Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ujmbrsRrGt4dV_2-smqCtBwKdmc.roa
File: ujmbrsRrGt4dV_2-smqCtBwKdmc.roa (raw, json)
Hash identifier: CN/cI7r6VMMa/8hFvfb7fJsczx69A0N/K6NJgrEHH94=
Subject key identifier: BA:39:9B:AE:C4:6B:1A:DE:1D:57:FD:BE:B2:6A:82:B4:1C:0A:76:67
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01924E4C7E1B87685FFC39371D21FD1028B3
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ujmbrsRrGt4dV_2-smqCtBwKdmc.roa
Signing time: Wed 02 Oct 2024 17:34:48 +0000
ROA not before: Wed 02 Oct 2024 17:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 2a0f:1201::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 03 Oct 2024 11:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:4e:4c:7e:1b:87:68:5f:fc:39:37:1d:21:fd:10:28:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 2 17:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ba399baec46b1ade1d57fdbeb26a82b41c0a7667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9b:53:b8:84:35:32:fa:9b:04:f8:ac:55:6e:
c0:76:c4:5d:04:89:d1:84:05:3b:2f:5d:0f:a4:c6:
f4:c3:c0:fd:55:cb:1f:72:90:f7:a2:ee:64:b3:44:
7a:6e:ea:e2:a9:bb:be:74:04:d7:ba:6b:ac:51:15:
24:c6:10:66:fa:f6:a3:af:46:cc:32:cb:47:b2:b3:
48:70:65:c8:f1:55:bb:3b:03:8f:55:74:cc:2a:d8:
55:0b:c5:d4:cd:d9:5f:9d:27:ad:6a:50:ce:c9:1c:
57:f0:1d:ed:1d:e0:3e:df:3d:7d:31:e5:e8:45:80:
6f:b3:89:c9:f5:9b:42:ca:63:4b:79:54:c4:03:18:
d2:66:d6:65:36:2d:68:22:77:b6:39:91:e9:95:a2:
0a:86:0a:06:10:6b:7a:e5:b3:71:bc:29:93:4a:5e:
23:42:e5:77:1f:4d:aa:11:8b:7e:22:59:bd:ed:9b:
93:6e:54:c7:02:b2:7a:9a:68:8b:18:0e:4a:2d:a1:
06:f0:3e:8f:24:b8:c7:23:29:d3:9c:44:80:2b:8b:
05:c8:da:db:37:d1:25:ce:64:2c:ad:f4:71:d7:d7:
b4:44:cb:ff:24:0e:ef:4f:13:52:ab:9a:fc:2f:1c:
16:0d:29:8e:23:f6:8b:0d:81:6c:62:91:17:89:5f:
5c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:39:9B:AE:C4:6B:1A:DE:1D:57:FD:BE:B2:6A:82:B4:1C:0A:76:67
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ujmbrsRrGt4dV_2-smqCtBwKdmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1201::/32
Signature Algorithm: sha256WithRSAEncryption
c1:d6:ce:18:49:7b:aa:38:dd:38:e0:f2:9a:4d:6d:38:89:0b:
09:6f:79:09:58:eb:bd:31:0f:03:36:39:f4:f0:36:9d:17:0e:
52:29:9b:e0:1e:2a:99:b9:d1:09:34:98:bd:b3:4a:a3:8d:da:
fc:0c:3a:94:71:63:e7:14:3b:aa:2a:0c:1b:d3:03:51:c9:10:
2a:4c:14:23:98:31:06:0c:78:4b:4c:b1:fc:9b:c8:08:07:3a:
af:3f:75:3f:d9:44:b4:12:b9:0a:fe:d5:db:b7:ae:05:48:ad:
9a:08:e7:5c:6b:c2:ec:3f:75:19:20:f2:7d:79:de:13:5c:bd:
7a:88:3b:f8:8d:82:c7:77:2c:cc:ee:55:93:ec:3d:ca:76:23:
c8:4c:47:3f:02:c5:c7:87:93:27:7d:bc:15:c1:80:fc:6e:d4:
58:0c:e5:47:78:2d:91:59:2b:b1:44:16:a3:f5:61:d3:73:3a:
16:fe:a2:af:bc:36:51:1d:90:c4:35:ec:8f:a2:c1:7e:6c:f8:
fc:3c:02:65:98:89:24:aa:bf:5d:93:29:2b:61:13:70:ae:bc:
4e:6a:ad:63:d3:2a:48:cf:57:f1:e3:16:ee:09:0b:b3:84:64:
e8:df:d4:d7:30:66:d7:2e:0f:3b:9f:bb:02:dd:6b:69:53:91:
a0:6c:ce:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:42:01 2025 by rpki-client