Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VokMp9JbZsUj8zFNIOvTk-TTYZM.roa
File: VokMp9JbZsUj8zFNIOvTk-TTYZM.roa (raw, json)
Hash identifier: ItibM/ht+8FqAwtdefWp41krSxg2gXz1PfYkbnAFc0A=
Subject key identifier: 56:89:0C:A7:D2:5B:66:C5:23:F3:31:4D:20:EB:D3:93:E4:D3:61:93
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018CCF012792695B207C33C90CC839FDC525
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VokMp9JbZsUj8zFNIOvTk-TTYZM.roa
Signing time: Wed 03 Jan 2024 11:06:48 +0000
ROA not before: Wed 03 Jan 2024 11:06:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198231
IP address blocks: 2a13:d902::/32 maxlen: 32
2a13:2dc5::/32 maxlen: 32
2a13:2d41::/32 maxlen: 32
2a13:c906::/32 maxlen: 32
2a13:c905::/32 maxlen: 32
2a13:d700::/32 maxlen: 32
2a13:2d42::/32 maxlen: 32
2a13:d901::/32 maxlen: 32
2a13:2dc4::/32 maxlen: 32
2a13:d702::/32 maxlen: 32
2a13:c904::/32 maxlen: 32
2a13:c907::/32 maxlen: 32
2a13:2d43::/32 maxlen: 32
2a13:2dc7::/32 maxlen: 32
2a13:d706::/32 maxlen: 32
2a13:d900::/32 maxlen: 32
2a13:d703::/32 maxlen: 32
2a06:35c4::/30 maxlen: 30
2a13:d903::/32 maxlen: 32
2a13:2d40::/32 maxlen: 32
2a13:2d46::/32 maxlen: 32
2a13:2d45::/32 maxlen: 32
2a13:d704::/32 maxlen: 32
2a13:2dc1::/32 maxlen: 32
2a13:2dc2::/32 maxlen: 32
2a13:d906::/32 maxlen: 32
2a13:c902::/32 maxlen: 32
2a13:2d44::/32 maxlen: 32
2a13:c901::/32 maxlen: 32
2a13:d907::/32 maxlen: 32
2a13:d705::/32 maxlen: 32
2a13:d904::/32 maxlen: 32
2a06:35c0::/30 maxlen: 30
2a13:c900::/32 maxlen: 32
2a13:2d47::/32 maxlen: 32
2a13:2dc6::/32 maxlen: 32
2a13:d707::/32 maxlen: 32
2a13:c903::/32 maxlen: 32
2a13:d905::/32 maxlen: 32
2a13:2dc0::/32 maxlen: 32
2a13:d701::/32 maxlen: 32
2a13:2dc3::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 10 Jan 2024 14:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:cf:01:27:92:69:5b:20:7c:33:c9:0c:c8:39:fd:c5:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 3 11:06:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56890ca7d25b66c523f3314d20ebd393e4d36193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:02:e5:22:3e:68:3b:69:d7:c3:4e:c7:2e:3e:
60:ea:df:b1:da:10:af:e0:bd:70:31:79:f7:4a:e5:
a6:57:8b:0c:ea:23:21:28:84:bf:79:2d:4c:e3:ed:
8e:ee:94:0b:a7:b7:30:a4:f4:fb:d3:da:b3:81:c4:
8d:e5:11:58:37:ae:c2:b6:98:7c:20:b4:9d:68:15:
8b:76:be:ed:c6:58:ad:17:bd:53:80:23:49:99:75:
20:5a:bd:e4:61:c9:fa:ac:81:c5:1f:85:f4:e8:9e:
b7:3a:e1:07:1e:9b:e9:b5:0d:38:1f:59:8c:16:be:
9d:99:1b:40:99:a5:9b:92:3e:c8:e2:cf:3d:a8:4b:
d8:3e:af:8c:84:e4:36:d6:28:ee:6c:eb:10:e0:54:
bb:0f:dc:28:7f:f9:fa:2a:a0:e3:97:af:51:dc:4a:
d3:d3:bd:e9:d1:38:0c:9a:72:7b:bf:09:61:b1:66:
1a:ac:6b:92:c4:31:b0:16:64:3b:62:66:65:c2:48:
bf:fb:0e:33:33:e7:01:1d:ad:e7:60:3e:b6:03:ed:
09:00:eb:25:6b:2f:e6:a9:13:c8:48:b2:8b:21:9e:
cd:64:69:bb:e3:1c:26:03:50:81:91:55:88:a1:4e:
c9:8e:89:f8:cf:9c:24:69:58:be:7a:02:b5:77:fb:
11:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:89:0C:A7:D2:5B:66:C5:23:F3:31:4D:20:EB:D3:93:E4:D3:61:93
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/VokMp9JbZsUj8zFNIOvTk-TTYZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:35c0::/29
2a13:2d40::/29
2a13:2dc0::/29
2a13:c900::/29
2a13:d700::/29
2a13:d900::/29
Signature Algorithm: sha256WithRSAEncryption
44:e9:0d:4e:bc:a2:c1:47:06:64:78:43:f7:27:61:60:88:d4:
53:3c:5b:f3:b5:98:a5:cc:18:93:7d:27:d4:b5:ba:81:d9:3c:
49:51:a6:f0:e2:77:7f:e3:31:88:ca:5f:e2:ef:c9:f2:05:ee:
10:4e:15:9e:f9:73:ba:c6:42:8c:5f:72:c7:16:43:93:ca:8e:
ae:10:ad:ce:7f:52:bc:4c:11:ec:a5:a1:e3:48:1e:c4:fd:b5:
a8:59:68:dd:4b:6f:a2:e7:a0:0b:7b:79:71:66:62:4a:bd:5f:
0a:de:30:c3:76:11:f8:16:c6:ce:40:39:ee:14:4d:9f:f0:de:
93:95:eb:a8:ab:5a:98:75:d5:53:0e:88:7a:a4:70:d2:9e:f6:
f3:c9:5b:8f:35:f7:dd:35:eb:e3:6c:8a:d7:63:6a:b6:10:6c:
97:47:5c:52:07:3e:1e:10:3e:6a:04:e9:aa:65:dd:a7:05:08:
52:d7:42:1b:82:5f:a9:87:e3:38:1e:1b:1b:23:8d:e8:ed:c1:
08:e8:1c:7a:fe:e2:26:1c:0f:41:40:8b:1d:10:32:32:c7:2c:
ad:8d:24:32:81:86:f5:03:4c:69:9a:11:bb:fb:19:38:07:cc:
fc:64:cd:16:47:89:46:75:48:1c:25:19:3d:60:8b:25:5e:be:
e6:8e:6f:1b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAYzPASeSaVsgfDPJDMg5/cUlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMTAzMTEwNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Njg5MGNhN2QyNWI2NmM1MjNmMzMxNGQyMGViZDM5M2U0ZDM2MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywLlIj5oO2nXw07HLj5g6t+x2hCv
4L1wMXn3SuWmV4sM6iMhKIS/eS1M4+2O7pQLp7cwpPT709qzgcSN5RFYN67Ctph8
ILSdaBWLdr7txlitF71TgCNJmXUgWr3kYcn6rIHFH4X06J63OuEHHpvptQ04H1mM
Fr6dmRtAmaWbkj7I4s89qEvYPq+MhOQ21ijubOsQ4FS7D9wof/n6KqDjl69R3ErT
073p0TgMmnJ7vwlhsWYarGuSxDGwFmQ7YmZlwki/+w4zM+cBHa3nYD62A+0JAOsl
ay/mqRPISLKLIZ7NZGm74xwmA1CBkVWIoU7Jjon4z5wkaVi+egK1d/sRZQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFFaJDKfSW2bFI/MxTSDr05Pk02GTMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVm9rTXA5SmJac1VqOHpGTklPdlRrLVRUWVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAAjAqAwUDKgY1wAMF
AyoTLUADBQMqEy3AAwUDKhPJAAMFAyoT1wADBQMqE9kAMA0GCSqGSIb3DQEBCwUA
A4IBAQBE6Q1OvKLBRwZkeEP3J2FgiNRTPFvztZilzBiTfSfUtbqB2TxJUabw4nd/
4zGIyl/i78nyBe4QThWe+XO6xkKMX3LHFkOTyo6uEK3Of1K8TBHspaHjSB7E/bWo
WWjdS2+i56ALe3lxZmJKvV8K3jDDdhH4FsbOQDnuFE2f8N6Tleuoq1qYddVTDoh6
pHDSnvbzyVuPNffdNevjbIrXY2q2EGyXR1xSBz4eED5qBOmqZd2nBQhS10Ibgl+p
h+M4HhsbI43o7cEI6Bx6/uImHA9BQIsdEDIyxyytjSQygYb1A0xpmhG7+xk4B8z8
ZM0WR4lGdUgcJRk9YIslXr7mjm8b
-----END CERTIFICATE-----
Generated at Sat May 10 10:29:13 2025 by rpki-client