Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MbbSbjjWZ_j3SLOMj_WvxZCRWZk.roa
File: MbbSbjjWZ_j3SLOMj_WvxZCRWZk.roa (raw, json)
Hash identifier: etMaQt45OFYS98Q8plyF1rdW+16HFB7whD7aSSttXZo=
Subject key identifier: 31:B6:D2:6E:38:D6:67:F8:F7:48:B3:8C:8F:F5:AF:C5:90:91:59:99
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01937C8E714360E28BE085CB7AA85044F1AC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MbbSbjjWZ_j3SLOMj_WvxZCRWZk.roa
Signing time: Sat 30 Nov 2024 10:12:10 +0000
ROA not before: Sat 30 Nov 2024 10:12:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a09:17c7:fc3a::/48 maxlen: 48
2a0f:1200:d9::/48 maxlen: 48
2a0f:1207:fe5a::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e200:25f::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c0:11c::/48 maxlen: 48
2a0f:e6c0:3af::/48 maxlen: 48
2a0f:e6c6:99::/48 maxlen: 48
2a0f:e7c7:fcd8::/48 maxlen: 48
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea47:fc1d::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:4::/48 maxlen: 48
2a12:ecc0:66::/48 maxlen: 48
2a12:ecc0:188::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:18c6:44::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:8c86:100::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
2a13:c900:110::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
2a13:e107:77::/48 maxlen: 48
2a13:e107:29b::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 02 Jan 2025 13:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:7c:8e:71:43:60:e2:8b:e0:85:cb:7a:a8:50:44:f1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Nov 30 10:12:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=31b6d26e38d667f8f748b38c8ff5afc590915999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:77:35:cb:89:f5:84:cb:5a:f1:9f:0d:8b:8a:
bd:17:6a:e6:03:7c:3d:c0:d3:50:a3:a2:52:b9:c4:
12:4d:f6:ab:a1:9b:e2:64:4d:90:0c:73:52:d5:bd:
a2:5f:7f:6c:d9:35:a9:8c:25:db:18:b1:da:c2:1b:
d6:03:77:1a:55:04:4e:4e:0b:8c:72:31:78:dd:df:
68:a9:c0:4c:d2:7f:3d:6f:3e:ca:29:1f:36:f0:57:
dc:9a:51:a4:38:56:7b:cd:5a:6d:7e:d7:5d:d0:52:
13:09:22:f6:e9:14:61:32:0a:97:4a:37:5b:a0:5e:
28:88:29:77:ff:1b:a0:18:75:8c:e0:6c:dc:cb:e6:
ae:82:13:5f:bf:38:2e:3f:d1:32:6d:07:42:5f:f6:
d7:fa:b9:39:93:4d:b0:99:2f:48:73:08:0c:91:1d:
5e:db:73:19:41:29:13:d6:72:7a:f9:a8:26:2b:94:
db:e5:15:0f:a2:1e:56:b7:11:e2:d1:5f:0e:bd:9d:
48:e2:fe:b3:ba:44:ec:5f:6b:2b:b9:ed:2e:7a:ff:
38:23:62:05:63:e4:35:1a:1e:61:a6:49:5d:49:a8:
e5:64:9e:f6:9d:23:a0:98:8c:63:b1:74:d0:78:02:
49:e5:08:5b:8b:0d:a7:77:53:a7:26:b5:a5:6c:81:
be:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:B6:D2:6E:38:D6:67:F8:F7:48:B3:8C:8F:F5:AF:C5:90:91:59:99
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/MbbSbjjWZ_j3SLOMj_WvxZCRWZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a09:17c7:fc3a::/48
2a0f:1200:d9::/48
2a0f:1207:fe5a::/48
2a0f:e1c0:3::/48
2a0f:e1c0:37a::/48
2a0f:e200:5::/48
2a0f:e200:25f::/48
2a0f:e207:fd38::/48
2a0f:e440::/29
2a0f:e6c0:11c::/48
2a0f:e6c0:3af::/48
2a0f:e6c6:99::/48
2a0f:e7c7:fcd8::/48
2a0f:ea40:8::/48
2a0f:ea47:fc1d::/48
2a0f:ea47:ff49::/48
2a12:ecc0:3::-2a12:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a12:ecc0:66::/48
2a12:ecc0:188::/48
2a12:ecc0:316::/48
2a12:ecc0:34a::/48
2a13:18c6:44::/48
2a13:18c6:99::/48
2a13:8c82:2::/48
2a13:8c86:100::/48
2a13:8c86:140::/48
2a13:c900:22::/48
2a13:c900:66::/48
2a13:c900:110::/48
2a13:e102:2::/48
2a13:e107:77::/48
2a13:e107:29b::/48
Signature Algorithm: sha256WithRSAEncryption
3f:42:aa:4a:41:25:b1:42:b3:0f:76:e2:0c:46:5c:25:26:06:
57:42:fc:e1:b4:1f:57:a3:35:f4:b8:28:1d:b1:25:e2:ad:86:
60:43:ff:07:ec:fc:7d:3c:a8:0c:85:d9:10:30:a2:17:eb:6f:
8c:11:b5:a1:a8:6b:f4:24:6b:42:5f:ac:cb:fd:40:3a:14:ff:
03:eb:6b:dc:28:fc:8a:af:0b:1a:6b:ee:d0:ce:31:9e:96:03:
c9:c5:a0:10:3a:b2:33:64:89:e5:28:0d:3a:c2:a6:2d:37:2e:
74:df:5c:89:8f:eb:fa:33:28:2d:34:85:cf:fd:1c:c8:ee:ea:
6d:51:4e:d7:d2:15:55:17:93:b2:92:e8:fa:5a:84:7c:55:45:
55:85:dc:f0:60:dd:8e:fa:4c:8f:36:02:bb:11:20:76:d2:1c:
38:54:67:af:d0:53:7b:5d:59:eb:57:72:ca:a9:bb:9e:56:83:
59:05:dc:fa:a0:28:f4:08:30:af:7e:29:cb:4f:be:3a:cf:73:
5d:80:ef:45:f6:01:52:33:ab:d5:59:d8:e4:95:f1:cb:4c:f3:
9f:dc:3d:3a:31:f1:00:44:3d:d1:0d:07:98:76:f7:04:60:06:
ca:ee:fe:7e:45:3d:d2:58:10:5f:1d:8d:1f:b3:a1:4c:ea:31:
58:22:39:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:37 2025 by rpki-client