9:d1:07:44:90:d4:79:33:ed:e8:fc:
1d:fb:02:99:27:0a:d6:a8:12:70:3d:71:3b:b0:ce:
d6:92:49:aa:57:dc:a0:32:a0:ea:dc:bb:19:42:2b:
46:b1:8f:ab:46:15:f3:aa:10:6b:28:8f:dc:e1:78:
7b:07:95:0f:3a:71:d2:4f:78:84:37:d2:ab:89:65:
72:4d:99:5b:1c:ad:56:2b:d7:17:61:93:92:0e:b8:
e0:2d:aa:a1:a4:a9:0c:0d:33:66:ea:67:45:77:56:
41:46:96:00:b6:30:73:6d:3c:df:26:2e:a6:dc:15:
d3:ea:a7:b8:9f:67:00:5e:1a:a7:b3:ab:03:b2:3c:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E3:8B:EB:57:54:F3:EF:A3:B7:69:CA:B9:54:1F:63:E2:A9:4B:C6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rOOL61dU8--jt2nKuVQfY-KpS8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e7c7:c7::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d9:09:45:c8:5c:af:cb:7d:c0:0c:b8:f2:7d:72:fd:4d:89:
c3:ca:28:d2:66:e3:dd:7e:76:e4:1c:5c:a3:cc:fc:8a:30:51:
13:0d:1a:56:be:ed:17:3d:84:3e:87:81:6a:e0:6c:69:05:23:
00:f8:22:d5:46:ec:34:ae:bf:be:62:c3:0e:59:9b:10:10:83:
e3:68:4e:fa:1a:09:53:be:93:c0:5d:c3:b8:82:71:f2:47:0d:
1d:38:7d:17:34:76:77:65:01:23:70:18:39:ea:3b:df:ed:73:
3f:f7:de:fe:4e:ad:a3:fc:5c:3b:4c:7a:aa:1d:b1:b8:45:ec:
df:91:c2:d4:be:58:a5:9b:b4:16:82:4c:13:c7:ec:0d:08:eb:
63:ca:7c:b3:3b:1e:2d:50:a5:f8:46:dd:ff:90:93:42:0c:30:
fc:32:06:78:98:6b:3b:7c:64:c0:4d:90:a9:76:20:a0:4d:fc:
a5:c2:23:e6:44:58:fe:8f:27:78:f3:3c:ae:c2:cf:48:26:b3:
e4:28:20:b8:6f:2f:9d:98:60:a1:38:69:75:f7:ea:fd:fc:89:
6d:90:7b:2b:a7:80:55:ae:1d:b1:1a:d2:91:e0:fd:c1:31:5e:
c6:44:42:26:5e:bc:1c:af:75:a7:ad:d7:09:47:e9:7d:11:0f:
66:76:2d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:59:29 2025 by rpki-client