Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yKDB4teuei6xgnMvkq3wuL-ljnw.roa
File: yKDB4teuei6xgnMvkq3wuL-ljnw.roa (raw, json)
Hash identifier: nFcb+HgQRq0iYEPkASnfsXpuuzI+ymIGHniMwSx6E0A=
Subject key identifier: C8:A0:C1:E2:D7:AE:7A:2E:B1:82:73:2F:92:AD:F0:B8:BF:A5:8E:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01913611D9B9081134A8B2B57741AE0F839B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yKDB4teuei6xgnMvkq3wuL-ljnw.roa
Signing time: Fri 09 Aug 2024 07:37:05 +0000
ROA not before: Fri 09 Aug 2024 07:37:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396073
IP address blocks: 2a0f:3d80:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Aug 2024 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:36:11:d9:b9:08:11:34:a8:b2:b5:77:41:ae:0f:83:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 9 07:37:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8a0c1e2d7ae7a2eb182732f92adf0b8bfa58e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:71:e8:00:c2:e4:05:ce:17:18:f0:a8:7b:
5a:89:26:fe:f7:7d:8d:e8:ee:bc:eb:1b:b5:81:11:
d3:72:de:6e:3c:98:f7:7b:bd:b6:8e:2f:ce:09:53:
0a:fb:8e:7a:f6:37:71:df:0d:db:bf:9d:81:77:10:
9d:54:5a:a6:78:5e:a4:e6:d7:04:ea:af:f0:fb:d0:
de:ab:3c:b4:9c:b8:fa:06:79:13:93:8f:12:3f:5f:
44:6a:ce:8f:0d:38:0f:bf:73:22:bd:17:ec:13:b4:
61:51:ea:75:06:47:14:54:ef:3e:26:56:43:32:12:
e0:4e:b7:96:9a:61:80:b0:ba:4b:28:6c:23:85:27:
49:2d:7f:7b:ce:f8:8a:c2:b3:e5:57:a8:20:b6:a7:
69:e1:f8:be:fe:b4:3d:7e:4f:72:27:f4:76:b9:ab:
61:df:ab:8e:57:5d:29:1a:0c:68:74:a4:f1:4f:24:
23:d9:1b:4b:fc:67:71:7b:7d:fc:bb:2c:d4:f7:6f:
5f:8c:65:f9:d4:bb:e5:1e:8e:90:c1:9e:aa:d6:0a:
c6:11:36:18:bd:db:63:7f:01:c4:5d:bc:c2:a9:86:
8c:17:ef:b9:9f:6e:58:ad:16:62:c5:f0:2b:98:72:
e0:ad:5c:11:57:b1:f9:d1:7a:3d:5f:90:8a:f1:14:
ea:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A0:C1:E2:D7:AE:7A:2E:B1:82:73:2F:92:AD:F0:B8:BF:A5:8E:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yKDB4teuei6xgnMvkq3wuL-ljnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:3d80:2::/48
Signature Algorithm: sha256WithRSAEncryption
71:b5:9e:97:90:4e:4e:e6:42:a2:fd:12:77:c4:6b:42:dd:28:
e2:ec:be:28:14:ee:74:2f:36:45:de:a5:f1:e4:e2:ad:88:0c:
f7:d4:7a:51:3f:63:b9:e2:83:41:fe:a6:ff:93:59:3c:3b:d7:
f4:2a:b1:1f:df:bd:8b:fe:bc:b9:35:10:52:3d:a1:4d:28:a7:
86:fa:42:3b:33:e1:a1:a0:7c:87:24:59:a9:3c:ec:51:07:32:
93:5c:1a:9b:5a:7e:c6:6a:4a:f9:5b:28:b5:1f:01:82:ef:45:
b1:96:23:d9:33:ed:60:ec:55:01:34:07:dd:8e:fe:d9:21:ea:
42:83:fb:56:8a:46:f7:7e:82:f1:1e:f4:ee:a4:08:9c:1f:62:
80:51:a6:2f:3a:c6:b8:3a:43:f2:be:27:09:6d:8f:95:d2:01:
55:8c:46:e0:07:db:43:54:08:d6:30:92:0f:0d:1b:3e:30:7b:
5d:1a:af:b5:10:ed:d9:ec:9f:60:80:0b:70:27:2c:09:59:5b:
52:ee:9b:6a:84:2e:2e:79:53:c7:0f:88:6b:38:92:db:60:fe:
2a:57:05:b7:5d:af:c2:e1:47:0b:fb:b1:4a:32:5e:bb:53:02:
e4:51:1e:c1:23:6a:ee:7a:a3:63:a7:64:f5:ff:90:56:50:32:
15:7e:7d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 22:15:47 2025 by rpki-client