Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LL-WLD7UQaC0CkijJKvyEd-LqCE.roa
File: LL-WLD7UQaC0CkijJKvyEd-LqCE.roa (raw, json)
Hash identifier: 2kjWnkCw1aYX+dcmHTL1MrJGbZXo0B6vah3LHWNR5H8=
Subject key identifier: 2C:BF:96:2C:3E:D4:41:A0:B4:0A:48:A3:24:AB:F2:11:DF:8B:A8:21
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CEE7170464C571B1959850EF54CE2A204
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LL-WLD7UQaC0CkijJKvyEd-LqCE.roa
Signing time: Tue 09 Jan 2024 13:37:40 +0000
ROA not before: Tue 09 Jan 2024 13:37:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e6c6:1::/48 maxlen: 48
2a13:e101:1::/48 maxlen: 48
2a09:17c0::/48 maxlen: 48
2a0f:e1c0:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a12:ecc0:f::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a13:e101:2::/48 maxlen: 48
2a0f:e1c0:2::/48 maxlen: 48
2a09:17c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 14:36:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ee:71:70:46:4c:57:1b:19:59:85:0e:f5:4c:e2:a2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 9 13:37:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2cbf962c3ed441a0b40a48a324abf211df8ba821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:a7:0b:72:13:d6:78:b8:10:bc:b7:04:41:
b9:a2:83:e4:2e:fa:f2:0b:93:1c:71:a4:bb:83:5c:
d8:c4:05:90:2c:5c:53:1c:1e:8a:23:43:07:24:71:
cc:fe:f0:43:bc:17:d7:d7:23:0a:7c:90:de:83:88:
fb:28:f2:0b:57:55:6f:1a:32:c5:7f:a0:15:e1:78:
5b:89:bb:12:b6:f9:9f:df:a1:4d:e5:a1:22:b9:98:
7c:b1:1e:1b:15:2a:89:b6:5b:32:36:ab:c6:f8:89:
25:54:c0:41:1d:fe:0c:15:af:0a:d4:23:34:7f:c6:
dc:6e:06:6c:fa:80:b7:5c:3d:16:91:27:e3:62:68:
57:cf:94:68:9a:cf:7a:fe:e7:99:fb:75:71:0b:3c:
e8:9d:ec:58:d7:71:98:b1:74:c5:3c:bb:5e:e5:d4:
cc:9a:a7:82:d9:e1:fa:ae:11:e5:3b:19:ee:4e:93:
df:87:6e:27:4e:20:22:06:5f:5f:ab:f3:44:6d:81:
71:a6:da:59:dd:04:21:72:5e:11:74:21:b8:7f:42:
16:61:1d:30:9f:31:b8:52:f4:23:62:7a:0c:db:4c:
81:5b:43:82:5f:a2:ca:e2:83:be:79:d7:87:e1:09:
3c:69:21:44:4a:01:dd:94:d2:0e:33:21:8b:13:1e:
5f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BF:96:2C:3E:D4:41:A0:B4:0A:48:A3:24:AB:F2:11:DF:8B:A8:21
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/LL-WLD7UQaC0CkijJKvyEd-LqCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0::/48
2a09:17c1::/48
2a0f:e1c0:1::-2a0f:e1c0:2:ffff:ffff:ffff:ffff:ffff
2a0f:e440::/29
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a12:ecc0:f::/48
2a13:3380:1::/48
2a13:c700:1::/48
2a13:e101:1::-2a13:e101:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b3:49:c6:d9:30:b3:2d:e3:8a:17:ab:c9:8b:54:65:6b:cd:c0:
75:4a:1e:57:8d:49:33:57:d4:09:b7:78:cf:af:45:f4:77:2d:
4c:73:17:39:d7:51:04:7f:c9:18:43:70:db:14:6d:ec:6e:5d:
03:b0:08:14:90:30:e5:5b:bd:70:8f:ef:75:cc:57:e0:03:ff:
ec:5c:c5:fc:91:ad:96:ec:30:45:a1:18:6b:2a:8c:95:b3:f0:
e1:92:45:b8:26:ca:ce:54:dc:48:14:8a:a4:cb:c1:e5:8b:db:
58:68:84:57:36:cd:34:08:4c:01:95:b9:c1:60:3c:11:78:8d:
a1:2a:06:69:cc:90:ee:e7:13:92:50:27:07:42:23:95:8a:98:
10:e5:07:78:56:2e:64:7e:b0:89:ab:3c:09:c1:63:84:ca:b3:
26:70:08:71:71:f5:37:83:ba:6c:6f:aa:15:10:33:7c:38:6f:
9e:44:c8:54:42:89:fb:d5:85:25:e2:e9:b8:1d:c6:b5:2c:aa:
6d:07:4c:44:9e:38:5e:93:47:f5:d8:05:64:07:4c:e7:24:ed:
76:77:28:81:e4:82:8e:cb:5e:46:af:a8:4d:7d:a6:7a:85:81:
9e:fa:13:a1:b1:89:60:94:1e:b3:9a:5e:a0:bc:26:e4:d8:4b:
5d:28:42:27
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgISAYzucXBGTFcbGVmFDvVM4qIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTA5MTMzNzQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2JmOTYyYzNlZDQ0MWEwYjQwYTQ4YTMyNGFiZjIxMWRmOGJhODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmSnC3IT1ni4ELy3BEG5ooPkLvry
C5MccaS7g1zYxAWQLFxTHB6KI0MHJHHM/vBDvBfX1yMKfJDeg4j7KPILV1VvGjLF
f6AV4XhbibsStvmf36FN5aEiuZh8sR4bFSqJtlsyNqvG+IklVMBBHf4MFa8K1CM0
f8bcbgZs+oC3XD0WkSfjYmhXz5Roms96/ueZ+3VxCzzonexY13GYsXTFPLte5dTM
mqeC2eH6rhHlOxnuTpPfh24nTiAiBl9fq/NEbYFxptpZ3QQhcl4RdCG4f0IWYR0w
nzG4UvQjYnoM20yBW0OCX6LK4oO+edeH4Qk8aSFESgHdlNIOMyGLEx5faQIDAQAB
o4ICcjCCAm4wHQYDVR0OBBYEFCy/liw+1EGgtApIoySr8hHfi6ghMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTEwtV0xEN1VRYUMwQ2tpakpLdnlFZC1McUNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAIwbgMHACoJF8AA
AAMHACoJF8EAADASAwcAKg/hwAABAwcAKg/hwAACAwUDKg/kQAMHACoP5sYAAQMH
ACoP5scAAQMHACoS7MAADwMHACoTM4AAAQMHACoTxwAAATASAwcAKhPhAQABAwcA
KhPhAQACMA0GCSqGSIb3DQEBCwUAA4IBAQCzScbZMLMt44oXq8mLVGVrzcB1Sh5X
jUkzV9QJt3jPr0X0dy1Mcxc511EEf8kYQ3DbFG3sbl0DsAgUkDDlW71wj+91zFfg
A//sXMX8ka2W7DBFoRhrKoyVs/DhkkW4JsrOVNxIFIqky8Hli9tYaIRXNs00CEwB
lbnBYDwReI2hKgZpzJDu5xOSUCcHQiOVipgQ5Qd4Vi5kfrCJqzwJwWOEyrMmcAhx
cfU3g7psb6oVEDN8OG+eRMhUQon71YUl4um4Hca1LKptB0xEnjhek0f12AVkB0zn
JO12dyiB5IKOy15Gr6hNfaZ6hYGe+hOhsYlglB6zml6gvCbk2EtdKEIn
-----END CERTIFICATE-----
Generated at Thu May 8 22:58:31 2025 by rpki-client