Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xfjBX6jmeGSYijvEcpxd4wkauZY.roa
File: xfjBX6jmeGSYijvEcpxd4wkauZY.roa (raw, json)
Hash identifier: nE7G4y94BgP6Jd6O19XK1O7PVz+m8+gPg65Ht9yAgvM=
Subject key identifier: C5:F8:C1:5F:A8:E6:78:64:98:8A:3B:C4:72:9C:5D:E3:09:1A:B9:96
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01962B18FDBF8DA2C50125796A7E26BD322F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xfjBX6jmeGSYijvEcpxd4wkauZY.roa
Signing time: Sat 12 Apr 2025 17:42:59 +0000
ROA not before: Sat 12 Apr 2025 17:42:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:dfc0::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 24 Apr 2025 13:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:18:fd:bf:8d:a2:c5:01:25:79:6a:7e:26:bd:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 12 17:42:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c5f8c15fa8e67864988a3bc4729c5de3091ab996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:18:48:6f:de:b9:2b:0e:ea:23:97:23:5a:
41:4b:09:41:cb:bf:23:32:95:e4:38:ac:9e:55:2c:
77:77:68:24:51:5b:b3:0a:42:be:9d:b9:46:fc:fa:
ca:00:8c:5c:64:05:50:92:a3:65:00:50:cd:13:89:
2b:3e:c8:cb:4a:d2:c0:ea:b7:04:26:63:99:29:47:
6c:e3:7a:4e:e3:8d:45:42:e5:82:f1:b1:84:5b:53:
ae:bc:60:9b:bc:c1:d4:f0:08:21:e9:ba:60:0c:35:
34:aa:88:3c:01:e1:f5:f8:25:c6:18:24:5e:ae:6b:
ce:a7:c3:66:0c:5e:12:e0:e4:c2:11:2c:cd:db:ab:
60:04:5a:ab:79:43:fc:fb:fb:92:00:6c:89:02:2b:
25:da:fe:68:3c:76:ed:31:65:c7:8e:23:64:fb:93:
4e:df:97:60:6f:6a:45:41:d9:26:f0:26:70:cf:a6:
95:c4:0c:bd:4e:31:f8:8b:fb:2b:bc:45:67:09:a1:
df:05:c5:fa:db:78:c7:05:e0:e0:61:da:4f:6f:c0:
81:73:d9:f2:fe:a6:57:64:b0:0f:08:3b:17:a7:8a:
2c:f2:41:6f:af:bd:b4:27:8b:0e:84:44:14:fc:a6:
76:a1:1d:28:53:f5:a0:ae:16:cd:11:66:34:c7:ee:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F8:C1:5F:A8:E6:78:64:98:8A:3B:C4:72:9C:5D:E3:09:1A:B9:96
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xfjBX6jmeGSYijvEcpxd4wkauZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:dfc0::/29
2a07:95c0::/29
2a0d:1140::/29
2a0d:a9c0::/29
2a0f:16c0::/29
2a0f:1a40::/29
2a0f:27c0::/29
2a0f:2e40::/29
2a0f:3740::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:3640::/29
2a10:6300::/29
2a10:6900::/29
2a11:f040::/29
2a12:cd00::/29
2a13:200::/29
2a13:cc0::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
07:10:44:b6:35:6e:65:29:4e:d4:65:cc:05:9a:88:9d:57:79:
a1:08:de:d8:2a:48:9c:7d:13:7d:30:fb:10:e5:93:d7:7f:a4:
92:df:4d:79:f9:2b:1c:69:5c:a8:88:e3:37:a3:c0:64:7b:b6:
33:30:e3:8c:ff:a7:15:1e:57:26:3c:1e:13:ce:f7:cc:3f:1c:
86:94:f7:49:3b:85:52:7f:db:aa:bb:7d:47:9b:a9:83:a7:ae:
35:54:06:ac:c9:b4:44:e7:f7:d1:1c:32:78:f0:83:0d:5d:63:
3e:12:95:0b:ba:7f:c8:c9:0b:e8:ec:18:9d:be:80:da:66:22:
26:cd:a2:26:99:ba:61:bb:ae:df:a9:6a:2e:64:0c:81:39:53:
82:10:78:6e:0c:d6:d6:3a:01:ad:43:5d:1a:7d:2e:5d:f7:c5:
54:d5:28:09:f3:80:8c:82:78:2d:c9:4a:8f:f2:12:dc:e0:22:
2c:e6:37:56:d2:81:77:34:87:ee:e8:85:f6:0f:e1:25:86:ea:
d3:5f:49:57:78:0c:13:f1:dd:7a:48:d8:59:62:21:a2:5e:71:
0b:86:63:1c:9d:64:8b:2f:63:bf:6f:fa:3a:2e:84:41:3d:d0:
5c:34:54:3c:3d:98:29:6b:0b:ed:0b:92:58:a9:9c:5c:14:4c:
1e:51:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:28:19 2025 by rpki-client