Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FADr2f8KgKjDsAkBXLfXDcjcNKA.roa
File: FADr2f8KgKjDsAkBXLfXDcjcNKA.roa (raw, json)
Hash identifier: MbDfGCESnTuKjIeOYbGbOhm7XwALDMCzDJd7kNRbX0Q=
Subject key identifier: 14:00:EB:D9:FF:0A:80:A8:C3:B0:09:01:5C:B7:D7:0D:C8:DC:34:A0
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01969FE64518EAE4E11612329C1DF9F4CDD8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FADr2f8KgKjDsAkBXLfXDcjcNKA.roa
Signing time: Mon 05 May 2025 10:03:10 +0000
ROA not before: Mon 05 May 2025 10:03:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0c:4880::/29 maxlen: 29
2a0e:2440::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:1440::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:1540::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:1840::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a0f:1f80::/29 maxlen: 29
2a0f:1fc0::/29 maxlen: 29
2a0f:29c0::/29 maxlen: 29
2a0f:2a40::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2ec0::/29 maxlen: 29
2a0f:2f80::/29 maxlen: 29
2a0f:30c0::/29 maxlen: 29
2a0f:3140::/29 maxlen: 29
2a0f:3540::/29 maxlen: 29
2a0f:9b00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:c400::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:fa00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 05 May 2025 13:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:e6:45:18:ea:e4:e1:16:12:32:9c:1d:f9:f4:cd:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 5 10:03:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1400ebd9ff0a80a8c3b009015cb7d70dc8dc34a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:92:f4:d3:a7:7e:32:a4:7b:71:5a:a1:58:
bc:48:15:10:83:e0:18:92:70:07:a0:78:c1:63:cb:
4d:51:4c:0c:4b:68:71:b0:08:b7:d4:b5:b3:ed:b7:
7a:2c:7a:de:78:80:3b:9c:58:5c:bb:11:2e:28:f2:
f0:55:87:59:a7:87:b6:cb:0b:34:cf:02:1e:b2:92:
38:84:e6:33:0f:eb:9e:bd:50:09:c5:d6:22:56:70:
5e:99:49:51:43:68:23:db:bc:be:fd:d6:be:8b:ff:
4f:cf:eb:df:0d:b5:e5:5b:7d:b4:35:24:16:4d:91:
26:37:66:4a:88:7f:53:58:f7:c9:8f:0e:bf:25:8a:
15:8d:77:be:1b:29:a9:3e:1f:e9:ce:0a:a3:6a:8b:
f6:c2:df:c5:d6:03:9d:e1:26:e8:85:9b:69:b9:1b:
e6:a3:29:0c:bf:c4:96:ba:ab:59:9c:53:fd:a1:1f:
6c:1a:98:9c:fa:b6:d4:90:c2:a1:b9:72:1e:b1:37:
74:c1:a9:01:7e:6d:f5:7b:81:00:b8:ae:d2:87:ba:
30:61:eb:a4:94:f3:65:4b:1d:ba:c6:34:3f:75:9f:
e4:15:39:f9:80:75:ba:0e:d4:03:57:40:0e:b8:13:
3a:aa:a9:76:9e:09:4a:75:6e:76:41:ca:f1:b0:ca:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:EB:D9:FF:0A:80:A8:C3:B0:09:01:5C:B7:D7:0D:C8:DC:34:A0
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FADr2f8KgKjDsAkBXLfXDcjcNKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:4880::/29
2a0e:2440::/29
2a0e:e980::/29
2a0f:a00::/29
2a0f:1440::/29
2a0f:14c0::/29
2a0f:1540::/29
2a0f:1740::/29
2a0f:17c0::/29
2a0f:1840::/29
2a0f:1ac0::/29
2a0f:1f80::/29
2a0f:1fc0::/29
2a0f:29c0::/29
2a0f:2a40::/29
2a0f:2dc0::/29
2a0f:2ec0::/29
2a0f:2f80::/29
2a0f:30c0::/29
2a0f:3140::/29
2a0f:3540::/29
2a0f:9b00::/29
2a0f:a200::/29
2a0f:c400::/29
2a0f:de40::/29
2a0f:e140::/29
2a0f:e5c0::/29
2a13:2e40::/29
2a13:d100::/29
2a13:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
62:56:c3:f2:56:d5:4d:47:e3:ac:16:2d:b9:ff:8a:b3:40:c4:
29:8a:22:15:83:8f:26:d1:3b:9f:ac:7a:2e:c7:ae:be:83:67:
48:54:8f:a8:1e:02:1f:75:8e:a1:cc:75:5c:d9:d0:5c:70:6b:
09:85:04:40:a4:70:89:49:42:1d:d3:16:3a:74:51:07:c9:cf:
01:5b:86:83:b3:1a:c1:b3:68:bd:f9:fe:0b:8b:d3:6a:b2:96:
77:10:02:50:e9:d5:eb:c2:f8:76:cc:f3:d5:54:75:6d:11:40:
a6:7e:aa:27:76:a0:fa:64:b3:fa:fc:67:32:99:9f:51:cb:48:
0a:92:92:35:4c:63:59:66:61:eb:07:fa:80:d2:b7:86:a3:b6:
3d:a4:06:b7:a9:f1:04:6c:da:dd:c0:3b:a8:e1:82:58:99:1f:
db:40:1b:0b:6c:44:1a:05:47:ab:50:01:41:6a:46:09:30:3d:
3d:79:29:2c:2b:e4:b9:b9:78:9c:6b:9d:b7:76:6b:b0:7e:47:
af:35:ad:2d:25:c2:76:be:9d:b0:cc:67:72:df:90:cf:4f:cf:
61:67:32:4e:bc:b7:ae:fa:5c:99:88:72:c3:7b:68:44:5a:92:
4e:5b:5c:b5:d8:ed:58:76:1f:44:da:8c:13:69:de:57:19:4c:
6e:da:9b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:21:49 2025 by rpki-client