Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/U0nyQUU-HN6hmtGSbo5Pk43kJnY.roa
File: U0nyQUU-HN6hmtGSbo5Pk43kJnY.roa (raw, json)
Hash identifier: ivH2rTly3bL8tv9OwuFDes5PZ1i5M5rbmLJFEU5D4nc=
Subject key identifier: 53:49:F2:41:45:3E:1C:DE:A1:9A:D1:92:6E:8E:4F:93:8D:E4:26:76
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019388F1D405B5D4B5B477AE4B8E49C581E7
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/U0nyQUU-HN6hmtGSbo5Pk43kJnY.roa
Signing time: Mon 02 Dec 2024 19:56:10 +0000
ROA not before: Mon 02 Dec 2024 19:56:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34567
IP address blocks: 2a0d:6a40::/29 maxlen: 29
2a0d:6b40::/29 maxlen: 29
2a0d:6ec0::/29 maxlen: 29
2a0d:7140::/29 maxlen: 29
2a0d:8cc0::/29 maxlen: 29
2a0d:9740::/29 maxlen: 29
2a0d:97c0::/29 maxlen: 29
2a0d:a3c0::/29 maxlen: 29
2a0d:ad40::/29 maxlen: 29
2a0d:b2c0::/29 maxlen: 29
2a0d:b540::/29 maxlen: 29
2a0d:b840::/29 maxlen: 29
2a0d:c1c0::/29 maxlen: 29
2a0d:cc40::/29 maxlen: 29
2a0d:ce40::/29 maxlen: 29
2a0d:d3c0::/29 maxlen: 29
2a0d:e1c0::/29 maxlen: 29
2a0d:e240::/29 maxlen: 29
2a0d:e340::/29 maxlen: 29
2a0d:f140::/29 maxlen: 29
2a0d:f5c0::/29 maxlen: 29
2a0d:fbc0::/29 maxlen: 29
2a0e:8c0::/29 maxlen: 29
2a0e:19c0::/29 maxlen: 29
2a0e:adc0::/29 maxlen: 29
2a0e:af40::/29 maxlen: 29
2a0e:e9c0::/29 maxlen: 29
2a0f:2200::/29 maxlen: 29
2a0f:9a40::/29 maxlen: 29
2a0f:cb80::/29 maxlen: 29
2a0f:e180::/29 maxlen: 29
2a11:ec0::/29 maxlen: 29
2a11:17c0::/29 maxlen: 29
2a11:1c80::/29 maxlen: 29
2a11:25c0::/29 maxlen: 29
2a11:2d00::/29 maxlen: 29
2a11:4480::/29 maxlen: 29
2a11:4540::/29 maxlen: 29
2a11:4f00::/29 maxlen: 29
2a11:6040::/29 maxlen: 29
2a11:62c0::/29 maxlen: 29
2a11:64c0::/29 maxlen: 29
2a11:6b80::/29 maxlen: 29
2a11:77c0::/29 maxlen: 29
2a11:81c0::/29 maxlen: 29
2a11:86c0::/29 maxlen: 29
2a11:8740::/29 maxlen: 29
2a11:8980::/29 maxlen: 29
2a11:8bc0::/29 maxlen: 29
2a11:9040::/29 maxlen: 29
2a11:9580::/29 maxlen: 29
2a11:9640::/29 maxlen: 29
2a11:9900::/29 maxlen: 29
2a11:9f00::/29 maxlen: 29
2a11:a040::/29 maxlen: 29
2a11:a140::/29 maxlen: 29
2a11:a240::/29 maxlen: 29
2a11:a2c0::/29 maxlen: 29
2a11:b0c0::/29 maxlen: 29
2a11:b4c0::/29 maxlen: 29
2a11:b700::/29 maxlen: 29
2a11:bb00::/29 maxlen: 29
2a11:bbc0::/29 maxlen: 29
2a11:bdc0::/29 maxlen: 29
2a11:be40::/29 maxlen: 29
2a11:bf80::/29 maxlen: 29
2a11:c240::/29 maxlen: 29
2a11:c2c0::/29 maxlen: 29
2a11:c580::/29 maxlen: 29
2a11:c680::/29 maxlen: 29
2a11:cec0::/29 maxlen: 29
2a11:d340::/29 maxlen: 29
2a11:d880::/29 maxlen: 29
2a11:dac0::/29 maxlen: 29
2a11:df00::/29 maxlen: 29
2a11:e2c0::/29 maxlen: 29
2a11:e640::/29 maxlen: 29
2a11:e6c0::/29 maxlen: 29
2a11:eac0::/29 maxlen: 29
2a11:fa40::/29 maxlen: 29
2a11:fc40::/29 maxlen: 29
2a12:580::/29 maxlen: 29
2a12:640::/29 maxlen: 29
2a12:900::/29 maxlen: 29
2a12:d40::/29 maxlen: 29
2a12:dc0::/29 maxlen: 29
2a12:e40::/29 maxlen: 29
2a12:e80::/29 maxlen: 29
2a12:11c0::/29 maxlen: 29
2a12:12c0::/29 maxlen: 29
2a12:1a80::/29 maxlen: 29
2a12:2800::/29 maxlen: 29
2a12:2b80::/29 maxlen: 29
2a12:57c0::/29 maxlen: 29
2a12:6480::/29 maxlen: 29
2a12:8380::/29 maxlen: 29
2a12:8480::/29 maxlen: 29
2a12:8780::/29 maxlen: 29
2a12:9200::/29 maxlen: 29
2a12:a500::/29 maxlen: 29
2a12:aa00::/29 maxlen: 29
2a12:af00::/29 maxlen: 29
2a12:b400::/29 maxlen: 29
2a12:b700::/29 maxlen: 29
2a12:bb00::/29 maxlen: 29
2a12:bc00::/29 maxlen: 29
2a12:bc80::/29 maxlen: 29
2a12:c980::/29 maxlen: 29
2a12:ce00::/29 maxlen: 29
2a12:cf80::/29 maxlen: 29
2a12:d200::/29 maxlen: 29
2a12:d380::/29 maxlen: 29
2a12:d800::/29 maxlen: 29
2a12:f980::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 08 Dec 2024 19:34:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:88:f1:d4:05:b5:d4:b5:b4:77:ae:4b:8e:49:c5:81:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Dec 2 19:56:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5349f241453e1cdea19ad1926e8e4f938de42676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3f:5a:b4:45:54:3c:94:a5:eb:64:55:19:68:
e6:b0:8e:98:38:6b:97:a4:75:04:be:d0:25:c5:08:
55:de:de:c9:f0:49:e3:25:f2:61:07:e8:0a:3e:8b:
0a:93:10:fb:ef:90:ba:ae:a9:41:87:ea:72:22:e0:
a7:9f:69:0d:89:5b:f8:79:ca:72:ff:ae:b0:4c:a8:
2f:25:4b:2b:7d:0e:10:07:e4:3e:91:b2:91:08:14:
fe:dd:94:18:27:ee:c1:c9:6b:db:9e:b5:f0:77:15:
30:59:b6:8c:16:a5:25:3b:23:7f:fe:13:c1:c8:4d:
c0:29:ca:38:a9:0b:84:ce:6c:47:bc:28:18:2b:22:
07:03:34:b3:3e:4a:24:e6:b1:f1:41:10:a0:b3:bc:
21:9b:d6:be:1f:bd:24:32:d8:0f:f4:c1:c3:e5:fa:
a9:41:39:3f:3a:ae:e3:f0:c2:f1:f3:bb:e7:ca:33:
88:ee:4e:b5:34:ca:7c:cb:16:80:2b:f5:9e:08:7e:
1e:8a:49:0b:bc:f3:97:8e:1c:07:cf:28:6a:2a:1c:
b6:07:b1:39:2e:3f:93:9a:32:41:bc:e3:71:1e:47:
6b:9d:a5:db:29:ce:d5:ff:29:92:b4:81:94:08:9d:
e2:26:08:45:55:2b:96:aa:fb:34:cf:41:fd:6b:e8:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:49:F2:41:45:3E:1C:DE:A1:9A:D1:92:6E:8E:4F:93:8D:E4:26:76
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/U0nyQUU-HN6hmtGSbo5Pk43kJnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6a40::/29
2a0d:6b40::/29
2a0d:6ec0::/29
2a0d:7140::/29
2a0d:8cc0::/29
2a0d:9740::/29
2a0d:97c0::/29
2a0d:a3c0::/29
2a0d:ad40::/29
2a0d:b2c0::/29
2a0d:b540::/29
2a0d:b840::/29
2a0d:c1c0::/29
2a0d:cc40::/29
2a0d:ce40::/29
2a0d:d3c0::/29
2a0d:e1c0::/29
2a0d:e240::/29
2a0d:e340::/29
2a0d:f140::/29
2a0d:f5c0::/29
2a0d:fbc0::/29
2a0e:8c0::/29
2a0e:19c0::/29
2a0e:adc0::/29
2a0e:af40::/29
2a0e:e9c0::/29
2a0f:2200::/29
2a0f:9a40::/29
2a0f:cb80::/29
2a0f:e180::/29
2a11:ec0::/29
2a11:17c0::/29
2a11:1c80::/29
2a11:25c0::/29
2a11:2d00::/29
2a11:4480::/29
2a11:4540::/29
2a11:4f00::/29
2a11:6040::/29
2a11:62c0::/29
2a11:64c0::/29
2a11:6b80::/29
2a11:77c0::/29
2a11:81c0::/29
2a11:86c0::/29
2a11:8740::/29
2a11:8980::/29
2a11:8bc0::/29
2a11:9040::/29
2a11:9580::/29
2a11:9640::/29
2a11:9900::/29
2a11:9f00::/29
2a11:a040::/29
2a11:a140::/29
2a11:a240::/29
2a11:a2c0::/29
2a11:b0c0::/29
2a11:b4c0::/29
2a11:b700::/29
2a11:bb00::/29
2a11:bbc0::/29
2a11:bdc0::/29
2a11:be40::/29
2a11:bf80::/29
2a11:c240::/29
2a11:c2c0::/29
2a11:c580::/29
2a11:c680::/29
2a11:cec0::/29
2a11:d340::/29
2a11:d880::/29
2a11:dac0::/29
2a11:df00::/29
2a11:e2c0::/29
2a11:e640::/29
2a11:e6c0::/29
2a11:eac0::/29
2a11:fa40::/29
2a11:fc40::/29
2a12:580::/29
2a12:640::/29
2a12:900::/29
2a12:d40::/29
2a12:dc0::/29
2a12:e40::/29
2a12:e80::/29
2a12:11c0::/29
2a12:12c0::/29
2a12:1a80::/29
2a12:2800::/29
2a12:2b80::/29
2a12:57c0::/29
2a12:6480::/29
2a12:8380::/29
2a12:8480::/29
2a12:8780::/29
2a12:9200::/29
2a12:a500::/29
2a12:aa00::/29
2a12:af00::/29
2a12:b400::/29
2a12:b700::/29
2a12:bb00::/29
2a12:bc00::/29
2a12:bc80::/29
2a12:c980::/29
2a12:ce00::/29
2a12:cf80::/29
2a12:d200::/29
2a12:d380::/29
2a12:d800::/29
2a12:f980::/29
Signature Algorithm: sha256WithRSAEncryption
2a:a3:da:40:b9:41:ed:73:bb:b4:2e:f7:f2:2d:7c:11:10:1c:
45:69:a1:5f:be:d1:dd:f0:e8:84:a9:8c:60:77:0d:5d:38:dc:
66:d6:1b:c2:06:68:16:57:2b:14:80:66:e4:87:b9:5b:1d:16:
1d:ce:58:74:20:64:a0:e3:fb:87:5c:15:84:64:93:db:8f:3e:
12:26:86:4c:45:23:bf:1a:29:a2:01:3f:13:8c:92:f4:c6:21:
fb:b4:fc:68:06:95:94:37:21:60:4e:d1:bf:06:c9:1a:e1:e3:
27:e4:2b:5d:85:ac:04:13:d7:0f:c8:e9:85:43:9e:da:c3:18:
7e:48:57:fd:47:49:b3:c0:0e:08:aa:b6:21:40:95:71:99:ca:
72:10:4a:0c:6d:8a:d7:e6:5e:c9:a3:c7:e2:d7:f2:0f:ef:35:
95:19:c9:1b:93:90:de:02:b7:bd:33:32:39:99:59:10:39:b1:
2f:c0:a0:ee:a2:dc:1d:22:f0:4c:af:65:4f:7a:5a:cb:eb:2b:
79:f3:a1:09:05:0d:ae:86:f0:fa:ac:da:85:cb:07:53:de:84:
64:b9:8c:21:fc:8a:48:f2:35:7c:62:cf:31:c1:13:59:f3:b6:
a3:75:fb:2d:e9:1b:c5:ab:a5:58:16:f4:fc:cf:7d:99:98:6d:
1d:6b:37:f8
-----BEGIN CERTIFICATE-----
MIIIHzCCBwegAwIBAgISAZOI8dQFtdS1tHeuS45JxYHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQxMjAyMTk1NjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQ5ZjI0MTQ1M2UxY2RlYTE5YWQxOTI2ZThlNGY5MzhkZTQyNjc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2j9atEVUPJSl62RVGWjmsI6YOGuX
pHUEvtAlxQhV3t7J8EnjJfJhB+gKPosKkxD775C6rqlBh+pyIuCnn2kNiVv4ecpy
/66wTKgvJUsrfQ4QB+Q+kbKRCBT+3ZQYJ+7ByWvbnrXwdxUwWbaMFqUlOyN//hPB
yE3AKco4qQuEzmxHvCgYKyIHAzSzPkok5rHxQRCgs7whm9a+H70kMtgP9MHD5fqp
QTk/Oq7j8MLx87vnyjOI7k61NMp8yxaAK/WeCH4eikkLvPOXjhwHzyhqKhy2B7E5
Lj+TmjJBvONxHkdrnaXbKc7V/ymStIGUCJ3iJghFVSuWqvs0z0H9a+j/xwIDAQAB
o4IFKzCCBScwHQYDVR0OBBYEFFNJ8kFFPhzeoZrRkm6OT5ON5CZ2MB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvVTBueVFVVS1ITjZobXRHU2JvNVBrNDNrSm5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIDPwYIKwYBBQUHAQcBAf8EggMuMIIDKjCCAyYEAgACMIID
HgMFAyoNakADBQMqDWtAAwUDKg1uwAMFAyoNcUADBQMqDYzAAwUDKg2XQAMFAyoN
l8ADBQMqDaPAAwUDKg2tQAMFAyoNssADBQMqDbVAAwUDKg24QAMFAyoNwcADBQMq
DcxAAwUDKg3OQAMFAyoN08ADBQMqDeHAAwUDKg3iQAMFAyoN40ADBQMqDfFAAwUD
Kg31wAMFAyoN+8ADBQMqDgjAAwUDKg4ZwAMFAyoOrcADBQMqDq9AAwUDKg7pwAMF
AyoPIgADBQMqD5pAAwUDKg/LgAMFAyoP4YADBQMqEQ7AAwUDKhEXwAMFAyoRHIAD
BQMqESXAAwUDKhEtAAMFAyoRRIADBQMqEUVAAwUDKhFPAAMFAyoRYEADBQMqEWLA
AwUDKhFkwAMFAyoRa4ADBQMqEXfAAwUDKhGBwAMFAyoRhsADBQMqEYdAAwUDKhGJ
gAMFAyoRi8ADBQMqEZBAAwUDKhGVgAMFAyoRlkADBQMqEZkAAwUDKhGfAAMFAyoR
oEADBQMqEaFAAwUDKhGiQAMFAyoRosADBQMqEbDAAwUDKhG0wAMFAyoRtwADBQMq
EbsAAwUDKhG7wAMFAyoRvcADBQMqEb5AAwUDKhG/gAMFAyoRwkADBQMqEcLAAwUD
KhHFgAMFAyoRxoADBQMqEc7AAwUDKhHTQAMFAyoR2IADBQMqEdrAAwUDKhHfAAMF
AyoR4sADBQMqEeZAAwUDKhHmwAMFAyoR6sADBQMqEfpAAwUDKhH8QAMFAyoSBYAD
BQMqEgZAAwUDKhIJAAMFAyoSDUADBQMqEg3AAwUDKhIOQAMFAyoSDoADBQMqEhHA
AwUDKhISwAMFAyoSGoADBQMqEigAAwUDKhIrgAMFAyoSV8ADBQMqEmSAAwUDKhKD
gAMFAyoShIADBQMqEoeAAwUDKhKSAAMFAyoSpQADBQMqEqoAAwUDKhKvAAMFAyoS
tAADBQMqErcAAwUDKhK7AAMFAyoSvAADBQMqEryAAwUDKhLJgAMFAyoSzgADBQMq
Es+AAwUDKhLSAAMFAyoS04ADBQMqEtgAAwUDKhL5gDANBgkqhkiG9w0BAQsFAAOC
AQEAKqPaQLlB7XO7tC738i18ERAcRWmhX77R3fDohKmMYHcNXTjcZtYbwgZoFlcr
FIBm5Ie5Wx0WHc5YdCBkoOP7h1wVhGST248+EiaGTEUjvxopogE/E4yS9MYh+7T8
aAaVlDchYE7RvwbJGuHjJ+QrXYWsBBPXD8jphUOe2sMYfkhX/UdJs8AOCKq2IUCV
cZnKchBKDG2K1+ZeyaPH4tfyD+81lRnJG5OQ3gK3vTMyOZlZEDmxL8Cg7qLcHSLw
TK9lT3pay+srefOhCQUNrobw+qzahcsHU96EZLmMIfyKSPI1fGLPMcETWfO2o3X7
LekbxaulWBb0/M99mZhtHWs3+A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 23:37:40 2025 by rpki-client