Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qcJFpxxA7opjopdAaMplF79xf24.roa
File: qcJFpxxA7opjopdAaMplF79xf24.roa (raw, json)
Hash identifier: jVjSvDNDn8/gqmmBOkxWpMNnYt4kC/2oh1iubADpLP0=
Subject key identifier: A9:C2:45:A7:1C:40:EE:8A:63:A2:97:40:68:CA:65:17:BF:71:7F:6E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DD1069E36145D30C6D336E8C440C8B2FC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qcJFpxxA7opjopdAaMplF79xf24.roa
Signing time: Thu 22 Feb 2024 13:34:48 +0000
ROA not before: Thu 22 Feb 2024 13:34:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e1c0:1::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c6:1::/48 maxlen: 48
2a0f:e6c7:1::/48 maxlen: 48
2a12:ecc6:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:e101:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 07:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d1:06:9e:36:14:5d:30:c6:d3:36:e8:c4:40:c8:b2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 22 13:34:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9c245a71c40ee8a63a2974068ca6517bf717f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ee:d8:32:13:a2:aa:27:3f:e6:3f:7d:db:28:
09:a6:9b:cf:eb:76:92:ca:73:f0:16:44:a1:3c:81:
e3:86:de:aa:94:57:03:8b:37:c1:c3:5a:9e:ab:32:
c0:d8:03:61:0d:9c:b2:9c:21:76:b4:a1:e9:f2:6c:
5b:fe:51:90:59:72:a0:2a:d3:61:70:ac:5f:1b:b2:
e3:6b:50:a7:8f:2e:b0:7b:55:4b:b9:4e:6d:35:b2:
2d:91:22:dd:2b:d3:4e:ea:e1:83:d8:c3:16:76:90:
65:2a:14:5a:b5:6f:7c:c4:f7:dd:6b:bf:59:67:d3:
57:83:21:eb:2b:4f:c3:88:81:36:c0:06:cc:82:b6:
8c:fc:bc:9d:94:5d:4e:42:c3:fb:33:df:92:67:2b:
66:d6:ee:fc:ad:81:3e:a0:21:f6:ac:31:1b:98:04:
82:98:e1:c7:a8:12:a6:ff:34:84:c5:f5:d6:3a:4a:
e2:a1:74:1f:22:7c:af:e6:8d:ab:14:31:84:9b:f0:
67:2b:be:51:91:98:22:9e:43:93:e2:3f:9d:e7:cc:
23:86:d3:c9:d8:68:48:91:84:9e:82:b5:d8:54:a6:
10:45:68:5b:36:42:51:37:29:1f:62:8a:bc:d2:5b:
d3:c8:af:e5:59:85:40:ce:3b:02:93:c6:86:38:7d:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:45:A7:1C:40:EE:8A:63:A2:97:40:68:CA:65:17:BF:71:7F:6E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/qcJFpxxA7opjopdAaMplF79xf24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e1c0:1::/48
2a0f:e440::/29
2a0f:e6c6:1::/48
2a0f:e6c7:1::/48
2a12:ecc6:1::/48
2a13:3380:1::/48
2a13:c700:1::/48
2a13:e101:1::-2a13:e101:2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
05:5e:1c:13:61:ce:37:6d:cb:f9:69:05:3c:d3:16:f4:37:9b:
b8:a1:2e:95:08:6e:5a:7f:2a:1d:47:60:56:7c:ea:ae:0e:50:
b1:1e:7f:61:dc:36:c4:2d:47:56:80:55:00:13:b2:5a:6c:e4:
08:53:54:41:00:48:1e:08:49:bf:45:06:cf:b7:96:4c:7d:c3:
6e:6e:de:31:44:5a:bd:be:5c:a0:ca:13:5d:96:9e:e1:54:7b:
e6:13:7f:12:74:b7:2c:53:9a:0e:75:97:01:73:9b:d6:b2:8b:
d5:14:2d:0b:40:42:17:69:17:90:0a:fe:67:72:ef:b2:11:3c:
7f:4f:42:f6:10:f4:7d:54:de:ef:b3:8d:8e:e3:39:96:35:fd:
a0:52:d5:94:77:a2:a1:49:b8:83:b6:8a:47:90:f8:16:7d:bd:
83:6d:04:e2:58:fc:86:37:70:4a:f0:9d:c6:59:33:de:50:25:
fd:3b:b8:36:a9:23:ea:43:0f:31:5f:02:a9:05:19:b8:da:d2:
7b:0b:43:8b:89:cf:96:ae:e7:99:35:c6:43:06:da:27:c3:f7:
02:96:4e:73:29:24:aa:a4:32:e2:4a:3d:cd:85:ef:f7:ba:97:
64:82:79:d3:36:b2:74:7e:b6:3d:fd:7c:03:76:87:fd:74:4d:
a2:fb:fd:46
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgISAY3RBp42FF0wxtM26MRAyLL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwMjIyMTMzNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWMyNDVhNzFjNDBlZThhNjNhMjk3NDA2OGNhNjUxN2JmNzE3ZjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO7YMhOiqic/5j992ygJppvP63aS
ynPwFkShPIHjht6qlFcDizfBw1qeqzLA2ANhDZyynCF2tKHp8mxb/lGQWXKgKtNh
cKxfG7Lja1Cnjy6we1VLuU5tNbItkSLdK9NO6uGD2MMWdpBlKhRatW98xPfda79Z
Z9NXgyHrK0/DiIE2wAbMgraM/LydlF1OQsP7M9+SZytm1u78rYE+oCH2rDEbmASC
mOHHqBKm/zSExfXWOkrioXQfInyv5o2rFDGEm/BnK75RkZginkOT4j+d58wjhtPJ
2GhIkYSegrXYVKYQRWhbNkJRNykfYoq80lvTyK/lWYVAzjsCk8aGOH2eLQIDAQAB
o4ICVDCCAlAwHQYDVR0OBBYEFKnCRaccQO6KY6KXQGjKZRe/cX9uMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcWNKRnB4eEE3b3Bqb3BkQWFNcGxGNzl4ZjI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGoGCCsGAQUFBwEHAQH/BFswWTBXBAIAAjBRAwcAKg/hwAAB
AwUDKg/kQAMHACoP5sYAAQMHACoP5scAAQMHACoS7MYAAQMHACoTM4AAAQMHACoT
xwAAATASAwcAKhPhAQABAwcAKhPhAQACMA0GCSqGSIb3DQEBCwUAA4IBAQAFXhwT
Yc43bcv5aQU80xb0N5u4oS6VCG5afyodR2BWfOquDlCxHn9h3DbELUdWgFUAE7Ja
bOQIU1RBAEgeCEm/RQbPt5ZMfcNubt4xRFq9vlygyhNdlp7hVHvmE38SdLcsU5oO
dZcBc5vWsovVFC0LQEIXaReQCv5ncu+yETx/T0L2EPR9VN7vs42O4zmWNf2gUtWU
d6KhSbiDtopHkPgWfb2DbQTiWPyGN3BK8J3GWTPeUCX9O7g2qSPqQw8xXwKpBRm4
2tJ7C0OLic+WrueZNcZDBtonw/cClk5zKSSqpDLiSj3Nhe/3updkgnnTNrJ0frY9
/XwDdof9dE2i+/1G
-----END CERTIFICATE-----
Generated at Mon May 12 18:24:29 2025 by rpki-client