Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FfR9K6ycukwBRH9rCSCDTaSghlk.roa
File: FfR9K6ycukwBRH9rCSCDTaSghlk.roa (raw, json)
Hash identifier: la84wDn9oS1JzfVzxC72NJRcgyYSMiWpYAirHuK++eU=
Subject key identifier: 15:F4:7D:2B:AC:9C:BA:4C:01:44:7F:6B:09:20:83:4D:A4:A0:86:59
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195380BF91CBF627E80350B77AFA4EA00C8
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FfR9K6ycukwBRH9rCSCDTaSghlk.roa
Signing time: Mon 24 Feb 2025 13:01:03 +0000
ROA not before: Mon 24 Feb 2025 13:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213505
IP address blocks: 2a0f:9e00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 28 Feb 2025 15:50:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:0b:f9:1c:bf:62:7e:80:35:0b:77:af:a4:ea:00:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 13:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15f47d2bac9cba4c01447f6b0920834da4a08659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:5d:01:84:47:2a:30:be:e4:c6:b3:52:76:
e9:02:27:64:3c:5d:a4:9d:1c:f5:5c:f8:79:27:a0:
5f:4f:5a:53:5e:71:0d:3e:63:10:26:d4:16:1b:6a:
92:98:de:2d:3f:0a:16:3f:5b:62:c9:57:e8:22:b9:
f9:fa:28:77:44:d9:7c:74:e4:66:12:f9:a9:31:3f:
69:90:cb:60:24:d2:02:be:df:d8:4e:d1:6f:04:64:
2d:48:64:82:d5:6a:db:f1:70:2f:4d:95:14:7d:89:
da:6a:b7:dd:81:8a:e2:c8:99:a7:5a:2c:c0:e9:f8:
e4:b4:71:8a:40:57:64:b7:bc:9b:3e:ba:9c:bb:03:
cb:a0:cd:8d:50:28:cc:71:3e:82:f9:d2:0d:93:27:
7c:7f:bf:5e:da:b3:87:b3:4a:ff:e9:90:f9:80:43:
96:26:8a:95:96:66:d7:54:2c:af:31:90:f7:8d:38:
f5:a2:aa:71:bf:21:a1:21:41:16:00:ac:66:98:a2:
c4:88:34:76:13:27:49:a1:28:69:42:9e:c3:e6:a7:
28:e5:8c:99:fe:1c:c9:02:9b:24:2e:a5:2d:ad:09:
9f:a0:cb:ee:73:e1:e4:d8:66:5f:08:6f:95:17:07:
45:bd:12:21:e8:98:21:2b:28:90:ef:62:82:a6:0e:
52:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F4:7D:2B:AC:9C:BA:4C:01:44:7F:6B:09:20:83:4D:A4:A0:86:59
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FfR9K6ycukwBRH9rCSCDTaSghlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:9e00::/29
Signature Algorithm: sha256WithRSAEncryption
b2:b9:ab:76:08:e9:75:ae:76:b0:31:9d:02:ea:79:91:9a:1d:
e7:3f:3b:cd:83:ab:57:15:36:62:dd:03:2e:e2:03:99:83:1e:
ab:21:33:ea:8f:8b:2f:3d:43:e8:ff:fe:fd:00:42:8b:97:f3:
9b:bf:4a:4d:2e:24:ce:e9:ce:14:82:c0:42:61:9b:28:4d:b7:
4b:f5:81:48:99:03:91:cb:c1:1f:d3:14:4e:79:19:31:8d:9c:
7f:7e:a4:e6:a8:18:e8:58:86:7d:9f:34:09:4a:45:fd:8f:91:
1e:e8:3e:57:6a:24:19:a3:5f:d5:28:25:f5:8b:f9:67:07:fa:
86:6d:e1:11:8d:57:56:78:5e:f4:ef:1c:95:6a:3f:ee:89:86:
2c:9c:96:8c:cf:aa:2a:3d:66:f4:cc:2f:88:1a:de:af:0a:be:
fd:37:8a:61:02:52:04:2e:2e:27:56:b6:f0:67:84:19:9a:69:
8f:79:eb:d1:77:81:3c:98:2e:fc:09:db:93:f9:51:bd:4e:19:
38:79:43:51:93:f7:3b:7f:b0:88:d7:62:3d:96:f6:2f:e6:7a:
f0:6f:ac:cc:fe:55:0f:31:9a:ca:8b:4a:41:5d:cc:69:19:62:
e3:09:4b:e1:12:ca:49:f1:b9:53:cd:51:96:64:8d:56:1b:3c:
47:76:ef:9d
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZU4C/kcv2J+gDULd6+k6gDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMjI0MTMwMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWY0N2QyYmFjOWNiYTRjMDE0NDdmNmIwOTIwODM0ZGE0YTA4NjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8VdAYRHKjC+5MazUnbpAidkPF2k
nRz1XPh5J6BfT1pTXnENPmMQJtQWG2qSmN4tPwoWP1tiyVfoIrn5+ih3RNl8dORm
EvmpMT9pkMtgJNICvt/YTtFvBGQtSGSC1Wrb8XAvTZUUfYnaarfdgYriyJmnWizA
6fjktHGKQFdkt7ybPrqcuwPLoM2NUCjMcT6C+dINkyd8f79e2rOHs0r/6ZD5gEOW
JoqVlmbXVCyvMZD3jTj1oqpxvyGhIUEWAKxmmKLEiDR2EydJoShpQp7D5qco5YyZ
/hzJApskLqUtrQmfoMvuc+Hk2GZfCG+VFwdFvRIh6JghKyiQ72KCpg5SvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFBX0fSusnLpMAUR/awkgg02koIZZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvRmZSOUs2eWN1a3dCUkg5ckNTQ0RUYVNnaGxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg+eADAN
BgkqhkiG9w0BAQsFAAOCAQEAsrmrdgjpda52sDGdAup5kZod5z87zYOrVxU2Yt0D
LuIDmYMeqyEz6o+LLz1D6P/+/QBCi5fzm79KTS4kzunOFILAQmGbKE23S/WBSJkD
kcvBH9MUTnkZMY2cf36k5qgY6FiGfZ80CUpF/Y+RHug+V2okGaNf1Sgl9Yv5Zwf6
hm3hEY1XVnhe9O8clWo/7omGLJyWjM+qKj1m9MwviBrerwq+/TeKYQJSBC4uJ1a2
8GeEGZppj3nr0XeBPJgu/Anbk/lRvU4ZOHlDUZP3O3+wiNdiPZb2L+Z68G+szP5V
DzGayotKQV3MaRli4wlL4RLKSfG5U81RlmSNVhs8R3bvnQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:07:27 2025 by rpki-client