Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7aUS6b1s2jE9WRbRNxN_jbV_lfc.roa
File: 7aUS6b1s2jE9WRbRNxN_jbV_lfc.roa (raw, json)
Hash identifier: ccermb7YY1uZCBjd62jElunj66u5Q06lxTOhtlDnFbQ=
Subject key identifier: ED:A5:12:E9:BD:6C:DA:31:3D:59:16:D1:37:13:7F:8D:B5:7F:95:F7
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195AF5AACE218D117BD631823AE8A1FA3F2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7aUS6b1s2jE9WRbRNxN_jbV_lfc.roa
Signing time: Wed 19 Mar 2025 17:01:50 +0000
ROA not before: Wed 19 Mar 2025 17:01:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214773
IP address blocks: 2a05:b900::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 25 Mar 2025 16:15:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:af:5a:ac:e2:18:d1:17:bd:63:18:23:ae:8a:1f:a3:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 19 17:01:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eda512e9bd6cda313d5916d137137f8db57f95f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:93:96:94:c1:e5:07:3b:46:a7:21:94:ba:94:
3d:f2:ff:0e:49:14:be:53:1c:39:50:c0:a7:9e:8a:
be:e2:ff:2b:e4:99:7f:17:c1:f1:a1:25:bb:a1:d6:
ae:3c:f8:26:88:4b:c0:99:cc:34:22:d2:9b:29:fa:
17:e6:84:36:1a:dd:ab:d3:81:58:0f:48:fe:93:87:
e7:6b:06:22:e6:dd:a5:60:ce:1b:71:0d:02:4e:e2:
b8:09:15:26:20:ed:39:b6:a9:2a:c5:5d:6e:63:6f:
ac:8a:e2:03:46:cc:77:a0:6c:f4:ac:3d:0e:ab:26:
7b:d3:4d:3f:2e:f2:c8:8e:b1:69:bc:38:6b:a1:09:
5c:d8:0a:84:97:b2:c4:1f:ac:3e:6b:63:fc:d7:5d:
77:61:5f:78:27:fd:99:b7:a1:06:b0:4d:86:9c:b2:
28:6c:4d:00:b0:04:c5:9a:1f:3d:bc:a5:07:25:0b:
ae:fb:8e:d2:69:93:ac:d5:55:26:e3:89:99:b1:0c:
7a:d9:35:76:ed:6a:86:6e:73:7a:1e:4c:bc:16:bd:
de:a9:d8:a9:f2:20:64:fd:b8:22:d1:44:d8:a7:32:
8d:9e:24:ac:44:c7:3b:a4:df:22:3b:ad:db:45:f5:
f4:a5:0d:73:c6:20:9e:4d:8a:96:83:26:b7:d1:cc:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A5:12:E9:BD:6C:DA:31:3D:59:16:D1:37:13:7F:8D:B5:7F:95:F7
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/7aUS6b1s2jE9WRbRNxN_jbV_lfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b900::/29
2a12:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
31:32:38:f5:1c:36:95:be:3a:5d:4e:20:09:06:2b:c4:06:33:
5d:b8:96:cd:d7:55:c3:39:0a:b8:a6:d1:fb:ec:d0:a9:9c:6f:
45:bc:04:ea:92:80:f3:45:cf:0b:2a:a9:ac:b1:a3:ff:fa:93:
ad:11:62:d1:c1:c0:72:28:4c:9a:90:82:d0:f2:ab:8b:f2:bb:
48:38:67:bb:da:b7:c5:5c:57:a5:05:56:0b:29:7a:76:25:71:
68:00:4c:b2:be:29:c0:2d:51:42:f5:09:87:e4:fc:4e:20:95:
24:44:2b:bf:02:6c:78:a2:d3:af:c7:8b:29:e1:55:e7:81:80:
c4:f0:4b:16:c6:13:63:b2:3c:88:37:3f:8f:2f:4e:94:6b:3b:
5e:69:2f:b3:67:05:ae:7c:4b:d7:b3:f7:b1:3a:2e:b8:ba:a7:
5f:c5:3b:2f:59:4e:dc:12:91:fd:46:35:aa:62:75:69:21:ab:
30:d1:e0:b0:6c:5a:4d:c6:24:07:ba:4d:cc:ae:8a:d8:23:2c:
0c:92:ee:a7:41:af:90:49:74:f2:7c:05:7f:ed:26:b7:b6:62:
01:e5:a8:e6:b2:a3:e9:d9:6a:3c:31:87:26:4f:ef:80:53:80:
8f:4a:83:d4:e5:2d:8e:c4:2f:73:e1:72:58:20:ed:6b:dd:80:
bd:c7:d1:40
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZWvWqziGNEXvWMYI66KH6PyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzE5MTcwMTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE1MTJlOWJkNmNkYTMxM2Q1OTE2ZDEzNzEzN2Y4ZGI1N2Y5NWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JOWlMHlBztGpyGUupQ98v8OSRS+
Uxw5UMCnnoq+4v8r5Jl/F8HxoSW7odauPPgmiEvAmcw0ItKbKfoX5oQ2Gt2r04FY
D0j+k4fnawYi5t2lYM4bcQ0CTuK4CRUmIO05tqkqxV1uY2+siuIDRsx3oGz0rD0O
qyZ7000/LvLIjrFpvDhroQlc2AqEl7LEH6w+a2P81113YV94J/2Zt6EGsE2GnLIo
bE0AsATFmh89vKUHJQuu+47SaZOs1VUm44mZsQx62TV27WqGbnN6Hky8Fr3eqdip
8iBk/bgi0UTYpzKNniSsRMc7pN8iO63bRfX0pQ1zxiCeTYqWgya30cwaiwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFO2lEum9bNoxPVkW0TcTf421f5X3MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvN2FVUzZiMXMyakU5V1JiUk54Tl9qYlZfbGZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgW5AAMF
AyoSSsAwDQYJKoZIhvcNAQELBQADggEBADEyOPUcNpW+Ol1OIAkGK8QGM124ls3X
VcM5Crim0fvs0Kmcb0W8BOqSgPNFzwsqqayxo//6k60RYtHBwHIoTJqQgtDyq4vy
u0g4Z7vat8VcV6UFVgspenYlcWgATLK+KcAtUUL1CYfk/E4glSREK78CbHii06/H
iynhVeeBgMTwSxbGE2OyPIg3P48vTpRrO15pL7NnBa58S9ez97E6Lri6p1/FOy9Z
TtwSkf1GNapidWkhqzDR4LBsWk3GJAe6TcyuitgjLAyS7qdBr5BJdPJ8BX/tJre2
YgHlqOayo+nZajwxhyZP74BTgI9Kg9TlLY7EL3Phclgg7WvdgL3H0UA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:48 2025 by rpki-client