Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aHVHM0HZ6y-8RcVwGfNBtAa98XM.roa
File: aHVHM0HZ6y-8RcVwGfNBtAa98XM.roa (raw, json)
Hash identifier: 20GBPIwaIzEdtLbbasuwN1nWzFMGR5sILYlF8x5WMT4=
Subject key identifier: 68:75:47:33:41:D9:EB:2F:BC:45:C5:70:19:F3:41:B4:06:BD:F1:73
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01966C25AD0F1CB003F0D54383FADBF5395B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aHVHM0HZ6y-8RcVwGfNBtAa98XM.roa
Signing time: Fri 25 Apr 2025 08:52:10 +0000
ROA not before: Fri 25 Apr 2025 08:52:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 54852
IP address blocks: 2a09:b700::/29 maxlen: 29
2a0f:1540::/29 maxlen: 29
2a0f:dec0::/29 maxlen: 29
2a13:f40::/29 maxlen: 29
2a13:1940::/29 maxlen: 29
2a13:2ec0::/29 maxlen: 29
2a13:3040::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 26 Apr 2025 11:17:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:6c:25:ad:0f:1c:b0:03:f0:d5:43:83:fa:db:f5:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 25 08:52:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6875473341d9eb2fbc45c57019f341b406bdf173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:d1:e4:f2:59:3f:56:6b:f0:26:74:5d:6a:
9e:84:cc:aa:1c:33:69:c1:50:ca:29:93:57:44:2e:
42:56:a9:4e:c8:d1:89:07:08:e7:90:ec:f8:d5:c3:
21:6f:d3:3a:88:5f:80:af:a4:71:fb:37:fa:13:67:
58:1b:af:6f:13:df:ea:dc:4b:6e:b1:97:bd:82:7d:
fc:4c:67:0c:a9:56:e8:9c:c7:4f:45:0a:f7:36:00:
04:05:09:05:92:4b:a9:58:dc:4c:be:db:6b:c0:2d:
fe:c0:52:2a:a4:59:d2:fb:13:87:52:dc:c9:df:67:
cb:53:c1:5a:e3:8d:b5:45:bd:8d:8c:9b:71:43:b0:
25:bc:be:59:bd:e6:38:85:ac:5b:24:6c:b5:69:22:
8c:fa:99:ec:66:0a:21:26:3f:b2:7a:13:a0:6d:98:
07:4d:aa:27:0e:82:74:0a:1a:be:5a:bd:66:45:c8:
4b:2f:d4:bf:e7:ed:89:c5:50:ee:a3:78:c3:05:b7:
e7:db:2f:80:00:33:1a:65:dd:d5:d7:25:f6:b0:2b:
2e:8a:6a:49:28:43:3c:73:42:dd:56:b1:72:9f:a0:
82:49:69:6d:26:bc:bb:da:d9:01:01:e4:e5:32:72:
8e:2f:81:fa:84:a5:ce:43:06:10:05:22:36:d1:b5:
6e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:75:47:33:41:D9:EB:2F:BC:45:C5:70:19:F3:41:B4:06:BD:F1:73
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/aHVHM0HZ6y-8RcVwGfNBtAa98XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:b700::/29
2a0f:1540::/29
2a0f:dec0::/29
2a13:f40::/29
2a13:1940::/29
2a13:2ec0::/29
2a13:3040::/29
2a13:a100::/29
Signature Algorithm: sha256WithRSAEncryption
bd:88:b0:d7:c4:17:2e:a4:60:0d:65:33:3e:22:c2:af:63:f6:
c9:fd:7b:99:47:3a:49:86:d9:28:b3:c5:1f:12:11:a2:26:d2:
4d:c9:ee:6b:50:b1:88:3d:35:c4:f1:66:f2:a1:a1:84:20:ba:
60:89:13:03:45:74:f2:e8:2c:28:ee:b9:05:b1:54:02:f8:93:
d9:b2:45:19:0b:86:cc:eb:43:33:b6:88:e0:e5:23:89:8e:0b:
8e:2c:be:c3:91:a0:2a:c8:4f:dc:4d:c8:3a:e0:38:d1:7b:33:
95:d2:ed:bd:37:f7:bd:84:dc:93:51:dc:4b:be:5f:9a:61:f5:
b9:82:5e:22:e6:d8:8e:97:a4:78:a9:5f:98:5e:13:bf:37:46:
8b:ed:9d:2f:12:d3:c2:77:b1:a6:50:03:65:aa:1e:fc:b1:d9:
b0:82:9c:14:dc:1f:7a:a8:7c:78:bd:d1:b8:fe:ad:3f:17:0e:
f9:ab:2b:d2:66:50:f0:0f:a9:14:95:50:f0:81:8e:1f:72:ff:
99:52:b6:a0:ec:07:31:ee:4a:de:ba:a5:ea:18:c5:05:06:13:
08:c5:38:5e:9e:5d:04:1a:d5:28:aa:b0:a8:2a:b7:ef:69:16:
fb:5e:a2:8f:b2:3f:af:44:8f:8c:87:8f:5f:28:fd:5f:7e:dc:
2d:ec:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:26:26 2025 by rpki-client