Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RaLRnCO_06XdCO4-aC8-CPwR1oo.roa
File: RaLRnCO_06XdCO4-aC8-CPwR1oo.roa (raw, json)
Hash identifier: vW0BwdU5RbbYoA5tuXtT+nIQbJomgERowM34erjLHkw=
Subject key identifier: 45:A2:D1:9C:23:BF:D3:A5:DD:08:EE:3E:68:2F:3E:08:FC:11:D6:8A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193B64AE94D0D05A58C47CA69EB2B73B864
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RaLRnCO_06XdCO4-aC8-CPwR1oo.roa
Signing time: Wed 11 Dec 2024 15:16:22 +0000
ROA not before: Wed 11 Dec 2024 15:16:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b200::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b6:4a:e9:4d:0d:05:a5:8c:47:ca:69:eb:2b:73:b8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 11 15:16:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45a2d19c23bfd3a5dd08ee3e682f3e08fc11d68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b4:db:0d:9c:e0:e9:c7:90:ae:d6:7c:5e:8f:
ea:7f:ff:56:b1:73:33:16:f0:ea:0d:a1:90:2e:0e:
e3:09:bb:ab:ca:75:e1:b4:4d:54:1d:95:cf:a3:57:
1b:d3:0a:f4:f6:cd:8f:9b:16:cf:74:43:11:d2:93:
e9:5f:2d:d5:ec:18:15:43:13:46:b8:af:5a:0f:07:
1a:c4:00:86:13:b4:12:09:a2:5d:a8:14:84:cf:cd:
58:1a:0b:0f:ee:62:74:38:65:5e:7f:0c:03:4f:43:
27:69:a6:5c:42:ee:81:63:a7:01:e3:77:02:55:3a:
11:29:47:94:81:c8:66:63:78:fc:3b:ea:b5:ae:5f:
3c:73:86:aa:ef:5c:66:83:cc:e6:5d:09:0c:1d:6f:
a4:d8:15:fe:a5:d7:7c:c5:9d:4e:d9:e4:76:e5:c9:
70:62:99:b2:cd:e7:14:02:d4:6e:10:52:22:54:80:
67:da:ab:b5:74:de:d9:22:d7:2d:b7:31:90:2c:af:
e0:16:49:b1:08:38:ba:8a:47:c9:de:bb:f0:ff:ed:
b9:3e:72:82:23:7d:e7:66:71:2a:27:0e:b3:29:eb:
9a:ef:f7:d8:eb:dc:5f:3b:4c:77:2c:8c:49:0a:a2:
e0:68:3a:46:a9:cf:a0:0b:12:24:02:10:d9:71:85:
01:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A2:D1:9C:23:BF:D3:A5:DD:08:EE:3E:68:2F:3E:08:FC:11:D6:8A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RaLRnCO_06XdCO4-aC8-CPwR1oo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:dfc0::/29
2a07:a300::/29
2a0f:1740::/29
2a0f:19c0::/29
2a0f:1ac0::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:1200::/29
2a11:1880::/29
2a11:5c80::/29
2a11:8700::/29
2a11:89c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b200::/29
2a11:b740::/29
2a11:e580::/29
2a11:efc0::/29
2a11:f040::/29
2a12:ba00::/29
2a12:dc00::/29
2a13:200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
4e:16:e8:d8:61:ed:a7:92:e3:a2:e9:e9:bf:3b:4d:1f:98:e6:
bc:14:44:4d:05:9f:ca:bf:01:d9:9b:c0:5d:ef:89:96:11:ec:
29:35:0f:dc:17:29:53:da:17:6d:3b:83:fe:34:36:47:85:80:
44:a0:83:f5:a7:56:d3:1e:fa:43:c0:92:3a:9d:2c:f1:6f:f1:
0d:77:fe:20:df:aa:4b:47:b1:09:25:77:73:15:23:95:9d:50:
40:a7:9a:73:ef:0b:af:47:a0:3b:2e:92:66:f5:87:9d:53:9a:
e2:b4:02:36:1c:bd:b8:51:ef:72:a7:58:7b:2a:62:c3:f8:b5:
09:af:2b:c6:cd:48:c3:c9:86:05:dd:f0:e1:cd:bd:0f:f0:38:
b3:ab:97:41:9c:b4:9a:26:8e:61:99:e0:23:d9:b7:94:2b:d3:
b8:5b:84:d9:cb:c7:a5:aa:3e:30:4f:13:17:e4:5b:61:29:6c:
11:45:7f:b4:5f:ed:50:20:5e:11:09:1b:95:90:69:29:d4:c7:
0e:fe:bb:e7:f7:7a:a6:d7:cd:20:69:cf:fc:db:d0:8c:89:9b:
ab:a5:b9:c5:2e:12:de:8c:56:15:65:4a:a2:36:10:1e:ea:c5:
0b:82:63:7b:72:bd:1c:fc:bf:67:94:12:97:d4:90:3c:51:cb:
cd:19:94:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:00:46 2025 by rpki-client