Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cdxXxPuKsJDTWvQOnWOccawtdLQ.roa
File: cdxXxPuKsJDTWvQOnWOccawtdLQ.roa (raw, json)
Hash identifier: Eh14qK38q8xEm6ViBTaUMtGXlsAlB41GOTxHJohvUeo=
Subject key identifier: 71:DC:57:C4:FB:8A:B0:90:D3:5A:F4:0E:9D:63:9C:71:AC:2D:74:B4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019232F392E88F5B97E9EE3691C367570A52
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cdxXxPuKsJDTWvQOnWOccawtdLQ.roa
Signing time: Fri 27 Sep 2024 10:07:56 +0000
ROA not before: Fri 27 Sep 2024 10:07:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 2a0f:1201::/32 maxlen: 32
2a0f:1e80:100::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 27 Sep 2024 11:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:32:f3:92:e8:8f:5b:97:e9:ee:36:91:c3:67:57:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 27 10:07:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=71dc57c4fb8ab090d35af40e9d639c71ac2d74b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:05:7b:4c:05:52:36:a9:f5:bd:d1:34:12:
bc:2d:08:f4:d7:f2:dd:ec:21:52:cb:11:07:36:b7:
80:37:00:c5:b9:20:01:aa:57:89:a2:1b:e5:0f:04:
eb:a1:5c:3c:0b:61:09:40:c8:40:1a:c8:11:7a:82:
6d:f6:b2:5d:06:11:75:e2:c1:13:44:f8:13:52:fe:
41:c5:42:9e:0b:e2:ec:2a:eb:41:58:3d:2a:36:15:
eb:43:bf:ee:01:04:e6:d2:ee:e0:fa:34:48:f9:d0:
24:a2:d9:e5:d4:12:d7:97:cd:f4:37:42:f3:0b:b1:
6b:2d:79:e9:f8:9f:22:a1:ff:44:d2:8f:ff:a4:cd:
e4:69:8b:12:07:e5:13:e0:77:60:43:41:bd:cf:40:
ba:bc:29:65:91:f3:3e:da:3a:e6:d9:88:7c:ce:69:
59:03:f2:e8:46:3f:8f:9c:f9:1d:5f:e2:55:8d:c2:
df:23:eb:3e:ee:c9:dc:25:6a:e1:77:94:0a:6b:b2:
5c:c3:b3:6f:87:80:5b:d9:4c:8f:d8:82:de:63:74:
79:57:b9:ff:d0:19:8a:2f:6b:c7:20:5e:f0:e1:26:
74:6d:0b:bb:b3:30:19:22:58:a7:87:15:71:a7:f3:
20:22:ee:86:95:f8:a1:de:47:ac:82:ad:42:52:2f:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DC:57:C4:FB:8A:B0:90:D3:5A:F4:0E:9D:63:9C:71:AC:2D:74:B4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/cdxXxPuKsJDTWvQOnWOccawtdLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1201::/32
2a0f:1e80:100::/48
Signature Algorithm: sha256WithRSAEncryption
cf:8f:bd:5f:0e:b7:7e:69:e7:28:49:d4:bc:21:c8:21:55:75:
a5:e3:6c:de:7e:e5:e9:c2:07:70:b2:b5:67:66:32:0f:95:8d:
fb:dd:23:58:c0:7d:95:b8:43:57:75:87:0b:f1:bb:70:51:a2:
f8:56:6d:9a:80:0d:36:3e:55:60:30:52:3d:39:a1:8c:dd:9a:
96:14:46:e7:82:31:39:54:2a:90:a0:82:1b:b7:bf:ab:cd:5c:
b0:a5:1f:44:4b:4e:2b:36:b0:8d:0c:f7:c6:4a:8b:63:8b:50:
9c:c4:46:1f:18:32:bb:fb:2a:19:64:a0:bb:02:8c:2b:dc:43:
f1:6e:b9:8f:b4:86:9b:7b:b2:ec:76:a6:b4:d9:91:5a:fd:4f:
71:dd:28:6a:4d:b3:94:ed:02:0f:71:51:c1:f2:40:23:9f:1b:
7a:57:08:d7:85:8e:3a:7f:71:01:95:a9:49:8f:89:2d:cc:6d:
c6:48:44:08:82:d3:b7:32:a3:dc:14:fa:bb:f5:3f:be:b0:92:
17:28:f2:28:98:c3:10:dc:91:37:99:5d:7d:fa:d0:d9:96:bd:
7c:83:fe:3b:8c:aa:2b:4a:36:1f:dc:79:b2:7c:a6:aa:4a:14:
44:a9:86:37:15:81:9b:f4:c2:c9:ce:63:79:d1:30:e2:c9:dc:
76:bb:d9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:14:35 2025 by rpki-client