Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v0M5ldkj1ZCe3nf2a3qFTFxf0qI.roa
File: v0M5ldkj1ZCe3nf2a3qFTFxf0qI.roa (raw, json)
Hash identifier: v6jlCVgr4O0nHBKcrzHYs8dHwE37pMVPm38tkrJfr/Q=
Subject key identifier: BF:43:39:95:D9:23:D5:90:9E:DE:77:F6:6B:7A:85:4C:5C:5F:D2:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019532706AC279C5714B893E47A9136BF243
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v0M5ldkj1ZCe3nf2a3qFTFxf0qI.roa
Signing time: Sun 23 Feb 2025 10:53:02 +0000
ROA not before: Sun 23 Feb 2025 10:53:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53356
IP address blocks: 2a0f:3540::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 24 Feb 2025 09:06:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:32:70:6a:c2:79:c5:71:4b:89:3e:47:a9:13:6b:f2:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 23 10:53:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf433995d923d5909ede77f66b7a854c5c5fd2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c1:5a:9d:e2:1e:0f:55:10:fd:e9:7a:75:ba:
80:07:c5:ac:4f:6a:3a:10:f6:0a:0c:1b:0a:21:5d:
a4:ae:4e:e3:28:3a:ed:f5:d9:7a:04:ee:3b:ac:e4:
24:74:cd:8a:66:0a:af:51:63:73:fb:ca:e3:bf:ea:
c7:85:ea:46:80:86:12:1a:2a:9d:4c:b8:85:5f:0b:
0a:f7:37:e8:79:99:bb:56:cb:9f:fb:b1:68:f9:48:
88:33:2d:3c:34:b4:41:c8:07:29:15:8a:88:87:52:
e3:d3:7b:76:e9:97:c9:94:88:98:88:05:7d:6e:36:
66:d6:20:68:f3:5a:cd:5e:60:0a:f1:1f:12:39:ea:
55:f4:f2:10:1d:0d:0a:d1:56:72:13:00:19:38:6b:
4b:ea:b4:e9:f8:cf:33:12:66:e9:32:bc:b7:98:9b:
52:49:4f:8a:ba:53:fe:ec:da:f4:56:72:cb:24:7a:
48:f9:87:10:4b:10:a5:34:21:a4:fe:86:3a:9e:8a:
c8:d5:d1:c5:ea:b6:05:c2:92:32:21:db:a9:95:ce:
fd:79:97:f8:fc:c3:84:b8:b7:e0:43:11:13:b8:95:
53:7b:82:44:fd:b1:4b:ab:a0:49:15:62:d8:43:c6:
95:bb:de:18:61:23:fe:21:33:4a:e7:77:8a:07:19:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:39:95:D9:23:D5:90:9E:DE:77:F6:6B:7A:85:4C:5C:5F:D2:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v0M5ldkj1ZCe3nf2a3qFTFxf0qI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3540::/29
2a0f:3640::/29
Signature Algorithm: sha256WithRSAEncryption
04:29:eb:22:0d:36:4a:c4:bd:8c:a9:60:28:1d:6b:23:6a:26:
11:83:73:17:78:db:97:25:e9:fd:41:a5:e0:45:70:0f:21:9a:
2e:f7:48:65:5d:77:63:16:0c:5c:09:3c:52:71:f0:e0:52:35:
98:c7:e8:24:a6:af:1b:57:fa:53:b5:cd:67:c8:e4:5c:7f:80:
6b:db:05:9a:69:c4:67:68:60:a9:b4:19:a2:f6:7f:78:77:a0:
40:8e:aa:15:07:4c:92:23:cb:9c:f1:54:d9:67:c0:e2:ed:bc:
43:66:9c:92:d7:12:4d:64:33:dc:d4:4b:a2:b4:35:67:1b:3b:
07:79:26:99:1a:b1:b4:ed:b0:6a:b3:e8:0d:8e:9e:76:71:ed:
a2:67:52:bb:3b:40:c9:e9:c2:57:c7:34:9f:5f:3d:8a:90:02:
4c:bb:a8:ff:6c:7d:ad:c5:f9:bd:a4:92:e4:07:f9:4a:be:74:
e4:a0:ce:c3:d9:c8:2e:d7:50:fd:0e:4a:3a:f9:28:37:80:1d:
ec:40:ff:ab:10:6d:39:4b:80:71:54:eb:c0:20:65:4e:bd:8c:
04:55:77:25:c5:0b:fe:8b:54:64:b7:56:ad:8e:ae:8a:63:e3:
1f:0b:e7:a4:dc:17:91:07:ec:5d:53:b2:c4:2a:89:38:17:98:
0e:f4:2f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:44:44 2025 by rpki-client