Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P5CcM5oCJW4Xv60TzzXupJPIIAQ.roa
File: P5CcM5oCJW4Xv60TzzXupJPIIAQ.roa (raw, json)
Hash identifier: sJmzTN+Spz/+705d3v8bVCJP2v1SeRepRqkKJk7sKiI=
Subject key identifier: 3F:90:9C:33:9A:02:25:6E:17:BF:AD:13:CF:35:EE:A4:93:C8:20:04
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0190793424846173BAFDD999B937AF3DF673
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P5CcM5oCJW4Xv60TzzXupJPIIAQ.roa
Signing time: Wed 03 Jul 2024 15:26:18 +0000
ROA not before: Wed 03 Jul 2024 15:26:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214734
IP address blocks: 2a0f:9b00::/29 maxlen: 29
2a13:9f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 03 Jul 2024 17:04:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:34:24:84:61:73:ba:fd:d9:99:b9:37:af:3d:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 3 15:26:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f909c339a02256e17bfad13cf35eea493c82004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:32:b3:09:74:c0:55:d0:9b:d0:a1:54:8f:
a5:56:d6:f0:53:c3:aa:a3:e7:29:2d:de:2a:ad:53:
54:5a:28:b6:a7:5c:73:a3:80:98:d5:b6:aa:bf:31:
00:7d:c4:05:90:17:4b:a3:a0:27:c4:51:71:32:25:
43:c6:1e:14:79:e6:65:87:1d:60:32:2e:05:e6:bd:
1d:d0:d3:c7:14:23:0e:18:22:72:0d:3a:05:20:2b:
a1:fd:c3:db:9c:c5:a6:52:bb:ac:5d:e6:d5:b1:78:
3c:88:5a:51:9d:65:34:4f:b2:de:e3:42:8b:69:24:
2a:a9:6b:19:0b:a0:d6:40:d8:2e:e0:5c:88:a5:e2:
32:b9:1d:5b:5c:ca:a9:29:04:a6:9c:88:cf:d1:00:
06:bf:1d:29:0c:0b:b5:4c:8f:cf:2e:5e:03:6f:3f:
60:b5:06:20:fa:b0:ed:6a:ad:54:14:fc:24:df:31:
d7:6e:f8:19:7f:ac:bb:18:29:5a:f1:d3:c2:88:af:
f5:7c:4b:19:39:64:f6:b1:ef:ca:85:43:fc:fc:76:
08:f1:22:50:4f:19:5d:f5:ee:83:b9:c5:12:a8:c3:
36:c1:07:b2:7e:c0:51:f2:7b:07:94:ff:7f:39:0f:
df:52:8f:ba:22:62:44:ae:56:bb:bb:cc:97:e9:85:
f5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:90:9C:33:9A:02:25:6E:17:BF:AD:13:CF:35:EE:A4:93:C8:20:04
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/P5CcM5oCJW4Xv60TzzXupJPIIAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9b00::/29
2a13:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
71:dd:e2:cd:f5:4f:a8:1f:60:47:9a:ef:54:27:b9:2c:34:65:
16:51:30:c0:36:74:e7:41:fd:aa:f0:b3:0e:1d:0d:71:08:c9:
98:9c:66:6b:21:de:2c:79:a3:74:7b:7b:c1:ce:e9:30:f8:23:
e5:bc:54:f9:35:f0:20:45:26:af:9f:fa:60:53:9f:87:9a:86:
c9:3e:c0:6a:46:f7:7b:10:30:2c:a6:b5:71:2a:72:be:5c:3b:
10:a8:1f:cf:71:96:aa:a9:a3:e1:85:65:b7:41:57:9b:7e:a8:
d5:27:6d:4d:51:88:09:3d:a3:07:70:28:d3:c1:ca:02:cd:9c:
18:88:3d:29:41:59:7d:81:92:3b:60:ba:ad:e7:cc:1d:33:bb:
49:1a:da:1e:3c:e1:b9:5d:3c:ee:6a:f0:e5:81:5d:b7:ef:55:
ac:cd:76:73:70:4b:4e:48:0c:3c:1a:5b:43:de:1e:2c:22:9d:
9e:3b:a3:fe:9f:c5:fb:24:a3:fb:92:d8:77:ad:7a:b0:af:a9:
30:5d:99:8b:8a:ec:71:e6:14:6a:e5:47:e4:dc:6c:1b:4b:9c:
f7:f9:3c:c1:45:1f:0a:38:b9:a9:3d:59:27:e6:46:02:2e:c0:
3d:60:b7:c5:38:18:b8:a0:6e:79:b6:9b:f2:bc:be:4d:16:4a:
ae:a3:e9:c4
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZB5NCSEYXO6/dmZuTevPfZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNzAzMTUyNjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjkwOWMzMzlhMDIyNTZlMTdiZmFkMTNjZjM1ZWVhNDkzYzgyMDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgyswl0wFXQm9ChVI+lVtbwU8Oq
o+cpLd4qrVNUWii2p1xzo4CY1baqvzEAfcQFkBdLo6AnxFFxMiVDxh4UeeZlhx1g
Mi4F5r0d0NPHFCMOGCJyDToFICuh/cPbnMWmUrusXebVsXg8iFpRnWU0T7Le40KL
aSQqqWsZC6DWQNgu4FyIpeIyuR1bXMqpKQSmnIjP0QAGvx0pDAu1TI/PLl4Dbz9g
tQYg+rDtaq1UFPwk3zHXbvgZf6y7GCla8dPCiK/1fEsZOWT2se/KhUP8/HYI8SJQ
Txld9e6DucUSqMM2wQeyfsBR8nsHlP9/OQ/fUo+6ImJErla7u8yX6YX1QQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFD+QnDOaAiVuF7+tE8817qSTyCAEMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUDVDY001b0NKVzRYdjYwVHp6WHVwSlBJSUFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKg+bAAMF
AyoTnwAwDQYJKoZIhvcNAQELBQADggEBAHHd4s31T6gfYEea71QnuSw0ZRZRMMA2
dOdB/arwsw4dDXEIyZicZmsh3ix5o3R7e8HO6TD4I+W8VPk18CBFJq+f+mBTn4ea
hsk+wGpG93sQMCymtXEqcr5cOxCoH89xlqqpo+GFZbdBV5t+qNUnbU1RiAk9owdw
KNPBygLNnBiIPSlBWX2Bkjtguq3nzB0zu0ka2h484bldPO5q8OWBXbfvVazNdnNw
S05IDDwaW0PeHiwinZ47o/6fxfsko/uS2HeterCvqTBdmYuK7HHmFGrlR+TcbBtL
nPf5PMFFHwo4uak9WSfmRgIuwD1gt8U4GLigbnm2m/K8vk0WSq6j6cQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:40:14 2025 by rpki-client