Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DCx-CUx3cuMNLtHizvWumyHnBKI.roa
File: DCx-CUx3cuMNLtHizvWumyHnBKI.roa (raw, json)
Hash identifier: CdIn4JkAAT9fP7zdWdsALmw/zedqY4PpxC8iOTlL0CA=
Subject key identifier: 0C:2C:7E:09:4C:77:72:E3:0D:2E:D1:E2:CE:F5:AE:9B:21:E7:04:A2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019427482B14E1C2279FB3FD8FEC056EB23F
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DCx-CUx3cuMNLtHizvWumyHnBKI.roa
Signing time: Thu 02 Jan 2025 13:50:28 +0000
ROA not before: Thu 02 Jan 2025 13:50:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:a300::/29 maxlen: 29
2a0f:1740::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:1ac0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:33c0::/29 maxlen: 29
2a10:3840::/29 maxlen: 29
2a10:5c00::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:7700::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a11:1200::/29 maxlen: 29
2a11:1880::/29 maxlen: 29
2a11:5c80::/29 maxlen: 29
2a11:8700::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:9340::/29 maxlen: 29
2a11:9e00::/29 maxlen: 29
2a11:b200::/29 maxlen: 29
2a11:b740::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a11:efc0::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:ba00::/29 maxlen: 29
2a12:dc00::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 20 Jan 2025 09:27:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:2b:14:e1:c2:27:9f:b3:fd:8f:ec:05:6e:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c2c7e094c7772e30d2ed1e2cef5ae9b21e704a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:e5:ab:a4:cf:83:5c:6b:38:ac:e9:61:db:
37:88:71:b1:6c:ff:51:9d:93:ba:8f:c2:8a:5a:de:
57:9e:d5:7f:cb:1a:0f:de:9a:28:d7:b8:ba:a6:27:
01:cb:f1:0a:bd:b3:5a:0a:d4:5f:5a:64:4a:4a:0d:
4d:4b:b3:0a:3a:6d:13:1d:12:b6:fa:cd:bb:3a:5f:
2b:36:27:af:ac:07:53:d7:38:54:23:77:9b:61:ac:
4c:58:49:9a:33:11:29:a2:7c:c6:9b:6f:c2:16:be:
ba:05:c3:a6:2a:16:bc:8b:fe:6a:8e:65:6b:45:c1:
5f:84:69:4e:d4:a2:ff:fe:1f:67:57:76:09:af:66:
af:7a:0c:54:93:ed:0c:3f:87:16:54:ff:a6:fd:8f:
66:c5:19:cc:6a:6e:b9:9e:8e:fb:53:3b:d5:29:7b:
24:75:76:d2:6a:32:79:7e:ac:a4:23:18:9b:41:05:
e4:28:9d:0d:98:e4:44:a0:10:95:54:4e:56:ee:46:
69:1d:78:c0:cb:80:a6:4b:d2:ef:2a:ab:29:cc:c1:
f1:71:8f:28:83:25:cc:7e:88:95:b6:2d:9f:3a:9e:
a1:6a:25:c6:c1:60:a5:8f:e5:cd:f8:4c:6a:c4:a9:
a0:85:3d:e8:8a:98:8c:bf:91:54:16:33:9e:62:c0:
9c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2C:7E:09:4C:77:72:E3:0D:2E:D1:E2:CE:F5:AE:9B:21:E7:04:A2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/DCx-CUx3cuMNLtHizvWumyHnBKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:dfc0::/29
2a07:a300::/29
2a0f:1740::/29
2a0f:19c0::/29
2a0f:1ac0::/29
2a10:30c0::/29
2a10:33c0::/29
2a10:3840::/29
2a10:5c00::/29
2a10:6400::/29
2a10:7700::/29
2a10:7b00::/29
2a11:1200::/29
2a11:1880::/29
2a11:5c80::/29
2a11:8700::/29
2a11:89c0::/29
2a11:9340::/29
2a11:9e00::/29
2a11:b200::/29
2a11:b740::/29
2a11:e580::/29
2a11:efc0::/29
2a11:f040::/29
2a12:ba00::/29
2a12:dc00::/29
2a13:200::/29
2a13:cc0::/29
Signature Algorithm: sha256WithRSAEncryption
37:dd:03:d2:2a:d2:74:cb:43:d2:05:54:bd:d6:b3:90:f0:3c:
1f:08:b9:20:39:f9:1b:83:b4:a3:90:c6:16:13:76:37:66:fa:
69:e8:8c:72:2b:b4:46:45:b8:0d:e3:c4:ea:88:86:c9:b8:59:
b3:3b:4d:41:17:7c:c2:81:35:4d:04:95:84:ee:32:cb:2b:d4:
e5:3c:e8:18:4a:99:77:de:31:3a:4e:f3:ac:48:59:83:03:01:
9c:ac:7d:2b:57:d8:9b:b5:5d:aa:10:87:b6:b2:7e:94:f7:65:
cd:b1:dc:e0:49:dd:3d:e4:ee:52:2a:09:fb:04:a0:67:98:cd:
3b:ec:d7:77:8a:b0:69:67:91:2a:ce:93:54:d0:14:bd:80:c8:
6a:c1:28:05:cb:82:ae:bf:93:7e:a7:5f:3a:2e:f0:ca:11:85:
08:57:ad:83:d8:a8:14:28:f6:48:fa:36:51:6e:09:1c:45:c9:
07:7e:95:73:2f:bf:ad:d6:e8:3d:75:18:c7:31:45:32:31:49:
d4:b5:40:71:e1:c0:9f:86:fa:b2:fa:eb:48:db:ef:f3:d6:bd:
0e:ab:9f:16:d9:28:d3:fa:b6:f4:97:45:05:79:c5:71:e3:40:
d9:94:5a:8a:5a:ba:c0:24:33:e3:99:f5:f5:4c:90:c6:a5:74:
9f:79:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:08 2025 by rpki-client