Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O6econNAyqlYTiVt2VNkVYb_D1s.roa
File: O6econNAyqlYTiVt2VNkVYb_D1s.roa (raw, json)
Hash identifier: WSYLQrORXJojqhVs9VguxIWlfG2JAotBZXZAxhJPGgk=
Subject key identifier: 3B:A7:9C:A2:73:40:CA:A9:58:4E:25:6D:D9:53:64:55:86:FF:0F:5B
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195816FC2A06744CB1B244A5C434D1BC3CC
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O6econNAyqlYTiVt2VNkVYb_D1s.roa
Signing time: Mon 10 Mar 2025 19:02:19 +0000
ROA not before: Mon 10 Mar 2025 19:02:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215898
IP address blocks: 2a12:d540::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 11 Mar 2025 18:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:81:6f:c2:a0:67:44:cb:1b:24:4a:5c:43:4d:1b:c3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 19:02:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3ba79ca27340caa9584e256dd953645586ff0f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:57:af:ca:d6:39:70:0a:ff:ab:14:61:a7:
e2:e7:15:41:f8:b5:8f:69:41:e5:d4:23:a8:8b:55:
10:86:6d:0e:40:0d:c3:cc:fd:fc:63:65:c7:b0:74:
65:6b:d3:7d:e0:12:44:2e:c7:d2:2f:03:03:c4:98:
30:56:6a:a5:ee:47:86:23:61:5d:89:27:29:ed:b0:
2f:06:9d:36:86:c2:b1:18:6c:68:9b:bb:06:b3:af:
dc:3b:8a:48:81:ed:6f:ea:97:71:26:9d:79:16:2f:
ad:df:cf:27:6f:41:cc:3c:5f:6f:75:62:63:9e:37:
31:61:2a:6c:1a:05:3d:ee:cf:fe:72:67:05:db:9e:
52:a8:9d:56:f1:4f:f3:cd:d0:26:eb:55:5f:b2:f6:
9b:8e:38:1d:dc:69:1c:3a:ea:17:09:3b:99:2c:0a:
07:09:d8:cd:0c:ee:8b:5f:63:3f:33:3f:bb:21:67:
b5:04:00:43:df:2e:0c:53:52:84:10:f4:f4:ce:fd:
38:d1:04:0a:d6:0a:69:2b:6b:21:17:26:cc:b7:3b:
b4:a7:0d:b6:b3:a2:30:10:cd:49:9c:94:53:ec:26:
4e:7b:b5:a1:e6:0d:0d:ef:75:3b:b3:be:36:3d:7e:
8c:b5:d8:03:9a:32:6f:42:f3:05:02:86:da:c8:52:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:9C:A2:73:40:CA:A9:58:4E:25:6D:D9:53:64:55:86:FF:0F:5B
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/O6econNAyqlYTiVt2VNkVYb_D1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:d540::/29
Signature Algorithm: sha256WithRSAEncryption
55:3f:0f:1a:bd:4e:98:f6:ca:08:7d:2e:8f:4f:1b:04:ae:2d:
f0:be:b4:22:90:3e:58:f5:df:e9:de:8b:8c:a6:e9:0b:7d:08:
ce:42:d6:36:44:c9:1a:3e:7e:a2:a5:68:4c:f0:d5:54:2a:06:
f6:cf:ef:4d:82:cf:01:b3:1b:1b:10:9b:cb:28:a8:c2:1b:60:
6c:2c:90:da:b6:74:cf:7f:6f:31:67:0a:77:8b:63:15:e6:ba:
eb:dc:71:48:99:c3:ae:80:47:3c:4f:cc:1c:47:f6:19:6b:a6:
c9:b2:23:3d:93:58:e5:7d:38:1d:a1:ca:94:51:85:41:9d:e0:
a5:00:5e:e5:57:30:a0:66:ec:20:0d:fc:af:b5:42:29:0a:df:
67:36:02:b3:9e:35:98:c5:6d:9d:55:23:7d:d3:1f:07:24:a6:
48:8e:b0:a1:24:c4:38:82:d9:dd:e5:5a:b6:ba:c6:9e:70:80:
7d:b1:a7:f4:9c:4c:5e:1c:1c:e6:3d:23:f4:12:52:f3:a2:6c:
b4:7d:9e:95:9c:48:dd:7a:5f:de:76:b3:91:11:88:f0:6e:bd:
a0:0a:5e:1b:b7:65:5d:6f:14:c7:bd:7e:dc:d2:b1:1c:fe:4b:
4c:56:5d:77:39:3e:92:32:bb:0a:0e:b1:89:9d:cd:52:b2:94:
69:c9:cd:5b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZWBb8KgZ0TLGyRKXENNG8PMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzEwMTkwMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmE3OWNhMjczNDBjYWE5NTg0ZTI1NmRkOTUzNjQ1NTg2ZmYwZjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0lXr8rWOXAK/6sUYafi5xVB+LWP
aUHl1COoi1UQhm0OQA3DzP38Y2XHsHRla9N94BJELsfSLwMDxJgwVmql7keGI2Fd
iScp7bAvBp02hsKxGGxom7sGs6/cO4pIge1v6pdxJp15Fi+t388nb0HMPF9vdWJj
njcxYSpsGgU97s/+cmcF255SqJ1W8U/zzdAm61Vfsvabjjgd3GkcOuoXCTuZLAoH
CdjNDO6LX2M/Mz+7IWe1BABD3y4MU1KEEPT0zv040QQK1gppK2shFybMtzu0pw22
s6IwEM1JnJRT7CZOe7Wh5g0N73U7s742PX6MtdgDmjJvQvMFAobayFJCPwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFDunnKJzQMqpWE4lbdlTZFWG/w9bMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvTzZlY29uTkF5cWxZVGlWdDJWTmtWWWJfRDFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhLVQDAN
BgkqhkiG9w0BAQsFAAOCAQEAVT8PGr1OmPbKCH0uj08bBK4t8L60IpA+WPXf6d6L
jKbpC30IzkLWNkTJGj5+oqVoTPDVVCoG9s/vTYLPAbMbGxCbyyiowhtgbCyQ2rZ0
z39vMWcKd4tjFea669xxSJnDroBHPE/MHEf2GWumybIjPZNY5X04HaHKlFGFQZ3g
pQBe5VcwoGbsIA38r7VCKQrfZzYCs541mMVtnVUjfdMfBySmSI6woSTEOILZ3eVa
trrGnnCAfbGn9JxMXhwc5j0j9BJS86JstH2elZxI3Xpf3nazkRGI8G69oApeG7dl
XW8Ux71+3NKxHP5LTFZddzk+kjK7Cg6xiZ3NUrKUacnNWw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:24 2025 by rpki-client