Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XRR2Ol4Qb3NZ0QCjyQ8zfFsHDEs.roa
File: XRR2Ol4Qb3NZ0QCjyQ8zfFsHDEs.roa (raw, json)
Hash identifier: jl2jkHUT7/tuZryvZdFcikHGwWZTCec0rCbQvk9HmT8=
Subject key identifier: 5D:14:76:3A:5E:10:6F:73:59:D1:00:A3:C9:0F:33:7C:5B:07:0C:4B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01942748155292E97EB37FC85E49D66121D0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XRR2Ol4Qb3NZ0QCjyQ8zfFsHDEs.roa
Signing time: Thu 02 Jan 2025 13:50:22 +0000
ROA not before: Thu 02 Jan 2025 13:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 2a0d:8f80::/29 maxlen: 29
2a0e:1a86::/32 maxlen: 32
2a0e:f500::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 11 Jan 2025 11:58:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:15:52:92:e9:7e:b3:7f:c8:5e:49:d6:61:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d14763a5e106f7359d100a3c90f337c5b070c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:21:c0:48:5a:36:ac:11:ec:0e:21:7e:e7:
f7:b3:6c:d0:32:7a:36:79:88:53:ee:e3:ae:d1:03:
41:93:b5:65:a9:e5:a4:de:cf:55:9e:68:dc:4d:f8:
9a:7b:26:cc:19:57:b9:6f:63:04:8f:dd:bb:24:67:
2a:09:f4:bc:14:e5:02:3c:77:3b:c2:2d:85:8a:0c:
69:99:53:b8:39:92:0d:8b:f7:2d:f1:a9:33:3b:4a:
49:4a:e5:6a:ce:aa:55:03:eb:c5:96:69:19:c2:80:
e7:25:e2:5f:91:5f:53:91:28:eb:59:b5:2d:28:a0:
b7:f2:f8:21:39:1e:ab:46:2e:a1:9c:d0:cf:71:83:
8a:29:26:5e:27:9a:e2:30:9d:8a:cc:89:5e:f0:00:
22:6b:7f:6d:9d:42:99:1d:7c:0f:60:e1:b9:a0:00:
3e:83:15:6d:44:7f:47:bb:79:72:78:2e:5f:f8:ed:
29:e5:95:41:ab:92:d5:ba:93:25:b1:0d:7b:89:42:
8b:22:49:c0:39:3e:d2:2b:3b:d3:2a:81:57:9a:c5:
e0:e1:bb:ca:f7:41:f6:b6:eb:fa:f0:82:05:1b:52:
04:7f:42:69:d0:ab:8a:1b:e9:eb:e4:13:ec:78:62:
de:7e:cc:9f:79:b9:0c:23:e6:e4:2e:68:dc:a2:ba:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:76:3A:5E:10:6F:73:59:D1:00:A3:C9:0F:33:7C:5B:07:0C:4B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XRR2Ol4Qb3NZ0QCjyQ8zfFsHDEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8f80::/29
2a0e:1a86::/32
2a0e:f500::/29
2a10:37c0::/29
Signature Algorithm: sha256WithRSAEncryption
99:ad:58:36:65:65:e4:73:8d:9c:27:ef:5b:f0:6a:2b:26:a7:
0c:42:02:6c:df:9f:66:38:ef:58:75:22:2a:b6:4c:2b:99:e2:
c9:96:76:eb:af:21:4e:56:d1:b8:84:e8:f5:11:8c:a7:3b:cd:
3c:c8:ca:ee:1e:3a:23:4a:d5:98:b4:90:5f:df:91:db:31:ad:
20:8a:3a:22:66:67:26:f3:3e:5b:76:c5:27:24:ae:f4:38:36:
9e:56:4a:f1:e1:7a:2a:f2:dc:99:77:c3:53:ea:04:4e:58:62:
24:3a:48:16:81:9d:50:6b:fe:ef:f1:37:85:85:72:6a:02:6a:
bf:df:0f:7a:35:58:08:70:9b:b1:2e:5e:8c:0e:d0:eb:7f:6d:
38:79:0f:23:4f:5e:3b:77:b5:3f:c1:00:66:fa:a5:d6:47:78:
c7:11:00:6c:23:37:48:fc:37:03:c8:5b:f8:fe:fa:b4:82:73:
9c:6d:06:91:4a:38:48:81:08:5d:35:34:2b:79:42:d0:1d:63:
71:f6:fd:c8:4c:8a:22:3d:82:6d:a3:86:c2:61:d2:dc:ff:56:
70:86:2f:b9:68:02:4e:9c:97:a4:aa:45:4a:97:b4:12:c7:ed:
02:75:99:ee:b5:e4:39:af:9c:9e:99:cd:94:ba:97:dd:37:a7:
b1:b1:1f:50
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQnSBVSkul+s3/IXknWYSHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDE0NzYzYTVlMTA2ZjczNTlkMTAwYTNjOTBmMzM3YzViMDcwYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2MhwEhaNqwR7A4hfuf3s2zQMno2
eYhT7uOu0QNBk7VlqeWk3s9VnmjcTfiaeybMGVe5b2MEj927JGcqCfS8FOUCPHc7
wi2FigxpmVO4OZINi/ct8akzO0pJSuVqzqpVA+vFlmkZwoDnJeJfkV9TkSjrWbUt
KKC38vghOR6rRi6hnNDPcYOKKSZeJ5riMJ2KzIle8AAia39tnUKZHXwPYOG5oAA+
gxVtRH9Hu3lyeC5f+O0p5ZVBq5LVupMlsQ17iUKLIknAOT7SKzvTKoFXmsXg4bvK
90H2tuv68IIFG1IEf0Jp0KuKG+nr5BPseGLefsyfebkMI+bkLmjcorqhiwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFF0UdjpeEG9zWdEAo8kPM3xbBwxLMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWFJSMk9sNFFiM05aMFFDanlROHpmRnNIREVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKg2PgAMF
ACoOGoYDBQMqDvUAAwUDKhA3wDANBgkqhkiG9w0BAQsFAAOCAQEAma1YNmVl5HON
nCfvW/BqKyanDEICbN+fZjjvWHUiKrZMK5niyZZ2668hTlbRuITo9RGMpzvNPMjK
7h46I0rVmLSQX9+R2zGtIIo6ImZnJvM+W3bFJySu9Dg2nlZK8eF6KvLcmXfDU+oE
TlhiJDpIFoGdUGv+7/E3hYVyagJqv98PejVYCHCbsS5ejA7Q639tOHkPI09eO3e1
P8EAZvql1kd4xxEAbCM3SPw3A8hb+P76tIJznG0GkUo4SIEIXTU0K3lC0B1jcfb9
yEyKIj2CbaOGwmHS3P9WcIYvuWgCTpyXpKpFSpe0EsftAnWZ7rXkOa+cnpnNlLqX
3TensbEfUA==
-----END CERTIFICATE-----
Generated at Mon May 12 04:30:30 2025 by rpki-client