Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/CCKqqGEBn0-Y3z_q1aRl2vBDbqU.roa
File: CCKqqGEBn0-Y3z_q1aRl2vBDbqU.roa (raw, json)
Hash identifier: scvMoBuf1Jt7qmkkP6HMoD+XnySG+Etmv7ziaAbYgpg=
Subject key identifier: 08:22:AA:A8:61:01:9F:4F:98:DF:3F:EA:D5:A4:65:DA:F0:43:6E:A5
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 01958B138F5D1442642A4F1811167F4D85F4
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/CCKqqGEBn0-Y3z_q1aRl2vBDbqU.roa
Signing time: Wed 12 Mar 2025 15:57:49 +0000
ROA not before: Wed 12 Mar 2025 15:57:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a06:d644::/32 maxlen: 32
2a09:2984::/32 maxlen: 32
2a09:a806::/32 maxlen: 32
2a09:bc05::/32 maxlen: 32
2a09:cf03::/32 maxlen: 32
2a09:d704::/32 maxlen: 32
2a09:dd02::/32 maxlen: 32
2a09:e304::/32 maxlen: 32
2a0d:afc5::/32 maxlen: 32
2a0d:afc7::/32 maxlen: 32
2a0d:c102::/32 maxlen: 32
2a0d:fcc5::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 19 Mar 2025 07:41:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:13:8f:5d:14:42:64:2a:4f:18:11:16:7f:4d:85:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 12 15:57:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0822aaa861019f4f98df3fead5a465daf0436ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a1:5c:c3:c5:5a:83:5b:ab:e9:d6:58:87:57:
f8:3c:c5:e9:a9:5e:95:80:7d:b3:c0:c0:1e:6f:db:
97:ec:22:89:14:96:8f:cf:1e:2a:a1:be:36:2a:e3:
6b:02:68:9f:70:92:9d:d4:1f:4b:ea:b2:6c:c7:6f:
0e:e0:c1:7f:96:50:6c:a5:20:9d:c1:c8:bb:00:2c:
04:88:8f:81:e5:9b:15:27:e7:13:50:c7:a8:6f:69:
71:e1:4d:b1:51:e3:f1:db:bc:f1:07:86:30:29:89:
86:69:ba:a3:3c:94:1b:e0:fd:2b:68:0a:21:d4:9a:
75:49:b4:36:4c:6c:73:dc:ea:bd:73:ff:63:d0:88:
0f:3c:d4:09:c3:f7:aa:97:c2:4f:27:49:8c:77:92:
37:1f:9b:f8:90:22:17:ce:5c:6a:64:c3:bb:11:05:
0a:d1:c3:12:d2:bf:49:49:70:c4:fc:ed:50:7a:21:
4c:a3:25:f6:99:9d:9f:5b:c9:74:da:60:3c:85:44:
c5:4c:0e:24:db:85:c4:33:0d:db:3c:86:70:96:28:
18:0e:9f:d0:c6:68:f4:79:73:95:f7:95:e6:81:81:
9b:07:80:be:e4:88:bb:f4:ee:45:6d:3a:f0:5b:20:
db:2d:bc:b3:a1:a3:01:60:b2:0b:ba:a7:4e:e7:9d:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:22:AA:A8:61:01:9F:4F:98:DF:3F:EA:D5:A4:65:DA:F0:43:6E:A5
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/CCKqqGEBn0-Y3z_q1aRl2vBDbqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d644::/32
2a09:2984::/32
2a09:a806::/32
2a09:bc05::/32
2a09:cf03::/32
2a09:d704::/32
2a09:dd02::/32
2a09:e304::/32
2a0d:afc5::/32
2a0d:afc7::/32
2a0d:c102::/32
2a0d:fcc5::/32
Signature Algorithm: sha256WithRSAEncryption
af:62:22:db:f3:f5:31:e3:28:7a:f4:54:66:44:59:e8:1e:98:
60:9c:77:36:4f:12:28:d9:38:19:ac:5c:99:81:0c:f2:6d:d3:
65:82:b3:f1:59:f7:81:e9:b3:55:64:94:84:01:4b:f0:93:6c:
48:dd:9e:73:1e:52:e6:cc:15:8c:ba:66:81:dc:02:8e:12:00:
4a:6b:53:36:6c:8e:d6:d0:03:c9:8e:4f:03:94:21:0e:5e:33:
79:48:43:48:86:7a:9c:20:63:cc:81:cf:5d:53:d1:78:19:ac:
55:8f:2e:da:da:c8:22:84:91:62:32:78:d7:9d:5a:23:81:0b:
06:6c:fa:83:9d:ca:26:94:05:f4:18:4f:dc:f1:a7:42:a1:7d:
f3:c9:db:34:ec:72:8d:ab:68:24:6e:97:14:c4:90:13:20:55:
8e:65:e1:71:b4:d7:ab:e7:25:05:c8:17:ea:8f:97:13:88:e4:
69:05:02:d4:20:d4:95:2d:ca:75:b7:b1:25:0c:ce:8b:83:8a:
80:dd:f1:b9:88:a1:03:bf:56:17:1d:c1:e6:ea:53:32:ea:78:
a5:8f:e5:af:25:06:3a:b6:9e:c4:31:d9:ee:ea:5a:63:ab:6f:
8f:44:f4:93:68:a6:7d:39:f0:89:f3:90:79:ae:96:fc:2c:32:
67:14:fd:ea
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAZWLE49dFEJkKk8YERZ/TYX0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwMzEyMTU1NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODIyYWFhODYxMDE5ZjRmOThkZjNmZWFkNWE0NjVkYWYwNDM2ZWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6Fcw8Vag1ur6dZYh1f4PMXpqV6V
gH2zwMAeb9uX7CKJFJaPzx4qob42KuNrAmifcJKd1B9L6rJsx28O4MF/llBspSCd
wci7ACwEiI+B5ZsVJ+cTUMeob2lx4U2xUePx27zxB4YwKYmGabqjPJQb4P0raAoh
1Jp1SbQ2TGxz3Oq9c/9j0IgPPNQJw/eql8JPJ0mMd5I3H5v4kCIXzlxqZMO7EQUK
0cMS0r9JSXDE/O1QeiFMoyX2mZ2fW8l02mA8hUTFTA4k24XEMw3bPIZwligYDp/Q
xmj0eXOV95XmgYGbB4C+5Ii79O5FbTrwWyDbLbyzoaMBYLILuqdO553JKQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFAgiqqhhAZ9PmN8/6tWkZdrwQ26lMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvQ0NLcXFHRUJuMC1ZM3pfcTFhUmwydkJEYnFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAAjBUAwUAKgbWRAMF
ACoJKYQDBQAqCagGAwUAKgm8BQMFACoJzwMDBQAqCdcEAwUAKgndAgMFACoJ4wQD
BQAqDa/FAwUAKg2vxwMFACoNwQIDBQAqDfzFMA0GCSqGSIb3DQEBCwUAA4IBAQCv
YiLb8/Ux4yh69FRmRFnoHphgnHc2TxIo2TgZrFyZgQzybdNlgrPxWfeB6bNVZJSE
AUvwk2xI3Z5zHlLmzBWMumaB3AKOEgBKa1M2bI7W0APJjk8DlCEOXjN5SENIhnqc
IGPMgc9dU9F4GaxVjy7a2sgihJFiMnjXnVojgQsGbPqDncomlAX0GE/c8adCoX3z
yds07HKNq2gkbpcUxJATIFWOZeFxtNer5yUFyBfqj5cTiORpBQLUINSVLcp1t7El
DM6Lg4qA3fG5iKEDv1YXHcHm6lMy6nilj+WvJQY6tp7EMdnu6lpjq2+PRPSTaKZ9
OfCJ85B5rpb8LDJnFP3q
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:55:23 2025 by rpki-client