Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytpHB8WaYZsQx462F8oce_LDPAs.roa
File: ytpHB8WaYZsQx462F8oce_LDPAs.roa (raw, json)
Hash identifier: ccdZN4v4+VsQYuRB5M67rMOVpjNUf82S0oScOFSJjcE=
Subject key identifier: CA:DA:47:07:C5:9A:61:9B:10:C7:8E:B6:17:CA:1C:7B:F2:C3:3C:0B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748233939A95F63A09B2CB2DDED8E4E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytpHB8WaYZsQx462F8oce_LDPAs.roa
Signing time: Thu 02 Jan 2025 13:50:26 +0000
ROA not before: Thu 02 Jan 2025 13:50:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:1640::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 08 Jan 2025 07:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:23:39:39:a9:5f:63:a0:9b:2c:b2:dd:ed:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cada4707c59a619b10c78eb617ca1c7bf2c33c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:cc:9d:79:b2:a2:34:95:d0:02:8c:93:74:
77:8e:f5:d3:8e:50:88:b6:95:7b:f6:5b:c2:af:76:
5a:cf:8c:a6:63:52:77:1c:ea:20:c4:ab:40:ea:2a:
aa:c7:e7:a1:8e:c4:62:2e:86:cb:5b:8c:13:ea:c8:
c0:ae:b8:d1:64:9a:55:58:d8:42:1d:e8:50:33:06:
82:3c:e5:2e:6c:e9:23:76:48:96:cd:bf:e2:04:13:
84:d5:ee:e3:e2:6b:98:75:0e:2c:55:c2:22:a3:e0:
c3:04:76:32:39:cb:10:9b:ee:e0:77:b7:3f:66:34:
13:bd:12:32:cf:8f:f0:1d:61:60:ad:6f:0e:f6:c1:
e6:81:b2:78:47:9b:a5:3a:80:e8:bf:46:fc:99:90:
6c:23:dd:8b:01:ff:b4:e6:3d:d2:6d:ef:17:88:38:
02:3e:5e:86:29:55:18:45:40:92:c2:09:49:62:13:
2c:52:c5:13:c5:0e:61:37:ab:4c:74:e1:2a:94:1e:
c7:f1:82:54:24:d7:e0:96:e3:ca:15:38:ea:cc:34:
e1:79:fa:31:23:0f:f8:3d:00:ce:96:cd:e2:6a:e4:
43:01:26:6a:37:ae:3f:f3:72:07:8d:a0:ac:4b:fa:
7e:84:d9:a5:dd:a7:23:33:d0:cf:af:75:77:2c:86:
12:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:47:07:C5:9A:61:9B:10:C7:8E:B6:17:CA:1C:7B:F2:C3:3C:0B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ytpHB8WaYZsQx462F8oce_LDPAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1640::/29
2a0f:2a40::/29
2a0f:3140::/29
Signature Algorithm: sha256WithRSAEncryption
9c:6e:ad:49:e4:12:76:04:10:51:1e:cd:11:92:46:4e:bb:46:
1f:a7:fa:01:4c:66:4d:c8:0f:6b:38:93:af:4d:23:a0:7f:b1:
bd:56:1c:50:6d:71:e6:f0:43:8f:9b:14:b7:33:9a:8d:1e:df:
57:0f:f6:8f:68:ed:6b:d3:f2:9e:82:69:a5:9c:11:51:fc:5f:
7c:cc:db:f7:34:4a:42:e9:a2:e4:aa:ab:84:61:9e:73:ad:59:
5a:b3:2c:41:f2:0c:bd:80:ab:ca:7e:ff:a9:91:b9:3f:70:66:
55:ea:cc:99:42:14:4e:98:85:ae:27:28:4d:2d:e6:27:aa:c0:
db:36:28:7f:51:9b:f6:eb:1e:c6:f2:3b:5d:24:b9:17:2c:7b:
4c:91:80:b4:cb:f7:06:f7:86:a9:fc:15:0b:f2:eb:69:10:44:
f0:52:93:45:ad:86:22:46:9f:13:a9:91:47:9b:11:3c:42:94:
b0:e3:d1:41:eb:9d:8c:b1:7e:a6:75:02:08:8e:fb:3f:f3:dc:
8e:a2:96:50:fd:bc:0a:e7:ec:2c:12:ac:a9:be:e8:a3:d3:68:
c2:11:e7:c9:1a:a0:af:ae:3d:b5:35:de:98:99:4d:82:be:b7:
62:b6:68:d9:87:7e:f7:2d:7d:d7:85:9c:91:fe:f1:b2:22:4a:
66:3a:f4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:01:49 2025 by rpki-client