Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QrA0jNqkLOpC28pu6O3QkRqZPn4.roa
File: QrA0jNqkLOpC28pu6O3QkRqZPn4.roa (raw, json)
Hash identifier: ZCBi8XtLdlbaq/wxP0I6QtuAx+KWasCL/yZwCTfr9IQ=
Subject key identifier: 42:B0:34:8C:DA:A4:2C:EA:42:DB:CA:6E:E8:ED:D0:91:1A:99:3E:7E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019610B9BD8B5EDAC544B4A16EA1DF243471
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QrA0jNqkLOpC28pu6O3QkRqZPn4.roa
Signing time: Mon 07 Apr 2025 14:48:50 +0000
ROA not before: Mon 07 Apr 2025 14:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 2a06:a600::/29 maxlen: 29
2a06:b5c0::/29 maxlen: 29
2a06:bf40::/29 maxlen: 29
2a0e:1a84::/32 maxlen: 32
2a0e:f600:5f::/48 maxlen: 48
2a0f:1e84:20::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:100::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a10:67c2:1::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Fri 11 Apr 2025 20:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:10:b9:bd:8b:5e:da:c5:44:b4:a1:6e:a1:df:24:34:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 7 14:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42b0348cdaa42cea42dbca6ee8edd0911a993e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:07:a0:e0:ea:6c:07:41:0e:62:20:b6:ef:38:
ef:81:ee:40:11:31:99:0f:84:3a:b3:dc:19:53:39:
67:2b:60:2b:ce:40:17:71:43:aa:73:49:00:01:75:
6f:90:09:59:93:e9:12:cc:c5:44:1a:93:1d:25:12:
c9:62:03:65:0b:3b:f7:cf:97:1c:9c:16:bb:c5:54:
6c:1e:7f:b0:8f:b5:2b:75:f4:e8:e7:4a:fd:57:1a:
13:67:1c:40:f1:b7:74:43:ed:76:58:55:79:54:8d:
e0:7d:68:bd:df:37:cb:1c:66:50:05:8d:78:88:32:
33:15:41:f5:c3:dc:d3:c4:34:d5:eb:e0:f7:5c:6c:
3c:61:8b:c2:e7:69:53:f7:28:96:cd:da:f4:89:9d:
1c:8d:0f:23:f4:9e:83:4e:58:53:95:fd:41:b3:ee:
08:43:d4:10:2f:7b:70:58:72:fb:94:61:69:d0:e8:
42:59:0b:60:2a:40:8f:39:85:ce:c0:ad:5f:8a:b7:
29:40:d9:83:f4:39:f4:a8:48:fc:ca:45:07:df:21:
cd:c9:ef:ad:fd:f2:f2:9b:13:1d:f1:db:a7:f9:66:
92:a5:a8:ec:ee:fc:c8:91:7b:9d:6e:71:43:74:0f:
f0:41:6e:43:2e:ca:7a:a2:76:04:a0:13:2c:cc:dc:
8a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B0:34:8C:DA:A4:2C:EA:42:DB:CA:6E:E8:ED:D0:91:1A:99:3E:7E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QrA0jNqkLOpC28pu6O3QkRqZPn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a600::/29
2a06:b5c0::/29
2a06:bf40::/29
2a0e:1a84::/32
2a0e:f600:5f::/48
2a0f:1e84:20::/48
2a0f:7d00:1::/48
2a0f:bc00:100::/48
2a0f:bc00:a1c4::/48
2a10:67c2:1::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
25:b2:13:33:76:f5:54:f1:51:9a:32:a5:11:ed:90:09:5b:d0:
79:3a:7d:4c:ea:57:30:bd:71:39:34:e0:86:f2:f6:d4:1b:84:
db:77:e3:70:d7:bd:41:7a:98:a9:b2:5c:f1:8b:9f:f9:08:65:
ee:1c:a0:cf:dd:aa:92:34:6b:2d:ad:4d:e3:78:79:81:ae:62:
48:8c:e1:e4:33:f6:23:0c:07:c7:43:0c:a6:ed:99:d0:54:91:
e4:c9:df:12:49:46:58:b0:da:48:eb:e3:6a:9f:25:8c:37:41:
09:48:85:2c:c7:3e:4d:4a:aa:14:27:37:fa:10:f5:5b:99:81:
5f:0b:34:6e:52:ce:d8:ed:4f:e6:4f:9b:8b:bd:3a:2f:2d:7a:
60:cf:1a:31:fe:05:51:85:23:c1:0c:87:dc:c8:b5:23:b1:51:
a3:37:77:3b:17:6f:e2:b5:ac:6f:6c:f7:84:c1:bf:f6:ae:95:
a7:a0:65:8f:7f:50:e3:15:ef:eb:ca:d9:84:04:d7:52:25:5d:
9f:0a:d4:77:9e:9e:b4:df:dc:66:f0:96:bc:1e:56:73:41:b0:
09:14:4f:99:e3:f1:ba:cb:b2:3f:eb:f7:19:e6:4a:b6:18:be:
43:d2:fa:1b:4a:94:00:d5:7d:15:7f:4f:de:c3:0b:6d:9c:ac:
21:d2:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:46:24 2025 by rpki-client