Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/M1WAF5Y00BYFMcDsFANIfdfzyzU.roa
File: M1WAF5Y00BYFMcDsFANIfdfzyzU.roa (raw, json)
Hash identifier: YYqPOxHTrUNLmQ2IiAR9z6yD1w1HZ4ge4CMzIXPBkRY=
Subject key identifier: 33:55:80:17:96:34:D0:16:05:31:C0:EC:14:03:48:7D:D7:F3:CB:35
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01916AF7AE92B7C341AC38C3B6E041EAB33E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/M1WAF5Y00BYFMcDsFANIfdfzyzU.roa
Signing time: Mon 19 Aug 2024 14:08:22 +0000
ROA not before: Mon 19 Aug 2024 14:08:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 2a0f:1206:55::/48 maxlen: 48
2a0f:1584:77::/48 maxlen: 48
2a0f:e6c6:100::/48 maxlen: 48
2a0f:e7c6:66::/48 maxlen: 48
2a0f:ea44:66::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Aug 2024 14:41:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:f7:ae:92:b7:c3:41:ac:38:c3:b6:e0:41:ea:b3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 19 14:08:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=335580179634d0160531c0ec1403487dd7f3cb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:fe:ef:d7:40:d2:cf:73:ab:d0:6c:76:53:
c8:32:85:da:fb:98:16:a9:f9:ec:08:86:08:8a:64:
f9:d1:21:c6:11:f6:f0:e2:20:6c:17:fa:28:49:cb:
4a:0b:47:1f:02:c8:71:f3:2c:4b:67:78:c0:fe:5c:
48:2c:1b:1b:1d:73:88:13:89:8f:6b:32:c3:76:91:
03:ac:eb:38:c0:f9:58:f1:3b:3e:19:ad:77:ab:f0:
40:da:f8:73:7d:42:e0:98:db:f5:34:29:68:63:53:
da:db:17:ef:25:45:23:6b:58:84:b1:38:fb:2f:30:
af:6b:c0:f2:4a:d3:b6:e8:27:9c:a0:b2:8c:ff:34:
8c:c5:c7:00:55:f4:b1:c9:41:d6:93:27:af:af:54:
85:b8:65:f8:f1:19:1b:d5:b8:ad:01:3b:63:2b:07:
5b:55:b6:d1:04:ad:a1:fe:83:5f:2f:a8:e3:66:88:
20:57:14:4b:32:89:ae:00:26:51:04:a3:71:24:7c:
fd:ec:1c:df:cb:ab:94:76:9f:a8:03:6e:9f:41:a9:
36:6d:b7:62:fe:9d:92:1d:c3:86:2c:ed:d2:b3:4d:
3e:90:dd:8e:b8:a5:08:f6:dd:95:b7:b4:26:d0:40:
34:be:99:2a:99:91:5e:43:61:3d:8e:00:ef:3e:84:
9c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:55:80:17:96:34:D0:16:05:31:C0:EC:14:03:48:7D:D7:F3:CB:35
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/M1WAF5Y00BYFMcDsFANIfdfzyzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1206:55::/48
2a0f:1584:77::/48
2a0f:e6c6:100::/48
2a0f:e7c6:66::/48
2a0f:ea44:66::/48
Signature Algorithm: sha256WithRSAEncryption
46:e3:e8:47:84:ab:2c:15:ee:15:79:c7:f3:87:5f:61:4e:26:
58:df:e3:1d:7e:95:5b:b1:76:ac:7e:66:62:54:2d:3e:a3:63:
00:84:57:23:e2:21:7c:f2:7c:4c:da:12:69:4b:c0:0d:0e:40:
6d:1b:e9:c8:6f:e3:5e:4d:96:23:91:7b:2e:e7:c9:80:15:4b:
eb:97:c2:63:81:58:d7:21:38:70:6d:eb:fc:2b:0d:45:d2:a5:
16:dc:a5:3f:59:d2:b9:90:4f:8c:05:9d:6a:1e:c3:77:58:93:
70:78:6a:9d:55:d7:04:ec:1e:3b:d8:03:06:6c:96:37:b2:bf:
52:d2:d0:f8:3f:7c:e9:a1:6c:67:af:be:cb:8d:b2:54:f5:c1:
81:53:25:13:1c:29:88:06:71:e4:75:15:d3:a5:ea:91:60:b7:
55:73:3d:00:4d:8a:f9:37:13:e7:0a:e8:f3:21:5d:ce:72:83:
31:fd:e2:e3:1a:3e:c5:24:9b:76:7c:df:21:ef:a9:81:ba:53:
99:5b:aa:c9:39:5a:b2:4b:78:ff:83:e6:7d:f5:68:95:11:eb:
f8:91:e3:41:e0:f0:57:72:9b:4d:a4:97:e0:1b:56:40:95:15:
09:1e:28:3a:ec:17:25:c6:0a:7c:ff:63:0d:90:34:ae:15:f9:
ab:ff:6c:7a
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAZFq966St8NBrDjDtuBB6rM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwODE5MTQwODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzU1ODAxNzk2MzRkMDE2MDUzMWMwZWMxNDAzNDg3ZGQ3ZjNjYjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPz+79dA0s9zq9BsdlPIMoXa+5gW
qfnsCIYIimT50SHGEfbw4iBsF/ooSctKC0cfAshx8yxLZ3jA/lxILBsbHXOIE4mP
azLDdpEDrOs4wPlY8Ts+Ga13q/BA2vhzfULgmNv1NCloY1Pa2xfvJUUja1iEsTj7
LzCva8DyStO26CecoLKM/zSMxccAVfSxyUHWkyevr1SFuGX48Rkb1bitATtjKwdb
VbbRBK2h/oNfL6jjZoggVxRLMomuACZRBKNxJHz97Bzfy6uUdp+oA26fQak2bbdi
/p2SHcOGLO3Ss00+kN2OuKUI9t2Vt7Qm0EA0vpkqmZFeQ2E9jgDvPoSc1QIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFDNVgBeWNNAWBTHA7BQDSH3X88s1MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTTFXQUY1WTAwQllGTWNEc0ZBTklmZGZ6eXpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAzBAIAAjAtAwcAKg8SBgBV
AwcAKg8VhAB3AwcAKg/mxgEAAwcAKg/nxgBmAwcAKg/qRABmMA0GCSqGSIb3DQEB
CwUAA4IBAQBG4+hHhKssFe4Vecfzh19hTiZY3+MdfpVbsXasfmZiVC0+o2MAhFcj
4iF88nxM2hJpS8ANDkBtG+nIb+NeTZYjkXsu58mAFUvrl8JjgVjXIThwbev8Kw1F
0qUW3KU/WdK5kE+MBZ1qHsN3WJNweGqdVdcE7B472AMGbJY3sr9S0tD4P3zpoWxn
r77LjbJU9cGBUyUTHCmIBnHkdRXTpeqRYLdVcz0ATYr5NxPnCujzIV3OcoMx/eLj
Gj7FJJt2fN8h76mBulOZW6rJOVqyS3j/g+Z99WiVEev4keNB4PBXcptNpJfgG1ZA
lRUJHig67Bclxgp8/2MNkDSuFfmr/2x6
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:20:16 2025 by rpki-client