Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9PLM4LKkJ_Ee7Ix9vGfVLNfxu0o.roa
File: 9PLM4LKkJ_Ee7Ix9vGfVLNfxu0o.roa (raw, json)
Hash identifier: SKGZHbBHBBtdpME4Yx9R9wlBoxFapfQXlDcvRWDZOP0=
Subject key identifier: F4:F2:CC:E0:B2:A4:27:F1:1E:EC:8C:7D:BC:67:D5:2C:D7:F1:BB:4A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019671D1B3FAEB1EDDF362A090CD0F0B0A94
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9PLM4LKkJ_Ee7Ix9vGfVLNfxu0o.roa
Signing time: Sat 26 Apr 2025 11:18:10 +0000
ROA not before: Sat 26 Apr 2025 11:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396993
IP address blocks: 2a13:4900::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 04 May 2025 16:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:71:d1:b3:fa:eb:1e:dd:f3:62:a0:90:cd:0f:0b:0a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 26 11:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f4f2cce0b2a427f11eec8c7dbc67d52cd7f1bb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:21:b9:47:85:1d:b4:91:50:9d:e9:bd:5d:
a4:59:7e:0f:d0:ae:64:b2:20:11:af:18:d8:20:39:
bf:3a:bc:e0:87:74:e8:85:c1:95:0c:37:c1:db:b0:
77:b9:8b:02:20:3f:1f:aa:da:84:84:79:ac:5c:38:
6f:5c:2d:8f:6e:6f:ee:d6:96:4b:ad:c0:5b:ae:5d:
f0:3d:6b:cf:b6:05:0d:8d:85:a8:6b:c2:58:c7:a4:
ca:f6:07:c7:a4:ed:ab:6d:52:19:16:94:d7:b2:92:
6a:a8:f4:9f:71:d7:56:d5:36:48:b9:77:a1:3b:5c:
29:c7:fb:fe:da:72:00:0e:35:a8:76:da:72:53:4f:
16:2c:41:1f:3e:2c:d7:4c:21:e5:fa:66:57:40:25:
18:2a:fa:39:94:71:c3:41:12:90:aa:92:07:4a:72:
05:4f:3d:b0:88:09:10:bd:94:82:dc:1c:bd:5c:e6:
b9:66:a9:69:ef:10:05:d4:0e:eb:ea:6f:02:2b:17:
f1:84:3a:77:d3:33:a6:07:b2:c7:2f:12:52:e0:7f:
cc:95:6f:82:0d:c4:4d:b3:86:07:4c:c1:38:d2:69:
75:0c:16:25:49:46:9a:01:93:45:51:84:f1:80:33:
71:cb:4f:94:5e:7d:92:ce:1f:58:36:58:94:f6:b6:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F2:CC:E0:B2:A4:27:F1:1E:EC:8C:7D:BC:67:D5:2C:D7:F1:BB:4A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/9PLM4LKkJ_Ee7Ix9vGfVLNfxu0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:4900::/29
Signature Algorithm: sha256WithRSAEncryption
2f:37:9a:df:23:4e:fa:7b:fb:97:7d:71:a5:a0:bb:43:58:06:
98:bc:cf:e0:fc:47:f4:36:e7:9b:88:4e:c3:ad:e2:b6:3a:a4:
8f:d2:1a:de:d7:1a:f5:84:77:ed:7b:d4:38:e1:df:47:4b:0d:
4c:0d:41:26:33:ce:78:a1:f6:f8:1a:86:e3:d7:36:c0:3a:fd:
da:28:17:7e:11:cd:97:60:f8:12:00:7f:de:e2:92:2e:38:2d:
12:11:3b:34:a1:c1:06:40:fc:fb:cf:a2:f3:70:f5:4f:ba:a1:
60:60:cb:61:0c:9e:3a:ae:03:23:56:d3:18:68:b1:79:7a:66:
9a:2e:20:18:69:ff:42:c9:f2:98:02:9a:70:37:75:40:de:ce:
09:41:d4:02:91:7a:d2:60:55:ea:ac:97:09:90:e2:94:28:27:
8f:d9:66:91:20:67:ac:1e:9d:f0:1d:2c:37:a9:5c:34:bd:b6:
8b:25:2c:97:7c:69:ce:69:7c:80:8c:b8:9c:df:e7:d4:96:65:
22:70:04:f9:a2:22:2b:38:49:35:70:c1:35:c6:fb:d3:da:a7:
e8:84:5c:63:53:a7:dc:79:7f:12:c9:f3:b4:31:04:c1:f8:29:
06:59:7e:f0:d9:a1:73:1b:12:b9:28:e8:aa:a3:00:ad:73:c6:
92:95:99:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZZx0bP66x7d82KgkM0PCwqUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNDI2MTExODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGYyY2NlMGIyYTQyN2YxMWVlYzhjN2RiYzY3ZDUyY2Q3ZjFiYjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzNUhuUeFHbSRUJ3pvV2kWX4P0K5k
siARrxjYIDm/Orzgh3TohcGVDDfB27B3uYsCID8fqtqEhHmsXDhvXC2Pbm/u1pZL
rcBbrl3wPWvPtgUNjYWoa8JYx6TK9gfHpO2rbVIZFpTXspJqqPSfcddW1TZIuXeh
O1wpx/v+2nIADjWodtpyU08WLEEfPizXTCHl+mZXQCUYKvo5lHHDQRKQqpIHSnIF
Tz2wiAkQvZSC3By9XOa5Zqlp7xAF1A7r6m8CKxfxhDp30zOmB7LHLxJS4H/MlW+C
DcRNs4YHTME40ml1DBYlSUaaAZNFUYTxgDNxy0+UXn2Szh9YNliU9raaIQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPTyzOCypCfxHuyMfbxn1SzX8btKMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvOVBMTTRMS2tKX0VlN0l4OXZHZlZMTmZ4dTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhNJADAN
BgkqhkiG9w0BAQsFAAOCAQEALzea3yNO+nv7l31xpaC7Q1gGmLzP4PxH9Dbnm4hO
w63itjqkj9Ia3tca9YR37XvUOOHfR0sNTA1BJjPOeKH2+BqG49c2wDr92igXfhHN
l2D4EgB/3uKSLjgtEhE7NKHBBkD8+8+i83D1T7qhYGDLYQyeOq4DI1bTGGixeXpm
mi4gGGn/QsnymAKacDd1QN7OCUHUApF60mBV6qyXCZDilCgnj9lmkSBnrB6d8B0s
N6lcNL22iyUsl3xpzml8gIy4nN/n1JZlInAE+aIiKzhJNXDBNcb709qn6IRcY1On
3Hl/EsnztDEEwfgpBll+8NmhcxsSuSjoqqMArXPGkpWZSw==
-----END CERTIFICATE-----
Generated at Thu May 8 12:08:39 2025 by rpki-client