Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pp6OFd0wTDtjTxCgyZTIS8cq5p4.roa
File: pp6OFd0wTDtjTxCgyZTIS8cq5p4.roa (raw, json)
Hash identifier: vSMlHFf3RWSBDvupv3eC3te729kc6tUkNK1/mUaINfA=
Subject key identifier: A6:9E:8E:15:DD:30:4C:3B:63:4F:10:A0:C9:94:C8:4B:C7:2A:E6:9E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191719F7B5031ACE195A515408C945D75D7
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pp6OFd0wTDtjTxCgyZTIS8cq5p4.roa
Signing time: Tue 20 Aug 2024 21:09:22 +0000
ROA not before: Tue 20 Aug 2024 21:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 2a06:1184:100::/48 maxlen: 48
2a06:1184:101::/48 maxlen: 48
2a09:17c1:66::/48 maxlen: 48
2a09:17c1:77::/48 maxlen: 48
2a0a:2d06:102::/48 maxlen: 48
2a0a:2d06:103::/48 maxlen: 48
2a0c:7886:99::/48 maxlen: 48
2a0c:7886:100::/48 maxlen: 48
2a0e:15c7:88::/48 maxlen: 48
2a0e:15c7:99::/48 maxlen: 48
2a0e:1a83:77::/48 maxlen: 48
2a0e:f603:66::/48 maxlen: 48
2a0f:1206:55::/48 maxlen: 48
2a0f:1206:66::/48 maxlen: 48
2a0f:1584:66::/48 maxlen: 48
2a0f:1584:77::/48 maxlen: 48
2a0f:3d86:88::/48 maxlen: 48
2a0f:3d86:99::/48 maxlen: 48
2a0f:7d06:88::/48 maxlen: 48
2a0f:7d06:99::/48 maxlen: 48
2a0f:e1c1:22::/48 maxlen: 48
2a0f:e202:44::/48 maxlen: 48
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e6c6:101::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:e7c6:77::/48 maxlen: 48
2a0f:e844:22::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
2a0f:ea44:77::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Aug 2024 19:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:71:9f:7b:50:31:ac:e1:95:a5:15:40:8c:94:5d:75:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 20 21:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a69e8e15dd304c3b634f10a0c994c84bc72ae69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:83:47:4c:d1:d8:9e:b8:88:87:d3:41:bd:bf:
06:0d:0a:21:00:bf:6e:e2:27:b1:53:0e:a9:70:69:
0e:4e:b7:98:d3:30:6a:f2:ce:9c:8b:94:26:c0:ec:
1e:3a:de:35:36:7f:11:51:32:73:8e:34:bb:00:b7:
89:2c:1d:bf:c7:a8:a3:b5:44:f7:8e:7a:1d:18:c9:
63:e0:2e:26:59:df:37:6a:2b:f3:0f:bf:f2:e4:e3:
4b:ad:19:19:e9:1c:f1:5f:c8:37:96:06:1d:7c:2d:
d3:c5:1e:b4:3f:8c:82:52:e0:2e:99:6e:a1:9d:89:
57:fd:28:e5:f5:84:c2:15:63:c4:26:db:86:aa:f8:
58:ff:8c:07:e9:79:a8:1c:4b:56:e8:4b:47:b1:b6:
3b:88:bb:85:41:01:20:01:a6:c5:55:33:58:2a:64:
03:3d:a1:d1:71:82:9d:12:ef:96:8b:9c:2a:57:6d:
0e:61:9c:ab:e8:39:30:2f:a5:ae:dd:c6:bd:6f:1f:
a4:f4:db:f7:4a:f4:83:8f:ce:75:25:0d:1a:3f:2a:
77:9f:74:9f:fb:1d:51:f1:8c:5d:05:52:7a:37:1c:
41:db:ff:9b:ec:0d:31:15:c0:e0:96:36:88:a1:f0:
d2:0d:5f:eb:b1:3f:84:2f:ac:68:55:f6:d5:a9:86:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:9E:8E:15:DD:30:4C:3B:63:4F:10:A0:C9:94:C8:4B:C7:2A:E6:9E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pp6OFd0wTDtjTxCgyZTIS8cq5p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1184:100::/47
2a09:17c1:66::/48
2a09:17c1:77::/48
2a0a:2d06:102::/47
2a0c:7886:99::/48
2a0c:7886:100::/48
2a0e:15c7:88::/48
2a0e:15c7:99::/48
2a0e:1a83:77::/48
2a0e:f603:66::/48
2a0f:1206:55::/48
2a0f:1206:66::/48
2a0f:1584:66::/48
2a0f:1584:77::/48
2a0f:3d86:88::/48
2a0f:3d86:99::/48
2a0f:7d06:88::/48
2a0f:7d06:99::/48
2a0f:e1c1:22::/48
2a0f:e202:44::/48
2a0f:e6c6:100::/47
2a0f:e7c6:66::/48
2a0f:e7c6:77::/48
2a0f:e844:22::/48
2a0f:ea44:66::/48
2a0f:ea44:77::/48
Signature Algorithm: sha256WithRSAEncryption
aa:4b:03:00:65:86:a9:42:9f:3c:49:4b:5a:9c:6a:eb:17:41:
8c:99:00:a0:29:86:a9:49:1f:aa:c0:d9:05:1c:76:0f:cf:ff:
77:21:2d:be:b8:a7:ac:4b:00:cd:fc:ba:98:f1:3d:4b:b5:6c:
ac:62:03:56:d2:27:f9:ff:a8:15:d6:77:f3:52:3a:66:00:1b:
cb:82:96:f6:de:dc:b3:d6:f1:98:14:fb:c0:79:63:cf:df:c3:
55:f2:fc:de:f7:c6:73:b0:f7:e3:14:32:a4:3d:e6:66:d1:3a:
94:ee:c9:df:15:6e:73:15:04:01:ed:05:04:76:1c:4d:9d:0e:
4b:2b:94:b0:73:84:02:b2:dd:3f:d0:10:73:2f:e3:18:bb:17:
17:1e:69:6c:18:f0:4e:20:dd:a0:60:a5:00:47:b4:2b:db:94:
be:4e:37:f3:30:88:9c:d9:ad:15:10:1b:75:e8:f1:9c:4e:0c:
45:1d:4e:01:cd:6e:ab:83:22:92:80:82:82:00:25:30:dc:14:
b3:59:0e:bb:88:2d:3b:d2:89:d8:1d:2c:64:b9:fd:d5:c4:52:
28:01:d4:8e:24:5d:87:ca:26:e5:8f:c3:44:c6:15:56:49:69:
59:37:9a:81:31:dd:8a:da:80:e2:8d:f2:a8:ba:c8:3a:3e:5a:
f2:3c:45:f4
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAZFxn3tQMazhlaUVQIyUXXXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODIwMjEwOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjllOGUxNWRkMzA0YzNiNjM0ZjEwYTBjOTk0Yzg0YmM3MmFlNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyINHTNHYnriIh9NBvb8GDQohAL9u
4iexUw6pcGkOTreY0zBq8s6ci5QmwOweOt41Nn8RUTJzjjS7ALeJLB2/x6ijtUT3
jnodGMlj4C4mWd83aivzD7/y5ONLrRkZ6RzxX8g3lgYdfC3TxR60P4yCUuAumW6h
nYlX/Sjl9YTCFWPEJtuGqvhY/4wH6XmoHEtW6EtHsbY7iLuFQQEgAabFVTNYKmQD
PaHRcYKdEu+Wi5wqV20OYZyr6DkwL6Wu3ca9bx+k9Nv3SvSDj851JQ0aPyp3n3Sf
+x1R8YxdBVJ6NxxB2/+b7A0xFcDgljaIofDSDV/rsT+EL6xoVfbVqYaQaQIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFKaejhXdMEw7Y08QoMmUyEvHKuaeMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcHA2T0ZkMHdURHRqVHhDZ3laVElTOGNxNXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgfEEAgACMIHqAwcB
KgYRhAEAAwcAKgkXwQBmAwcAKgkXwQB3AwcBKgotBgECAwcAKgx4hgCZAwcAKgx4
hgEAAwcAKg4VxwCIAwcAKg4VxwCZAwcAKg4agwB3AwcAKg72AwBmAwcAKg8SBgBV
AwcAKg8SBgBmAwcAKg8VhABmAwcAKg8VhAB3AwcAKg89hgCIAwcAKg89hgCZAwcA
Kg99BgCIAwcAKg99BgCZAwcAKg/hwQAiAwcAKg/iAgBEAwcBKg/mxgEAAwcAKg/n
xgBmAwcAKg/nxgB3AwcAKg/oRAAiAwcAKg/qRABmAwcAKg/qRAB3MA0GCSqGSIb3
DQEBCwUAA4IBAQCqSwMAZYapQp88SUtanGrrF0GMmQCgKYapSR+qwNkFHHYPz/93
IS2+uKesSwDN/LqY8T1LtWysYgNW0if5/6gV1nfzUjpmABvLgpb23tyz1vGYFPvA
eWPP38NV8vze98ZzsPfjFDKkPeZm0TqU7snfFW5zFQQB7QUEdhxNnQ5LK5Swc4QC
st0/0BBzL+MYuxcXHmlsGPBOIN2gYKUAR7Qr25S+TjfzMIic2a0VEBt16PGcTgxF
HU4BzW6rgyKSgIKCACUw3BSzWQ67iC070onYHSxkuf3VxFIoAdSOJF2Hyiblj8NE
xhVWSWlZN5qBMd2K2oDijfKousg6PlryPEX0
-----END CERTIFICATE-----
Generated at Mon May 12 18:24:37 2025 by rpki-client