Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Mr1Sm2nfsZS2zGJr4h7xwe4yj4Y.roa
File: Mr1Sm2nfsZS2zGJr4h7xwe4yj4Y.roa (raw, json)
Hash identifier: 7q17nVv2d9iPDwrvzBHa/gt7Jm7wgrAZkVMRkHUUx4M=
Subject key identifier: 32:BD:52:9B:69:DF:B1:94:B6:CC:62:6B:E2:1E:F1:C1:EE:32:8F:86
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195A5DBF28FAB788190F82373DA428E9346
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Mr1Sm2nfsZS2zGJr4h7xwe4yj4Y.roa
Signing time: Mon 17 Mar 2025 20:46:49 +0000
ROA not before: Mon 17 Mar 2025 20:46:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212477
IP address blocks: 2a0a:7d00::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0c:d380::/29 maxlen: 29
2a0e:e980::/29 maxlen: 29
2a0f:14c0::/29 maxlen: 29
2a0f:17c0::/29 maxlen: 29
2a0f:1840::/29 maxlen: 29
2a0f:2dc0::/29 maxlen: 29
2a0f:2ec0::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:de40::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e5c0::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a13:2e40::/29 maxlen: 29
2a13:d100::/29 maxlen: 29
2a13:fa00::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 19 Mar 2025 16:12:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a5:db:f2:8f:ab:78:81:90:f8:23:73:da:42:8e:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 17 20:46:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32bd529b69dfb194b6cc626be21ef1c1ee328f86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:99:e9:92:37:4c:09:70:7a:29:3b:07:b7:
34:ed:51:bb:f7:00:f7:a4:ad:c8:bf:33:9f:15:ae:
4e:f5:70:63:b7:d8:e2:54:f1:80:c8:4a:89:65:78:
2d:8e:83:6c:ff:92:c5:a1:13:0c:89:36:27:68:a1:
fa:02:49:97:e8:e6:ce:f8:58:12:f6:7d:42:44:c2:
23:ea:e7:5c:ba:40:eb:4f:d8:3c:1f:2d:09:d1:0e:
69:e3:91:0e:a2:3b:1b:f3:fb:c8:73:4c:00:1d:50:
8c:9a:a9:c9:fe:ee:5c:c1:11:0f:ca:33:01:3b:96:
95:53:04:da:74:f8:84:ef:2d:35:a7:3d:17:2c:84:
86:b6:7a:59:64:5a:b7:5b:c8:40:94:25:ff:1c:58:
c6:95:cf:87:61:96:9a:f2:7b:21:f1:3e:bb:3a:27:
d1:1e:36:da:d3:03:41:95:26:69:cc:ae:37:b6:94:
48:28:b7:0b:9c:31:1a:6a:97:76:2d:b9:7d:9e:6d:
bb:82:56:19:dc:2f:12:c2:8b:ee:a0:20:a4:29:e5:
0f:d5:10:2b:73:f2:dc:83:9b:b7:1b:7e:28:be:59:
03:47:17:3e:21:77:36:bd:f3:c8:e4:bc:3e:11:49:
08:ae:b1:77:5e:a1:cd:f5:ac:ef:03:e7:a3:ef:1d:
fe:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:52:9B:69:DF:B1:94:B6:CC:62:6B:E2:1E:F1:C1:EE:32:8F:86
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Mr1Sm2nfsZS2zGJr4h7xwe4yj4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:7d00::/29
2a0c:4880::/29
2a0c:d380::/29
2a0e:e980::/29
2a0f:14c0::/29
2a0f:17c0::/29
2a0f:1840::/29
2a0f:2dc0::/29
2a0f:2ec0::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:de40::/29
2a0f:e140::/29
2a0f:e5c0::/29
2a0f:e9c0::/29
2a13:2e40::/29
2a13:d100::/29
2a13:fa00::/29
Signature Algorithm: sha256WithRSAEncryption
af:66:42:af:b3:d2:27:25:e8:5c:c3:1f:ca:54:d4:a8:00:0f:
e4:9d:c7:a4:a5:d5:89:9e:3d:ae:8c:17:69:84:9f:a3:a2:27:
a6:1c:b6:1a:d7:20:16:d3:ee:67:11:0b:fa:4d:21:57:18:99:
f1:3b:84:ab:af:e8:1c:a8:14:7a:3c:1b:69:8e:33:a3:0d:95:
bd:24:92:a0:14:5b:4a:2e:c1:1a:97:35:2c:2e:15:9c:e9:cc:
b7:c3:95:6c:ee:25:25:45:dd:b4:b0:40:b5:40:b0:82:d0:42:
df:4f:e2:a9:1d:fa:53:74:85:4b:8d:6d:3c:0a:6c:e1:c0:a6:
b4:ad:92:84:7f:b9:d3:ca:61:83:b5:e1:ba:4a:39:1c:3e:34:
ec:02:0c:61:2a:b3:d3:bf:e7:75:c3:dd:7e:a1:af:35:f7:81:
9a:0f:1f:85:2b:25:2f:29:d0:c9:16:37:e9:e5:59:6d:3c:65:
36:a0:b1:01:72:66:e6:49:97:54:1c:16:cc:8e:19:85:9c:14:
78:32:5e:6b:bb:e2:c7:35:19:c4:46:4c:c2:1e:8c:12:19:d0:
b1:ff:b8:1d:72:cf:09:22:5d:d4:d2:9c:b5:c7:24:25:34:f7:
4c:08:e4:ff:6e:df:c7:13:ad:d1:f2:9a:76:cb:32:0b:94:6b:
7c:65:c3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:15:01 2025 by rpki-client