Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AjeHcLcABZWZIt2VBGl3UaGr85I.roa
File: AjeHcLcABZWZIt2VBGl3UaGr85I.roa (raw, json)
Hash identifier: RNgi40mZJrWkWlXCjcFL6Fc82E4Jm7TV46g9Js3QDgY=
Subject key identifier: 02:37:87:70:B7:00:05:95:99:22:DD:95:04:69:77:51:A1:AB:F3:92
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 0193A7C43AF9769AABB9A9074CFB1E6F8362
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AjeHcLcABZWZIt2VBGl3UaGr85I.roa
Signing time: Sun 08 Dec 2024 19:34:35 +0000
ROA not before: Sun 08 Dec 2024 19:34:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:6b40::/29 maxlen: 29
2a0d:6ec0::/29 maxlen: 29
2a0d:7140::/29 maxlen: 29
2a0d:8cc0::/29 maxlen: 29
2a0d:9740::/29 maxlen: 29
2a0d:97c0::/29 maxlen: 29
2a0d:a3c0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:b540::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0d:c1c0::/29 maxlen: 29
2a0d:cc40::/29 maxlen: 29
2a0d:ce40::/29 maxlen: 29
2a0d:d3c0::/29 maxlen: 29
2a0d:e1c0::/29 maxlen: 29
2a0d:e240::/29 maxlen: 29
2a0d:e340::/29 maxlen: 29
2a0d:f140::/29 maxlen: 29
2a0d:f5c0::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a0e:19c0::/29 maxlen: 29
2a0e:adc0::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:2200::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:ec0::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4480::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:6040::/29 maxlen: 29
2a11:62c0::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:8bc0::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9900::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:a240::/29 maxlen: 29
2a11:a2c0::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c2c0::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:d40::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:57c0::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d380::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:a7:c4:3a:f9:76:9a:ab:b9:a9:07:4c:fb:1e:6f:83:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Dec 8 19:34:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=02378770b70005959922dd9504697751a1abf392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:75:76:5e:74:11:db:e1:87:97:0a:0a:e6:0f:
6d:f6:80:d7:5f:49:e8:7d:d8:93:2f:bc:5b:7e:e9:
dd:15:7f:01:00:d7:f1:49:74:5c:56:1c:9e:ff:16:
a9:de:8b:8c:84:4a:64:24:ef:5f:f5:f5:35:34:8b:
29:49:98:ef:41:d0:1d:96:cd:06:cb:d7:92:37:22:
33:73:19:83:a3:58:70:b1:1e:8f:d7:99:98:40:b7:
63:cf:ad:e0:77:84:34:d8:dc:bb:7c:67:24:65:63:
a8:62:4d:fb:3b:a9:c8:31:f9:57:20:08:75:4c:c5:
07:72:24:8a:ad:96:00:84:d6:46:9b:db:06:c0:b3:
43:f6:09:74:86:73:65:6e:67:a5:fc:b4:59:ca:1d:
5a:c8:47:ba:a9:cb:b9:62:bc:f9:09:69:8e:38:8c:
90:53:70:bf:b3:1e:98:48:47:5b:ed:39:29:dc:7a:
5b:2f:41:05:e5:8c:a8:66:c8:98:67:0f:e2:6e:45:
e7:6d:33:3f:c1:be:5e:ea:06:58:c5:5b:bf:26:27:
8b:7a:fd:da:7e:60:0b:4f:b4:ce:72:22:0b:9b:ac:
46:c5:3b:ac:f9:73:6d:5d:25:38:4b:17:3e:88:7c:
08:db:ef:2f:e8:62:46:3b:1a:f9:92:2d:3b:7b:be:
66:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:37:87:70:B7:00:05:95:99:22:DD:95:04:69:77:51:A1:AB:F3:92
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/AjeHcLcABZWZIt2VBGl3UaGr85I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:6b40::/29
2a0d:6ec0::/29
2a0d:7140::/29
2a0d:8cc0::/29
2a0d:9740::/29
2a0d:97c0::/29
2a0d:a3c0::/29
2a0d:ad40::/29
2a0d:b2c0::/29
2a0d:b540::/29
2a0d:b840::/29
2a0d:c1c0::/29
2a0d:cc40::/29
2a0d:ce40::/29
2a0d:d3c0::/29
2a0d:e1c0::/29
2a0d:e240::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c0::/29
2a0d:fbc0::/29
2a0e:8c0::/29
2a0e:19c0::/29
2a0e:adc0::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:2200::/29
2a0f:9a40::/29
2a0f:cb80::/29
2a0f:e180::/29
2a11:ec0::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:25c0::/29
2a11:2d00::/29
2a11:4480::/29
2a11:4f00::/29
2a11:6040::/29
2a11:62c0::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8980::/29
2a11:8bc0::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9900::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:a240::/29
2a11:a2c0::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c2c0::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:d40::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:57c0::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:ce00::/29
2a12:cf80::/29
2a12:d200::/29
2a12:d380::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
6e:8d:fd:65:09:f8:58:68:23:ab:fd:b9:66:13:b3:ad:b2:cc:
2b:df:68:53:2e:de:24:fb:a7:8f:28:2b:ac:4a:5d:49:cc:97:
d7:ba:5b:69:d7:2b:62:85:3d:4a:1c:27:0a:82:e1:69:b7:50:
be:0d:51:4e:58:b7:7a:bf:62:f1:3d:05:1b:8f:0f:60:17:17:
94:4f:5b:8d:07:de:d7:8b:df:5c:75:cf:82:c5:15:a3:42:d8:
38:94:8f:b3:c5:a7:ea:54:ec:3b:d3:01:46:76:50:cc:ae:48:
50:fd:66:96:d8:96:0f:58:af:ed:29:06:8f:12:d9:3b:8c:57:
7e:6d:48:3c:8c:a8:3e:39:82:28:81:07:be:56:d6:26:82:e9:
b8:e7:43:2b:ea:79:bd:6d:5d:a0:d5:9c:22:dd:9a:b1:06:09:
0d:04:29:db:4d:e1:59:84:83:60:31:ff:c0:9f:00:9d:d8:6d:
b2:d0:f5:ee:ec:4b:1e:ca:0b:99:78:ca:46:67:4b:40:24:02:
92:e5:fc:21:ca:34:a5:c7:6d:c7:b6:00:ef:00:22:0d:11:94:
1c:b5:c7:26:e7:17:bd:39:48:06:d1:d3:89:ae:17:45:f5:4a:
96:2b:09:70:1b:e8:fb:1c:9e:cc:bc:3a:54:9f:49:ac:55:33:
3a:ab:d3:5e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:30:46 2025 by rpki-client