Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ipzk8NJ51iTs-A7QWGsTw-q6VNY.roa
File: ipzk8NJ51iTs-A7QWGsTw-q6VNY.roa (raw, json)
Hash identifier: Ls15HLpq9+dsRVWz37+32uFP77nT7HY+pRA+uYNOiyE=
Subject key identifier: 8A:9C:E4:F0:D2:79:D6:24:EC:F8:0E:D0:58:6B:13:C3:EA:BA:54:D6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019671D0C8F23152CA85523C253F3C6F0AAA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ipzk8NJ51iTs-A7QWGsTw-q6VNY.roa
Signing time: Sat 26 Apr 2025 11:17:10 +0000
ROA not before: Sat 26 Apr 2025 11:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a0f:1540::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a13:f40::/29 maxlen: 29
2a13:2ec0::/29 maxlen: 29
2a13:3040::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 30 Apr 2025 16:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:d0:c8:f2:31:52:ca:85:52:3c:25:3f:3c:6f:0a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 26 11:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a9ce4f0d279d624ecf80ed0586b13c3eaba54d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:50:84:da:05:7b:a7:9c:7f:e5:f7:5b:36:
ba:92:d7:39:21:a4:02:0a:fb:b8:58:d5:c6:e6:a5:
70:54:e4:79:83:dd:c0:22:93:43:4a:0d:fc:37:70:
4a:b5:39:2e:18:c1:3c:24:92:f8:8e:72:dd:6b:2f:
28:36:25:9c:5e:be:0f:9c:20:96:35:52:6f:e3:55:
96:56:02:1b:cf:26:4e:2f:f7:0b:b4:5d:32:2d:22:
77:2f:ba:17:f6:b1:4f:e4:32:66:9f:fd:55:0b:d0:
f8:01:8c:ae:a4:7b:64:bf:d0:0e:e2:77:23:a3:91:
2b:b5:85:f5:fe:f2:06:1a:35:e7:79:1e:9e:65:0e:
6a:7f:06:cd:10:aa:fa:e5:f1:5c:93:dd:30:76:60:
22:ca:dd:24:de:4d:f3:04:6b:da:d8:94:66:58:b6:
c5:80:57:28:01:49:d2:7e:3a:7b:56:e1:4b:4c:95:
99:fa:69:d1:de:91:0d:6d:b8:68:67:28:8f:1a:93:
b9:39:c7:ae:2c:81:57:71:2d:97:2a:ba:45:2e:e2:
5d:4e:3e:05:4d:0f:9d:a4:bc:4e:7a:73:e3:2f:16:
f2:97:19:27:d5:d6:9c:13:5e:c6:6a:df:aa:f7:87:
ea:b2:85:a0:83:1c:6f:f3:53:62:dc:82:43:b2:fe:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:9C:E4:F0:D2:79:D6:24:EC:F8:0E:D0:58:6B:13:C3:EA:BA:54:D6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ipzk8NJ51iTs-A7QWGsTw-q6VNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1540::/29
2a0f:dec0::/29
2a13:f40::/29
2a13:2ec0::/29
2a13:3040::/29
2a13:a100::/29
Signature Algorithm: sha256WithRSAEncryption
06:e1:cd:42:7d:a3:e9:c5:9f:2d:e9:66:0a:ec:4a:11:a0:23:
70:87:1b:5e:20:f4:55:6f:a1:33:8c:98:73:f5:8b:25:1d:6a:
fc:c8:40:db:fc:f1:e2:3f:18:6e:f4:18:1a:c2:0b:a6:89:08:
f9:6a:1c:48:af:d2:e6:70:a2:a1:1b:91:b4:13:74:b1:3b:98:
30:07:c0:a6:51:bb:36:74:fe:d0:b2:c6:f1:83:1b:73:2f:f7:
4a:c4:56:6f:e9:aa:a3:db:b5:c3:80:b4:c5:db:8e:9d:84:76:
36:b9:53:c5:25:24:d2:d7:f9:32:1f:f4:1b:fa:70:29:b0:fe:
8a:99:2c:81:4b:2e:60:6f:9a:b0:21:e3:82:f9:89:1a:a6:6b:
48:e1:00:c4:21:71:5a:36:4d:3a:0a:fc:4f:4a:1f:1c:8f:f6:
6d:24:48:c9:af:68:1f:b7:3b:a2:3d:b1:83:61:6f:8b:04:cd:
79:a3:59:6c:e9:dd:bf:fb:8d:5e:cc:da:65:05:cb:40:a0:6f:
99:4f:ef:79:9a:7c:d5:4d:a7:11:01:a9:9b:fc:b4:37:d8:1b:
6c:6e:04:a0:74:bb:3b:ee:9b:7f:5d:76:52:76:98:aa:cd:dd:
b2:aa:b4:fe:51:cc:14:c6:48:e8:9c:ed:79:79:54:71:a7:e8:
c4:db:19:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 15:35:14 2025 by rpki-client