Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v67zg3G2t06ft8Ui3__rsaRXycI.roa
File: v67zg3G2t06ft8Ui3__rsaRXycI.roa (raw, json)
Hash identifier: Enj1HgsklVxgjUkfIkC6ZjboVzzQU0iXp8o06MY7IUo=
Subject key identifier: BF:AE:F3:83:71:B6:B7:4E:9F:B7:C5:22:DF:FF:EB:B1:A4:57:C9:C2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274830F290B89B77DEDD082DE0F45BF2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v67zg3G2t06ft8Ui3__rsaRXycI.roa
Signing time: Thu 02 Jan 2025 13:50:29 +0000
ROA not before: Thu 02 Jan 2025 13:50:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214481
IP address blocks: 2a0f:2dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 09 Jan 2025 08:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:30:f2:90:b8:9b:77:de:dd:08:2d:e0:f4:5b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfaef38371b6b74e9fb7c522dfffebb1a457c9c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:ca:20:dc:3e:15:78:15:21:30:89:aa:68:
ab:63:1e:75:6a:ba:0f:43:b3:b8:b7:c0:60:22:29:
8c:22:bc:77:70:f8:7f:a0:1c:f1:e7:3b:a4:5a:ab:
7d:d7:a9:06:5e:b8:64:c8:05:f6:8e:b2:25:f5:64:
ed:bf:ea:8a:ff:c8:ae:a1:d6:33:e4:9d:4d:b4:10:
a4:aa:c8:50:55:cd:9a:13:27:51:bd:c3:e4:93:78:
1e:ec:95:2e:2c:68:ef:31:28:9b:10:cd:6e:c9:44:
05:06:93:03:bd:09:ac:02:9f:09:86:fa:b5:5a:58:
26:ca:97:41:96:e9:c9:2a:15:64:cf:46:e6:bf:6f:
8d:a8:64:d2:7c:a9:62:de:0d:29:bc:3f:65:01:e7:
39:c0:c4:ce:3f:98:75:e9:5e:55:c3:00:39:11:94:
75:0a:33:cf:64:af:af:69:e0:fb:f6:5e:05:de:3e:
cb:47:38:f3:d9:65:81:4a:45:42:b5:04:5c:b8:7f:
20:a8:df:04:94:74:98:a7:d8:5a:28:24:78:28:34:
e4:12:d6:8d:69:d9:4f:b5:96:45:78:3d:31:8c:93:
a2:20:77:78:fc:f8:bb:7a:41:8a:88:b2:1f:b7:a7:
df:82:77:3f:e6:f0:a6:07:60:ba:7d:61:94:31:51:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AE:F3:83:71:B6:B7:4E:9F:B7:C5:22:DF:FF:EB:B1:A4:57:C9:C2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/v67zg3G2t06ft8Ui3__rsaRXycI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
b5:5b:01:42:62:27:13:1b:47:48:f0:6a:8a:2d:3d:79:bb:c3:
09:be:8e:72:b6:02:ee:c6:d4:f0:14:61:a1:ca:3b:74:47:3f:
66:fb:9d:e3:d4:27:57:3d:25:5a:64:06:3e:ec:d9:6b:17:de:
41:cb:ea:14:70:dc:b9:a9:43:d5:cf:5d:ce:ef:de:0d:6f:0a:
69:bd:70:ef:00:e6:ac:f0:c3:b2:6b:13:52:c5:a4:41:80:2e:
0e:0b:dc:77:fe:1b:02:61:f8:be:14:32:fa:ce:89:9d:ed:a2:
25:3c:96:d4:34:c1:51:db:92:aa:91:5e:af:f0:3a:30:58:f5:
53:66:b5:8b:c2:ee:f5:62:f8:cf:8d:ac:7c:7b:42:e5:01:aa:
8b:37:46:67:75:4f:2c:85:75:c5:90:63:77:f6:92:f9:56:2b:
c2:da:25:5b:f5:77:cc:2e:3a:9e:d2:80:42:7a:8a:21:f6:5e:
de:bd:2d:89:e9:09:9d:15:30:50:00:d5:5e:0b:5d:52:ed:6a:
a0:d6:b5:1d:75:58:0f:22:dd:00:aa:80:29:7d:fd:8a:42:87:
38:2c:80:04:cf:e4:1f:1d:91:68:e6:9b:08:da:8c:e7:0f:05:
95:73:38:69:94:6a:d4:b4:87:74:19:5e:c4:ad:0c:19:c1:87:
a8:9e:84:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:28:10 2025 by rpki-client