Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lffqiS9yS3542baPwuyMy77FxvQ.roa
File: lffqiS9yS3542baPwuyMy77FxvQ.roa (raw, json)
Hash identifier: 4kgIO+zEKNfmbwGn7+4qzEisXZaJJzj30lSLKV9bsBE=
Subject key identifier: 95:F7:EA:89:2F:72:4B:7E:78:D9:B6:8F:C2:EC:8C:CB:BE:C5:C6:F4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195A3CBAFCDFF65C1BE777DE551BEB37219
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lffqiS9yS3542baPwuyMy77FxvQ.roa
Signing time: Mon 17 Mar 2025 11:09:49 +0000
ROA not before: Mon 17 Mar 2025 11:09:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:d380::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:1840::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:4900::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:fa00::/29 maxlen: 29
2a13:fd00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 17 Mar 2025 20:36:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a3:cb:af:cd:ff:65:c1:be:77:7d:e5:51:be:b3:72:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 17 11:09:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95f7ea892f724b7e78d9b68fc2ec8ccbbec5c6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:be:21:e2:ff:e3:1a:d3:b6:ef:91:54:30:15:
60:cf:19:5b:fa:63:07:24:9c:6a:6c:06:ea:fe:fe:
b8:3e:59:12:e7:de:3b:7a:eb:8e:38:b7:e0:b0:30:
71:b5:af:0b:12:b3:8c:8e:fc:b7:14:28:af:d5:0f:
2c:bb:35:dd:6c:7c:b0:61:8e:c2:ab:04:a0:29:2d:
0d:c4:8b:c5:26:32:b4:77:dd:d2:76:d0:66:dd:a0:
d1:98:88:c9:16:2e:9a:22:20:20:96:77:4e:53:4f:
ca:8a:e3:66:3d:47:4d:d0:b8:fb:f0:40:c6:7c:05:
9b:95:fc:7f:9c:02:fe:90:7d:33:8e:27:d6:24:7c:
ac:2e:e3:8b:6a:f2:c8:10:b5:3c:c9:ea:29:97:82:
3d:41:76:4f:3c:27:fe:26:10:a8:9f:a6:1a:c5:c4:
f0:cd:40:4a:19:68:f6:34:08:8d:55:99:b7:08:eb:
f6:d0:b6:d3:cd:01:3a:d1:2c:7e:68:eb:58:be:17:
13:39:3c:84:99:fa:6b:39:c3:24:bd:7f:37:11:49:
98:00:e1:0d:02:c9:89:2b:59:52:0e:1f:e9:a3:49:
66:15:11:31:d0:1d:ec:54:7e:b3:ee:f2:a5:e9:dd:
e9:20:c0:bf:41:7f:66:ee:27:2d:2c:78:71:ca:11:
4f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F7:EA:89:2F:72:4B:7E:78:D9:B6:8F:C2:EC:8C:CB:BE:C5:C6:F4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/lffqiS9yS3542baPwuyMy77FxvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d00::/29
2a0c:4880::/29
2a0c:d380::/29
2a0e:e980::/29
2a0f:14c0::/29
2a0f:1840::/29
2a0f:2300::/29
2a0f:2dc0::/29
2a0f:35c0::/29
2a0f:de40::/29
2a0f:e140::/29
2a0f:e5c0::/29
2a0f:e640::/29
2a0f:e9c0::/29
2a13:2bc0::/29
2a13:2e40::/29
2a13:3080::/29
2a13:4900::/29
2a13:d100::/29
2a13:fa00::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
9a:a0:71:85:2f:b5:c0:83:a4:b6:45:f2:40:1f:d2:82:ae:69:
e5:d7:70:9b:a2:0c:11:91:04:66:d1:e0:8f:74:c5:20:76:dc:
4e:2e:0c:9d:85:14:22:39:64:e6:e2:8a:d9:6d:91:8d:1c:c4:
c5:af:d0:0b:d3:a8:43:4a:8d:dd:06:d3:4b:49:35:bd:11:5e:
40:91:f4:53:c5:31:4e:d9:67:d6:49:4c:32:51:42:91:ed:81:
9c:2b:45:4d:49:b3:9c:d6:19:58:f7:49:93:e3:2c:8b:87:0a:
fb:07:61:f2:6a:82:bd:4d:52:56:0e:85:a8:16:da:5f:67:9c:
04:a6:8b:ff:50:91:17:59:3a:8d:f0:51:cd:2c:27:29:48:fe:
0e:2d:bc:e0:3c:1e:86:5b:47:78:36:d2:a5:04:df:07:a8:a2:
0a:c1:12:06:f7:54:bc:dc:62:ce:56:a1:36:70:16:91:cc:a4:
80:89:e8:d1:54:cc:c6:f5:ca:7d:aa:c6:b1:15:86:4c:7a:72:
84:34:28:3d:b2:8e:f6:41:63:3a:71:ba:bd:fc:30:ae:e5:60:
87:f0:3f:66:a5:47:2a:2d:e4:fb:24:a9:96:7a:38:99:14:d4:
a7:62:e2:0e:cf:95:39:6d:f0:11:e7:fb:68:dc:b4:f3:19:5d:
cc:24:b9:b6
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgISAZWjy6/N/2XBvnd95VG+s3IZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzE3MTEwOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWY3ZWE4OTJmNzI0YjdlNzhkOWI2OGZjMmVjOGNjYmJlYzVjNmY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw74h4v/jGtO275FUMBVgzxlb+mMH
JJxqbAbq/v64PlkS5947euuOOLfgsDBxta8LErOMjvy3FCiv1Q8suzXdbHywYY7C
qwSgKS0NxIvFJjK0d93SdtBm3aDRmIjJFi6aIiAglndOU0/KiuNmPUdN0Lj78EDG
fAWblfx/nAL+kH0zjifWJHysLuOLavLIELU8yeopl4I9QXZPPCf+JhCon6YaxcTw
zUBKGWj2NAiNVZm3COv20LbTzQE60Sx+aOtYvhcTOTyEmfprOcMkvX83EUmYAOEN
AsmJK1lSDh/po0lmFREx0B3sVH6z7vKl6d3pIMC/QX9m7ictLHhxyhFP4QIDAQAB
o4ICmzCCApcwHQYDVR0OBBYEFJX36okvckt+eNm2j8LsjMu+xcb0MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvbGZmcWlTOXlTMzU0MmJhUHd1eU15NzdGeHZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGwBggrBgEFBQcBBwEB/wSBoDCBnTCBmgQCAAIwgZMDBQMq
Cn0AAwUDKgxIgAMFAyoM04ADBQMqDumAAwUDKg8UwAMFAyoPGEADBQMqDyMAAwUD
Kg8twAMFAyoPNcADBQMqD95AAwUDKg/hQAMFAyoP5cADBQMqD+ZAAwUDKg/pwAMF
AyoTK8ADBQMqEy5AAwUDKhMwgAMFAyoTSQADBQMqE9EAAwUDKhP6AAMFAyoT/QAw
DQYJKoZIhvcNAQELBQADggEBAJqgcYUvtcCDpLZF8kAf0oKuaeXXcJuiDBGRBGbR
4I90xSB23E4uDJ2FFCI5ZObiitltkY0cxMWv0AvTqENKjd0G00tJNb0RXkCR9FPF
MU7ZZ9ZJTDJRQpHtgZwrRU1Js5zWGVj3SZPjLIuHCvsHYfJqgr1NUlYOhagW2l9n
nASmi/9QkRdZOo3wUc0sJylI/g4tvOA8HoZbR3g20qUE3weoogrBEgb3VLzcYs5W
oTZwFpHMpICJ6NFUzMb1yn2qxrEVhkx6coQ0KD2yjvZBYzpxur38MK7lYIfwP2al
Ryot5PskqZZ6OJkU1Kdi4g7PlTlt8BHn+2jctPMZXcwkubY=
-----END CERTIFICATE-----
Generated at Sun May 11 22:07:04 2025 by rpki-client