Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NWte7eW-p-VfglBNIDfR5uZ5y8E.roa
File: NWte7eW-p-VfglBNIDfR5uZ5y8E.roa (raw, json)
Hash identifier: j36TNmeixNUHwsuW1EMf9pR5HqK+O1ywTrEFF3V/KsI=
Subject key identifier: 35:6B:5E:ED:E5:BE:A7:E5:5F:82:50:4D:20:37:D1:E6:E6:79:CB:C1
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018E0E209A0DA59D69AA7B3DE5BFE4972ABB
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NWte7eW-p-VfglBNIDfR5uZ5y8E.roa
Signing time: Tue 05 Mar 2024 10:20:01 +0000
ROA not before: Tue 05 Mar 2024 10:20:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197992
IP address blocks: 2a05:b300::/29 maxlen: 29
2a06:a5c0::/29 maxlen: 29
2a06:a600::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a0a:1400::/29 maxlen: 29
2a0c:4880::/29 maxlen: 29
2a0e:2240::/29 maxlen: 29
2a0e:5a80::/29 maxlen: 29
2a0e:9b00::/29 maxlen: 29
2a0e:f500::/29 maxlen: 29
2a0f:a00::/29 maxlen: 29
2a0f:1380::/29 maxlen: 29
2a0f:1580::/29 maxlen: 29
2a0f:3f80::/29 maxlen: 29
2a0f:7f00::/29 maxlen: 29
2a0f:8100::/29 maxlen: 29
2a0f:8300::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:b400::/29 maxlen: 29
2a0f:da40::/29 maxlen: 29
2a0f:dac0::/29 maxlen: 29
2a0f:dd40::/29 maxlen: 29
2a0f:e0c0::/29 maxlen: 29
2a0f:e140::/29 maxlen: 29
2a0f:e4c0::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a0f:ee00::/29 maxlen: 29
2a10:67c0::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a13:200::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 05 Mar 2024 10:21:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0e:20:9a:0d:a5:9d:69:aa:7b:3d:e5:bf:e4:97:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 5 10:20:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=356b5eede5bea7e55f82504d2037d1e6e679cbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:a0:a5:f3:73:e4:0f:58:30:1f:0b:26:39:
ec:de:b2:6f:8c:aa:47:c5:3d:d7:19:de:13:a4:89:
b6:30:0a:52:67:72:98:c8:71:b0:08:66:7d:b2:d9:
81:9a:d4:6e:31:24:52:51:29:e2:02:48:d9:e4:05:
26:57:27:91:53:98:4c:37:d0:a0:99:13:a2:fc:41:
16:31:58:eb:08:42:69:76:82:e3:ce:43:67:fc:cb:
87:ab:75:9a:e4:37:00:3e:fd:b7:4c:03:55:99:0f:
ca:0c:8a:f6:57:4f:95:3e:ed:b4:e0:a6:96:df:21:
34:de:3f:3a:37:66:6c:8f:91:ef:21:59:7f:e9:91:
6c:ae:7d:41:49:99:d1:fc:87:55:d0:39:09:5f:6e:
bb:c0:88:72:be:eb:bc:16:0b:90:e6:18:a8:12:cc:
97:a8:84:18:b3:97:8f:2f:f8:51:b6:4e:b8:96:8c:
44:f3:e7:45:44:01:6d:01:c8:69:24:f2:92:c4:dc:
25:a3:35:5d:c3:0e:c2:46:e7:e9:b4:70:c5:54:ca:
2a:e9:61:e0:96:44:87:1d:59:7d:cf:15:4e:cf:31:
81:0a:c1:a5:51:95:68:5e:81:67:a3:7f:d9:29:14:
8a:ae:db:45:55:c6:b3:6d:78:82:42:74:7f:10:06:
e3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6B:5E:ED:E5:BE:A7:E5:5F:82:50:4D:20:37:D1:E6:E6:79:CB:C1
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/NWte7eW-p-VfglBNIDfR5uZ5y8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b300::/29
2a06:a5c0::/29
2a06:a600::/29
2a06:dfc0::/29
2a0a:1400::/29
2a0c:4880::/29
2a0e:2240::/29
2a0e:5a80::/29
2a0e:9b00::/29
2a0e:f500::/29
2a0f:a00::/29
2a0f:1380::/29
2a0f:1580::/29
2a0f:3f80::/29
2a0f:7f00::/29
2a0f:8100::/29
2a0f:8300::/29
2a0f:9600::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:b400::/29
2a0f:da40::/29
2a0f:dac0::/29
2a0f:dd40::/29
2a0f:e0c0::/29
2a0f:e140::/29
2a0f:e4c0::/29
2a0f:e540::/29
2a0f:e640::/29
2a0f:ec00::/29
2a0f:ee00::/29
2a10:67c0::/29
2a12:d540::/29
2a13:200::/29
Signature Algorithm: sha256WithRSAEncryption
06:85:98:be:49:50:bd:a5:63:09:6c:cf:0a:17:b5:31:db:c5:
83:e5:81:26:19:09:f2:19:81:d3:9d:c9:fd:f0:5d:3c:e0:f7:
7d:9b:c3:05:71:59:98:43:8d:1e:17:69:1b:07:5a:c2:e5:0d:
3b:af:16:28:b1:8b:c7:f3:3c:39:86:2f:98:5f:5e:c7:cd:23:
e4:e6:55:57:dc:a5:09:f1:62:98:b6:94:7e:1a:98:1b:85:5e:
2b:0f:19:f9:16:f0:7a:ab:92:12:35:26:5e:05:50:e7:16:89:
4d:e4:c7:7f:7e:b7:8d:b9:da:51:c9:af:dd:9e:e2:61:46:9d:
59:b9:c3:71:4f:00:bb:fe:c4:b2:7d:98:9a:99:36:88:fe:6b:
be:9b:ce:e7:40:75:16:5f:a2:bb:6a:67:da:fc:c7:f3:ce:a8:
cf:f6:8b:94:07:b7:e6:46:3a:97:8e:4b:4f:46:f0:0b:b3:64:
34:e8:7f:a7:92:bf:7e:e0:94:dd:e4:65:d6:02:bf:e3:7e:9b:
55:55:16:13:0b:90:4b:2e:f5:6b:7f:ba:82:36:91:5d:bc:ae:
6e:2d:7f:e2:18:d0:a3:18:50:ea:37:a5:6a:53:c6:2c:9d:97:
ca:bf:e5:1d:14:21:30:08:88:c1:c4:bf:65:c9:85:0c:7b:0a:
c2:8c:88:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:42:17 2025 by rpki-client