Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yvKmCLqBow09mBD28Tlg26K7hPM.roa
File: yvKmCLqBow09mBD28Tlg26K7hPM.roa (raw, json)
Hash identifier: EYKQX1eBJIeBOuUnubFhRUj0dSH7h4YzbOKRIf4Jv5s=
Subject key identifier: CA:F2:A6:08:BA:81:A3:0D:3D:98:10:F6:F1:39:60:DB:A2:BB:84:F3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019024F8F821AB3D04D4FFAA94F7BBAA137E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yvKmCLqBow09mBD28Tlg26K7hPM.roa
Signing time: Mon 17 Jun 2024 06:53:34 +0000
ROA not before: Mon 17 Jun 2024 06:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 2a0e:5800::/29 maxlen: 29
2a11:3500::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 22 Jun 2024 08:21:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:24:f8:f8:21:ab:3d:04:d4:ff:aa:94:f7:bb:aa:13:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 17 06:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caf2a608ba81a30d3d9810f6f13960dba2bb84f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:bd:a2:b9:4e:cf:69:a4:5c:7d:17:37:a2:
03:d2:9b:79:88:2b:62:50:31:ed:1d:0a:dd:d4:70:
2e:3a:ba:f4:42:d8:85:63:46:88:2d:e6:ea:0d:8f:
6a:23:f4:3d:06:54:e2:db:dc:64:b8:b6:2b:b8:ce:
f1:2f:2a:a5:81:6f:5e:f3:94:21:d8:22:7e:80:c9:
3e:2a:92:03:fb:c6:a8:df:3e:8b:94:80:f1:50:f4:
f9:d2:2c:d8:c8:d6:fe:6e:f9:f9:32:40:ea:56:49:
af:9d:df:25:3f:ee:82:e8:84:3d:73:be:f8:5b:39:
4f:c3:5d:52:84:8e:8a:68:28:30:8d:cf:2e:64:6b:
27:ab:9d:fe:51:84:24:34:33:18:89:a7:ad:ac:32:
31:5a:20:20:ee:bd:76:44:59:f5:dd:fe:14:57:4e:
ba:2d:a6:c8:b5:55:5d:52:fd:37:46:4c:70:74:c8:
5d:1d:39:0d:b5:ce:b1:a5:ea:09:1f:58:c9:7e:9b:
dd:03:ce:ad:b9:ce:82:b1:9f:8f:2f:88:e6:39:e8:
9d:23:d4:17:d9:5a:38:e3:e0:f7:a1:c3:dd:c6:ae:
ba:1c:44:52:ea:01:10:92:8b:6d:1a:76:7a:2b:b9:
72:9e:99:6f:b6:b9:a4:27:b9:7b:ea:00:fb:e4:41:
1d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F2:A6:08:BA:81:A3:0D:3D:98:10:F6:F1:39:60:DB:A2:BB:84:F3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/yvKmCLqBow09mBD28Tlg26K7hPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:5800::/29
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
8b:e3:53:aa:2f:f9:e8:e9:61:2d:8d:04:48:c7:64:e8:d1:81:
e8:7d:e3:60:63:cb:86:76:98:ad:d1:8f:3c:0d:2d:08:3c:15:
9d:fc:89:1f:c2:26:4f:0b:e8:70:e1:8d:11:d1:db:b7:31:ab:
7e:ef:2e:87:6d:cd:a9:e8:d5:a9:dd:e7:ab:0e:20:59:30:af:
46:94:70:9f:07:67:9b:c1:bb:15:b0:b5:0d:5c:2b:54:1d:af:
9d:a3:f6:01:d0:6c:96:a3:48:ea:83:22:2e:6c:0a:5c:39:26:
50:87:78:d4:11:bf:df:98:fb:cc:ae:83:79:a1:fe:9d:c5:95:
6f:b5:12:30:23:a8:39:e0:dd:b6:a4:db:f4:52:7d:f5:69:02:
22:61:bf:21:c0:59:f3:a4:58:8a:8f:35:ff:ae:52:c8:34:e7:
24:b8:ef:a8:10:6e:c1:69:f6:ba:39:52:f9:a3:62:de:bc:7c:
78:44:27:66:fb:be:34:ad:2e:6f:94:02:56:2f:7f:93:e0:fd:
59:3c:4c:1d:c8:d2:4a:75:c6:8b:1b:af:4f:f7:fc:7d:a6:10:
eb:de:ce:83:6c:d3:a9:55:1b:86:ef:63:e8:5a:d1:e0:ac:24:
e8:3d:06:ad:fe:55:a5:00:6f:4a:87:d3:86:f8:59:de:ec:97:
e3:c4:1f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 04:31:50 2025 by rpki-client