Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/b-fZU063IRXBr0_njPWLHik1IME.roa
File: b-fZU063IRXBr0_njPWLHik1IME.roa (raw, json)
Hash identifier: QnZY9irbc3BhKzjR2VvGlYqWf/DBrKHZfstPePWZwRA=
Subject key identifier: 6F:E7:D9:53:4E:B7:21:15:C1:AF:4F:E7:8C:F5:8B:1E:29:35:20:C1
Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Certificate serial: 0195CC0BF1F1BAD8C9E60D287BA838A5A571
Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/b-fZU063IRXBr0_njPWLHik1IME.roa
Signing time: Tue 25 Mar 2025 06:44:49 +0000
ROA not before: Tue 25 Mar 2025 06:44:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216213
IP address blocks: 2a14:c880::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 31 Mar 2025 10:48:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:0b:f1:f1:ba:d8:c9:e6:0d:28:7b:a8:38:a5:a5:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44
Validity
Not Before: Mar 25 06:44:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fe7d9534eb72115c1af4fe78cf58b1e293520c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:91:c5:48:a5:31:f4:c8:f6:ff:ae:f6:87:ca:
1a:35:6c:6f:12:0c:c9:c5:ec:a4:87:a9:2b:8e:cb:
69:8a:be:21:a7:47:c5:e5:d6:86:b2:63:16:f8:17:
0a:6f:46:25:a5:b7:3b:cb:20:2c:e4:6e:e3:bf:dc:
21:62:75:83:d7:57:09:6e:5d:0c:f7:b4:c9:51:75:
c5:6d:2b:de:a2:76:33:42:6b:91:02:77:3f:1f:cc:
3e:07:ce:a2:3a:d3:09:b7:09:71:30:23:29:65:16:
aa:9d:96:58:a5:70:89:7d:d2:5f:cb:3e:ca:36:49:
d7:fd:cf:6f:82:22:ef:a9:b4:c1:83:81:90:f8:57:
d5:d3:74:f9:fb:9f:f3:46:51:88:56:f7:7c:57:51:
f9:33:2d:de:ff:28:63:7e:c4:e3:80:54:1b:a4:3d:
89:47:58:a8:42:0a:6a:4d:73:56:e7:49:cf:47:5f:
1e:fc:87:9c:cc:b9:e2:5d:fc:92:c7:41:9b:65:12:
55:3b:cf:ac:43:64:21:74:a4:b0:69:8a:e1:76:86:
a0:85:94:ae:d2:53:ab:a1:47:67:a2:a6:40:9b:fb:
3d:70:69:4d:8b:13:07:b2:2e:8d:0f:35:91:40:c0:
d9:e5:2a:99:16:71:cc:9b:6d:63:ed:66:1f:6b:74:
07:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:D9:53:4E:B7:21:15:C1:AF:4F:E7:8C:F5:8B:1E:29:35:20:C1
X509v3 Authority Key Identifier:
keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/b-fZU063IRXBr0_njPWLHik1IME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:c880::/29
Signature Algorithm: sha256WithRSAEncryption
34:dc:f2:d3:02:2c:7d:87:f2:7b:e0:a5:52:eb:ae:4d:b6:7d:
36:c9:d7:21:be:e2:89:b1:a7:d0:b5:e6:76:aa:21:18:00:28:
06:83:91:91:9e:40:fc:8e:2f:57:73:dd:52:8e:17:ff:51:f9:
4d:2f:9b:e4:7b:61:2b:e9:62:e8:e1:8f:94:44:9d:7f:c1:0a:
db:a4:68:2d:ed:03:72:b1:c6:4e:da:68:25:e1:3e:4d:7b:93:
d1:76:d7:2d:a5:b9:66:e0:47:a1:85:7b:15:88:0c:cd:0d:5c:
88:bd:18:ef:3c:c1:36:0f:00:d8:49:52:4b:4c:79:da:ab:54:
cb:5c:75:6a:d9:f2:76:f6:f4:2f:10:e6:10:81:bd:6e:56:1b:
18:e6:6d:8f:9d:a0:a4:93:3f:50:f4:9b:16:3a:66:a7:d6:27:
e6:c1:2a:ff:e6:d6:03:a9:6e:64:1b:af:d4:a7:09:19:d3:34:
6b:47:1d:10:3e:a5:f5:4e:13:a2:a3:fc:04:90:9b:9f:95:6f:
6f:be:78:bc:dc:a8:4f:21:b5:66:08:91:6c:41:3e:60:12:46:
1c:66:6d:47:62:68:13:3d:bb:79:14:09:1f:40:cf:44:79:68:
ed:e2:75:fe:09:15:43:e4:04:19:43:55:6f:ef:b1:19:a0:09:
f9:2c:35:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZXMC/HxutjJ5g0oe6g4paVxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl
MTRlNDQwHhcNMjUwMzI1MDY0NDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmU3ZDk1MzRlYjcyMTE1YzFhZjRmZTc4Y2Y1OGIxZTI5MzUyMGMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5HFSKUx9Mj2/672h8oaNWxvEgzJ
xeykh6krjstpir4hp0fF5daGsmMW+BcKb0Ylpbc7yyAs5G7jv9whYnWD11cJbl0M
97TJUXXFbSveonYzQmuRAnc/H8w+B86iOtMJtwlxMCMpZRaqnZZYpXCJfdJfyz7K
NknX/c9vgiLvqbTBg4GQ+FfV03T5+5/zRlGIVvd8V1H5My3e/yhjfsTjgFQbpD2J
R1ioQgpqTXNW50nPR18e/IeczLniXfySx0GbZRJVO8+sQ2QhdKSwaYrhdoaghZSu
0lOroUdnoqZAm/s9cGlNixMHsi6NDzWRQMDZ5SqZFnHMm21j7WYfa3QHZQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFG/n2VNOtyEVwa9P54z1ix4pNSDBMB8GA1UdIwQY
MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt
NzlmN2I2ZWE3YzE0LzEvYi1mWlUwNjNJUlhCcjBfbmpQV0xIaWsxSU1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0
LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhTIgDAN
BgkqhkiG9w0BAQsFAAOCAQEANNzy0wIsfYfye+ClUuuuTbZ9NsnXIb7iibGn0LXm
dqohGAAoBoORkZ5A/I4vV3PdUo4X/1H5TS+b5HthK+li6OGPlESdf8EK26RoLe0D
crHGTtpoJeE+TXuT0XbXLaW5ZuBHoYV7FYgMzQ1ciL0Y7zzBNg8A2ElSS0x52qtU
y1x1atnydvb0LxDmEIG9blYbGOZtj52gpJM/UPSbFjpmp9Yn5sEq/+bWA6luZBuv
1KcJGdM0a0cdED6l9U4ToqP8BJCbn5Vvb754vNyoTyG1ZgiRbEE+YBJGHGZtR2Jo
Ez27eRQJH0DPRHlo7eJ1/gkVQ+QEGUNVb++xGaAJ+Sw1Yg==
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:40:02 2025 by rpki-client