Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/N23zhikgqeY7Nj56yaUUPQSUYRk.roa
File: N23zhikgqeY7Nj56yaUUPQSUYRk.roa (raw, json)
Hash identifier: X8vc8oWJWS0Olmozp7PMfCl67j874ZZHoFEi1gVqnwg=
Subject key identifier: 37:6D:F3:86:29:20:A9:E6:3B:36:3E:7A:C9:A5:14:3D:04:94:61:19
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 0194F6EA9B1850FC90D35F3E8F728C8728BD
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/N23zhikgqeY7Nj56yaUUPQSUYRk.roa
Signing time: Tue 11 Feb 2025 21:29:17 +0000
ROA not before: Tue 11 Feb 2025 21:29:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 2a0c:b6c0::/34 maxlen: 34
2a0c:b6c0:4000::/34 maxlen: 34
2a0c:b6c0:8000::/34 maxlen: 34
2a0c:b6c1::/34 maxlen: 34
2a0c:b6c1:4000::/34 maxlen: 34
2a0c:b6c1:8000::/34 maxlen: 34
2a0c:b6c2:1::/48 maxlen: 48
2a0c:b6c2:2::/48 maxlen: 48
2a0c:b6c2:5::/48 maxlen: 48
2a0c:b6c2:1001::/48 maxlen: 48
2a0c:b6c2:1002::/48 maxlen: 48
2a0c:b6c2:1005::/48 maxlen: 48
2a0c:b6c2:2002::/48 maxlen: 48
2a0c:b6c2:2005::/48 maxlen: 48
2a0c:b6c2:3001::/48 maxlen: 48
2a0c:b6c2:3002::/48 maxlen: 48
2a0c:b6c2:3005::/48 maxlen: 48
2a0c:b6c2:4001::/48 maxlen: 48
2a0c:b6c2:4002::/48 maxlen: 48
2a0c:b6c2:4005::/48 maxlen: 48
2a0c:b6c2:5001::/48 maxlen: 48
2a0c:b6c2:5002::/48 maxlen: 48
2a0c:b6c2:5005::/48 maxlen: 48
2a0c:b6c2:6001::/48 maxlen: 48
2a0c:b6c2:6002::/48 maxlen: 48
2a0c:b6c2:6005::/48 maxlen: 48
2a0c:b6c2:7002::/48 maxlen: 48
2a0c:b6c2:7005::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 13 Feb 2025 12:04:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:f6:ea:9b:18:50:fc:90:d3:5f:3e:8f:72:8c:87:28:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Feb 11 21:29:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=376df3862920a9e63b363e7ac9a5143d04946119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:42:c7:7d:01:f9:64:b9:f3:41:f3:6b:ba:
57:de:75:f8:d9:f3:fb:b7:91:f1:90:ad:6a:b9:80:
5e:a3:3b:aa:05:9a:e6:88:9a:88:14:60:cd:e5:e0:
d3:6f:fb:d5:1f:c3:cf:13:4e:dd:c0:b9:9d:fc:5e:
f9:a3:fd:e4:9e:38:b2:84:b8:63:b0:86:f9:57:90:
84:89:f1:13:0d:5a:84:d8:2c:5c:95:bc:68:c4:99:
10:ed:bd:50:10:6e:b5:c8:48:3f:16:66:3a:98:4d:
62:19:38:5d:db:ca:74:36:64:f3:d9:61:c1:0f:e0:
f2:b3:66:ad:44:44:78:25:d6:52:9e:4c:4a:cb:7e:
ba:3f:7c:68:d9:60:e8:98:b4:33:19:bc:e0:7d:b6:
aa:9f:c4:b2:e3:2e:84:f7:4a:54:0f:0a:a3:bc:ef:
f4:8b:7d:2b:bf:4f:27:16:bd:d7:bc:1c:c2:b7:46:
fa:4a:c6:bf:98:54:f4:4f:7b:f9:95:c9:b0:67:c2:
84:78:5c:63:21:f0:fc:48:66:0b:61:8b:80:db:76:
85:64:35:93:0c:7f:4e:4a:e0:7a:1b:27:6f:5e:6f:
bf:63:53:ef:c3:03:72:ff:52:fb:9f:fa:54:8a:df:
3e:87:ca:ff:0d:74:5b:ca:49:76:59:9f:b3:6b:42:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6D:F3:86:29:20:A9:E6:3B:36:3E:7A:C9:A5:14:3D:04:94:61:19
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/N23zhikgqeY7Nj56yaUUPQSUYRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b6c0::-2a0c:b6c0:bfff:ffff:ffff:ffff:ffff:ffff
2a0c:b6c1::-2a0c:b6c1:bfff:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:1::-2a0c:b6c2:2:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:5::/48
2a0c:b6c2:1001::-2a0c:b6c2:1002:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:1005::/48
2a0c:b6c2:2002::/48
2a0c:b6c2:2005::/48
2a0c:b6c2:3001::-2a0c:b6c2:3002:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:3005::/48
2a0c:b6c2:4001::-2a0c:b6c2:4002:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:4005::/48
2a0c:b6c2:5001::-2a0c:b6c2:5002:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:5005::/48
2a0c:b6c2:6001::-2a0c:b6c2:6002:ffff:ffff:ffff:ffff:ffff
2a0c:b6c2:6005::/48
2a0c:b6c2:7002::/48
2a0c:b6c2:7005::/48
Signature Algorithm: sha256WithRSAEncryption
20:71:99:e5:49:65:09:74:47:1d:28:b9:1a:65:17:2f:ed:6c:
61:52:30:ae:90:06:32:20:73:d5:fe:da:61:39:1f:80:47:3e:
0e:b3:6b:a1:0a:c4:cf:04:fd:19:1b:83:68:7c:b1:04:01:16:
75:37:73:2c:d7:5c:15:68:17:95:e4:e5:cd:37:9a:39:ee:b3:
00:28:27:b4:25:b8:9e:b0:7e:4f:c3:f8:a1:89:86:5f:f7:78:
4a:4e:6e:bc:3d:18:5c:fe:6c:0b:af:75:3a:97:e9:b8:05:f7:
11:b0:a4:97:b8:90:bd:e9:e9:ae:6c:ad:4d:3a:3e:5c:e1:b6:
e8:0d:f8:cf:51:1f:ef:e0:eb:ce:77:fe:33:16:3c:da:d2:a8:
71:64:ad:a8:d7:b7:b4:70:e1:a4:60:49:1d:60:90:3c:e8:42:
c1:1e:e1:9d:1c:58:c1:d4:ef:b1:52:63:6b:81:df:a9:75:af:
eb:f1:62:92:05:df:06:6c:c5:d1:10:4d:ba:1f:b0:9b:b4:31:
03:55:e5:ee:e1:76:75:aa:c0:8c:75:d0:c2:40:ec:a8:b8:be:
4b:12:b5:80:80:9d:ab:98:a1:dd:bd:87:16:09:e0:27:f5:78:
87:b0:55:f8:a3:13:ee:28:5e:aa:21:57:49:72:50:87:90:38:
d0:10:c8:8e
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgISAZT26psYUPyQ018+j3KMhyi9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTI2Y2NhYzRmOTA2NGUwNTg1NDliMzAxNzJjODQ0Mzk3
ODdmYmMwHhcNMjUwMjExMjEyOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzZkZjM4NjI5MjBhOWU2M2IzNjNlN2FjOWE1MTQzZDA0OTQ2MTE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYFCx30B+WS580Hza7pX3nX42fP7
t5HxkK1quYBeozuqBZrmiJqIFGDN5eDTb/vVH8PPE07dwLmd/F75o/3knjiyhLhj
sIb5V5CEifETDVqE2CxclbxoxJkQ7b1QEG61yEg/FmY6mE1iGThd28p0NmTz2WHB
D+Dys2atRER4JdZSnkxKy366P3xo2WDomLQzGbzgfbaqn8Sy4y6E90pUDwqjvO/0
i30rv08nFr3XvBzCt0b6Ssa/mFT0T3v5lcmwZ8KEeFxjIfD8SGYLYYuA23aFZDWT
DH9OSuB6GydvXm+/Y1PvwwNy/1L7n/pUit8+h8r/DXRbykl2WZ+za0LXVwIDAQAB
o4IC/jCCAvowHQYDVR0OBBYEFDdt84YpIKnmOzY+esmlFD0ElGEZMB8GA1UdIwQY
MBaAFBdSbMrE+QZOBYVJswFyyEQ5eH+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYt
OTQxY2M2YTdiYWQ5LzEvTjIzemhpa2dxZVk3Tmo1NnlhVVVQUVNVWVJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9jOWFhODEtNWJmZC00NTM1LTk2MDYtOTQxY2M2YTdiYWQ5
LzEvRjFKc3lzVDVCazRGaFVtekFYTElSRGw0Zjd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBEgYIKwYBBQUHAQcBAf8EggEBMIH+MIH7BAIAAjCB9DAP
AwUGKgy2wAMGBioMtsCAMA8DBQAqDLbBAwYGKgy2wYAwEgMHACoMtsIAAQMHACoM
tsIAAgMHACoMtsIABTASAwcAKgy2whABAwcAKgy2whACAwcAKgy2whAFAwcAKgy2
wiACAwcAKgy2wiAFMBIDBwAqDLbCMAEDBwAqDLbCMAIDBwAqDLbCMAUwEgMHACoM
tsJAAQMHACoMtsJAAgMHACoMtsJABTASAwcAKgy2wlABAwcAKgy2wlACAwcAKgy2
wlAFMBIDBwAqDLbCYAEDBwAqDLbCYAIDBwAqDLbCYAUDBwAqDLbCcAIDBwAqDLbC
cAUwDQYJKoZIhvcNAQELBQADggEBACBxmeVJZQl0Rx0ouRplFy/tbGFSMK6QBjIg
c9X+2mE5H4BHPg6za6EKxM8E/Rkbg2h8sQQBFnU3cyzXXBVoF5Xk5c03mjnuswAo
J7QluJ6wfk/D+KGJhl/3eEpObrw9GFz+bAuvdTqX6bgF9xGwpJe4kL3p6a5srU06
PlzhtugN+M9RH+/g6853/jMWPNrSqHFkrajXt7Rw4aRgSR1gkDzoQsEe4Z0cWMHU
77FSY2uB36l1r+vxYpIF3wZsxdEQTbofsJu0MQNV5e7hdnWqwIx10MJA7Ki4vksS
tYCAnauYod29hxYJ4Cf1eIewVfijE+4oXqohV0lyUIeQONAQyI4=
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:45:48 2025 by rpki-client