Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j_ycUmRXstPxUEBD26QPw0f7A54.roa
File: j_ycUmRXstPxUEBD26QPw0f7A54.roa (raw, json)
Hash identifier: sxeUGCzHq2dz2EGbFyQEfSDQtcx2afUnPl6L84ixi8I=
Subject key identifier: 8F:FC:9C:52:64:57:B2:D3:F1:50:40:43:DB:A4:0F:C3:47:FB:03:9E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01979E6EFDD353E613379989C0DC6812C238
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j_ycUmRXstPxUEBD26QPw0f7A54.roa
Signing time: Mon 23 Jun 2025 20:16:03 +0000
ROA not before: Mon 23 Jun 2025 20:16:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 7029
IP address blocks: 2a0a:2940::/29 maxlen: 29
2a0c:7884::/32 maxlen: 32
2a0e:1a80:1::/48 maxlen: 48
2a0e:2240::/29 maxlen: 29
2a0e:c785:1::/48 maxlen: 48
2a0e:f200::/48 maxlen: 48
2a0f:1203::/32 maxlen: 32
2a0f:1580::/32 maxlen: 32
2a0f:1e80:d9a8::/48 maxlen: 48
2a0f:3043::/32 maxlen: 32
2a0f:31c2::/32 maxlen: 32
2a0f:3d80:bac::/48 maxlen: 48
2a0f:7d06:102::/48 maxlen: 48
2a0f:e847:acab::/48 maxlen: 48
2a10:5c00::/29 maxlen: 29
2a10:67c2:3::/48 maxlen: 48
2a11:b200::/29 maxlen: 29
2a12:ac43:1::/48 maxlen: 48
2a13:18c0:2::/48 maxlen: 48
2a13:e103::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 30 Jun 2025 19:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:9e:6e:fd:d3:53:e6:13:37:99:89:c0:dc:68:12:c2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 23 20:16:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ffc9c526457b2d3f1504043dba40fc347fb039e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:29:0d:96:6e:96:62:1c:87:55:61:a6:9b:31:
c6:ed:e0:3e:48:58:bd:a2:bd:d1:71:64:11:e4:4f:
ae:ed:3f:4a:4e:d1:d5:11:8e:9e:64:27:08:18:a0:
3b:12:f1:f1:2d:0c:e6:6e:12:70:e0:04:0b:31:0a:
79:df:43:4a:f0:88:7e:c8:18:52:32:a2:51:0c:ea:
a7:d8:df:ea:dc:52:a5:f3:dd:88:a6:2d:71:a6:9f:
3b:a7:f4:18:a2:cc:c8:50:d8:be:6d:86:4d:8e:0e:
36:47:b7:03:1d:73:05:b7:e3:66:ed:de:ac:2f:05:
12:ef:23:83:58:0d:e3:a9:96:d4:13:9d:f6:b9:24:
23:e7:5a:02:a4:db:cb:97:34:cc:c5:55:cb:8a:6c:
c1:0f:2e:a0:3c:81:f1:9f:e0:91:81:16:ed:75:44:
a1:36:45:fe:7f:96:02:20:7c:b8:30:fc:92:a7:95:
5e:33:c2:c2:b4:94:33:fb:af:a1:42:8d:4e:40:b4:
f2:06:0a:d2:93:9f:7f:76:a1:9a:44:b9:81:22:d2:
fe:b3:f1:c1:89:ac:9e:54:9b:a8:f3:fb:1a:1b:36:
e1:12:66:72:84:7d:10:0e:d8:d6:ec:66:d5:d2:3a:
11:47:f4:c6:c2:19:4c:2e:d6:6a:91:36:3e:8d:9b:
bd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FC:9C:52:64:57:B2:D3:F1:50:40:43:DB:A4:0F:C3:47:FB:03:9E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j_ycUmRXstPxUEBD26QPw0f7A54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2940::/29
2a0c:7884::/32
2a0e:1a80:1::/48
2a0e:2240::/29
2a0e:c785:1::/48
2a0e:f200::/48
2a0f:1203::/32
2a0f:1580::/32
2a0f:1e80:d9a8::/48
2a0f:3043::/32
2a0f:31c2::/32
2a0f:3d80:bac::/48
2a0f:7d06:102::/48
2a0f:e847:acab::/48
2a10:5c00::/29
2a10:67c2:3::/48
2a11:b200::/29
2a12:ac43:1::/48
2a13:18c0:2::/48
2a13:e103::/32
Signature Algorithm: sha256WithRSAEncryption
38:5f:7c:50:57:d3:2a:23:96:f6:22:0b:74:a7:b8:df:72:5b:
b1:f8:a0:72:50:6a:0a:7d:cb:8e:e4:a3:97:05:78:1e:db:f3:
27:57:8f:fa:c6:04:14:93:17:1d:ca:0a:60:d6:20:d3:d5:18:
93:25:4f:57:e8:6a:b1:93:ce:e9:ab:a2:59:91:4f:bf:ab:88:
de:59:25:40:f5:74:dc:54:ca:5d:1e:ae:8b:76:39:d2:4c:52:
6c:f2:c2:0c:a7:4b:60:f5:c3:d5:6a:cc:11:8e:54:51:73:81:
d4:0d:d0:ce:22:f7:7e:ca:d8:da:b6:df:59:76:0a:5c:19:b3:
65:68:9a:1c:d9:82:d4:dd:7f:f4:3b:f5:8d:90:31:00:c0:05:
cd:2f:59:a9:ac:2a:40:96:a4:d6:4a:56:0d:51:89:5c:56:ae:
5d:40:c6:af:77:99:ae:92:89:7a:d6:8d:3b:38:15:ce:79:d3:
bb:5a:9c:07:13:c1:fa:50:48:4c:82:32:5a:ff:b2:32:a1:74:
9d:20:8a:1d:e8:e7:1c:72:06:d1:fe:ef:4d:84:2f:6e:9b:06:
b6:2a:4a:89:3f:49:52:8e:56:15:b0:6f:16:99:0d:3d:3f:3a:
97:58:ef:15:a9:ae:d4:cf:e4:85:cf:80:c2:90:a0:d9:9c:b2:
f0:c3:2f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:59:04 2025 by rpki-client