Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H9gv8q2HgjRX0WE37sBuT70Ul8Y.roa
File: H9gv8q2HgjRX0WE37sBuT70Ul8Y.roa (raw, json)
Hash identifier: C1cH8+rsHIUQY9mG1j7W/K++I+3lGsT5kOjcWBgjmAE=
Subject key identifier: 1F:D8:2F:F2:AD:87:82:34:57:D1:61:37:EE:C0:6E:4F:BD:14:97:C6
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019734CF1FE9E41D21882DCC0CC918DCBB37
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H9gv8q2HgjRX0WE37sBuT70Ul8Y.roa
Signing time: Tue 03 Jun 2025 08:01:18 +0000
ROA not before: Tue 03 Jun 2025 08:01:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a06:a5c0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:bb40::/29 maxlen: 29
2a09:b700::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:3240::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
2a11:7440::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 04 Jun 2025 14:37:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:34:cf:1f:e9:e4:1d:21:88:2d:cc:0c:c9:18:dc:bb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 3 08:01:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1fd82ff2ad87823457d16137eec06e4fbd1497c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:1b:e4:63:10:cc:8c:9b:ac:36:b7:f2:b9:
5f:a9:61:54:fb:3d:e0:8c:47:8c:ed:e9:7e:ed:ec:
0b:14:d4:07:6c:70:9a:e7:39:8b:36:aa:38:a4:68:
df:c8:d0:5c:29:48:7b:0d:78:c4:20:b2:17:d1:f8:
95:99:5b:a1:9b:3d:89:f9:9d:b7:5d:47:ae:18:b1:
15:05:67:1a:0d:97:44:dc:2e:f5:3a:ea:9c:2c:d0:
e0:36:fd:48:14:62:ba:ab:42:84:6b:59:6f:99:16:
a5:fb:6e:d5:26:69:6a:86:22:02:2c:10:c3:15:53:
fc:96:d5:6a:95:03:90:c7:66:b7:bf:dc:49:c9:a4:
ed:19:fe:5a:b0:26:8f:2f:d0:08:cd:86:36:4d:38:
90:57:2c:2e:c3:13:b7:d0:59:4f:68:fe:79:a9:54:
bd:cd:62:7c:f3:f6:d8:c2:e2:88:af:e9:90:86:1e:
6b:3e:ec:91:2e:ec:3d:71:24:b4:10:92:d3:0b:5b:
2c:9e:7e:31:18:3f:3d:8f:16:94:c2:4c:a7:2b:ad:
54:f3:10:46:75:ac:8d:b4:85:fa:2e:0c:2f:d7:f9:
18:3c:6a:6b:48:1b:df:13:ab:c4:9d:9c:d3:ae:6f:
9a:6c:49:69:3c:10:03:65:cf:53:52:94:79:46:5b:
31:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D8:2F:F2:AD:87:82:34:57:D1:61:37:EE:C0:6E:4F:BD:14:97:C6
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/H9gv8q2HgjRX0WE37sBuT70Ul8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a5c0::/29
2a06:dfc0::/29
2a07:bb40::/29
2a09:b700::/29
2a0d:8f80::/29
2a0f:e00::/29
2a0f:19c0::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:2d40::/29
2a0f:3240::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:e540::/29
2a0f:e600::/29
2a0f:e9c0::/29
2a10:30c0::/29
2a10:3140::/29
2a10:31c0::/29
2a10:3340::/29
2a10:3540::/29
2a10:36c0::/29
2a10:3740::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6400::/29
2a10:6500::/29
2a10:6b00::/29
2a10:6d00::/29
2a10:7100::/29
2a10:7300::/29
2a10:7500::/29
2a10:7900::/29
2a10:7b00::/29
2a10:7d00::/29
2a11:4800::/29
2a11:7440::/29
2a11:89c0::/29
2a11:e580::/29
2a12:2c80::/29
2a12:4b00::/29
2a12:5e00::/29
2a12:d100::/29
2a12:d540::/29
2a12:d5c0::/29
2a13:200::/29
2a13:2bc0::/29
2a13:3080::/29
2a13:8f00::/29
2a13:9680::/29
2a13:a100::/29
2a13:df00::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
60:e3:1b:1d:0b:cf:a1:28:4a:7e:87:d2:25:6a:00:47:e0:2e:
91:df:93:86:db:31:2e:fc:9d:17:f2:2d:81:68:9c:c6:f1:e8:
ef:40:b0:f4:f1:d0:09:0a:2e:c2:80:73:04:d0:43:b1:e4:e4:
5a:dd:f1:5d:69:9f:b2:3f:9e:8e:dc:69:08:5c:04:74:d8:e8:
32:44:12:dd:ad:04:64:b2:37:3f:07:01:7e:79:a5:91:c9:f7:
60:cb:06:e8:82:83:52:2d:60:a5:0b:2e:58:b6:c6:84:3a:90:
ce:c7:fa:e7:47:3e:fe:8e:aa:26:e7:04:b9:e1:51:6b:ad:9b:
0d:59:1d:d0:07:52:f9:74:b9:ba:03:87:e0:dc:34:b9:8b:ae:
28:2e:b1:0a:0c:c2:5b:26:21:26:74:ba:c7:2a:e3:5e:81:bf:
9e:05:cc:a2:76:b0:47:83:5f:04:17:3e:ed:00:f2:b4:ae:e1:
81:fe:59:f7:3b:8d:ef:14:f5:63:4d:2b:82:3d:c9:3b:20:1b:
e0:8b:53:5a:aa:0a:89:d0:cf:b7:20:9a:8e:30:b2:84:e5:1d:
3f:20:66:c3:84:37:ce:5a:a2:20:5a:6f:ea:52:35:9a:68:1b:
ae:32:c2:92:97:b4:6d:02:94:8a:94:94:e7:e1:c2:1f:9e:af:
16:12:4b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:57:06 2025 by rpki-client