Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OcSVtbd746DkOpK3aKp90cq_ekE.roa
File: OcSVtbd746DkOpK3aKp90cq_ekE.roa (raw, json)
Hash identifier: tjybvH0N2FHZtBXY0RcFl5R+TQRu5NduaSG7ySV6ID0=
Subject key identifier: 39:C4:95:B5:B7:7B:E3:A0:E4:3A:92:B7:68:AA:7D:D1:CA:BF:7A:41
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196F96F2DB2EC8208A2BA9093EDAB0A6A61
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OcSVtbd746DkOpK3aKp90cq_ekE.roa
Signing time: Thu 22 May 2025 19:18:54 +0000
ROA not before: Thu 22 May 2025 19:18:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a06:a5c0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a09:b700::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
2a11:5c80::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 May 2025 14:07:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f9:6f:2d:b2:ec:82:08:a2:ba:90:93:ed:ab:0a:6a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 22 19:18:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=39c495b5b77be3a0e43a92b768aa7dd1cabf7a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c1:c2:c8:a8:58:d2:36:14:0d:eb:e5:a4:ec:
0e:0e:c3:92:a2:6d:bb:6c:e2:b2:21:9f:00:91:fb:
da:c6:7f:cd:3c:1a:1e:b7:e9:7b:db:0f:57:52:a3:
fc:88:c4:e6:02:1f:85:e1:27:76:4b:79:e4:90:14:
a6:ad:84:45:e5:b0:ee:14:2e:9d:17:64:3d:52:fc:
35:9e:a4:6b:0a:d2:f7:90:7e:a0:fb:36:ec:33:f4:
f7:37:f5:bb:6d:55:19:18:73:d8:f9:f2:28:c2:bb:
6b:40:87:67:4c:cf:d6:8d:31:94:89:d8:9d:75:58:
c4:55:99:fa:c3:46:cf:bb:22:bf:be:62:35:21:38:
0a:fe:02:67:15:27:7d:d3:34:a3:11:ab:5d:99:c4:
07:50:6d:4c:2d:c3:c8:94:ff:46:74:43:22:3b:07:
20:5e:17:14:92:d7:c6:c1:00:91:62:b7:87:94:69:
ea:42:c5:8e:0e:34:a6:c6:bf:13:23:43:18:2c:21:
5d:37:31:20:51:fa:9c:dc:04:55:a5:83:08:15:2e:
cd:3b:46:37:55:05:b1:f4:28:b2:5a:84:f4:76:85:
9f:5a:6d:61:d8:5a:f8:84:d5:9b:0c:fe:cb:51:69:
27:64:b3:61:c1:e9:b8:c4:d5:62:cc:1a:e0:72:f5:
e6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:95:B5:B7:7B:E3:A0:E4:3A:92:B7:68:AA:7D:D1:CA:BF:7A:41
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/OcSVtbd746DkOpK3aKp90cq_ekE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a5c0::/29
2a06:dfc0::/29
2a09:b700::/29
2a0f:e00::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:e540::/29
2a0f:e600::/29
2a0f:e9c0::/29
2a10:3540::/29
2a10:6500::/29
2a10:7900::/29
2a10:7f00::/29
2a11:4800::/29
2a11:5c80::/29
2a11:e580::/29
2a12:2c80::/29
2a12:4b00::/29
2a12:5e00::/29
2a12:d540::/29
2a12:d5c0::/29
2a13:200::/29
2a13:3080::/29
2a13:9680::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
65:58:a3:3e:88:61:8a:c5:f0:a6:8a:c3:f9:18:8c:ad:e8:41:
b4:87:b7:aa:6d:36:cc:db:fc:cc:db:58:59:57:5b:40:f2:14:
06:e7:b7:c4:d9:59:70:23:ea:3c:18:6c:d9:78:67:8b:ba:99:
8f:f6:92:c0:8a:92:a4:61:13:74:41:58:ae:68:b2:1d:e6:10:
68:69:af:b6:8e:b8:af:d5:c3:59:11:be:f5:ee:bf:c4:48:79:
a9:df:6f:06:53:1a:87:0f:8d:55:1d:3c:c0:aa:de:65:90:3f:
4d:2e:3f:c0:05:89:90:c2:40:cb:cc:50:9d:d2:7b:8a:d0:4d:
f3:2d:f9:bd:94:ef:1c:6f:b4:3d:27:43:35:7d:86:98:f0:04:
bc:2f:dc:61:40:a2:bb:71:6f:07:ba:5d:6f:30:0b:8a:dc:93:
d4:ba:81:58:8c:1f:e3:8d:19:8c:56:55:59:35:79:2a:e0:64:
f2:e7:1d:ed:74:b8:49:ec:f8:15:61:e5:2a:62:10:ec:fe:18:
9f:4d:27:07:a5:0e:e6:82:66:b7:1f:ae:91:28:5c:90:d5:09:
0d:a3:e0:59:e5:ba:68:15:69:6b:a5:bb:8b:52:f7:28:4a:4f:
19:1a:c6:30:1c:a8:81:aa:ae:cb:64:8e:f2:a8:5f:23:f3:78:
71:55:b5:33
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAZb5by2y7IIIorqQk+2rCmphMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTIyMTkxODU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWM0OTViNWI3N2JlM2EwZTQzYTkyYjc2OGFhN2RkMWNhYmY3YTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsHCyKhY0jYUDevlpOwODsOSom27
bOKyIZ8Akfvaxn/NPBoet+l72w9XUqP8iMTmAh+F4Sd2S3nkkBSmrYRF5bDuFC6d
F2Q9Uvw1nqRrCtL3kH6g+zbsM/T3N/W7bVUZGHPY+fIowrtrQIdnTM/WjTGUidid
dVjEVZn6w0bPuyK/vmI1ITgK/gJnFSd90zSjEatdmcQHUG1MLcPIlP9GdEMiOwcg
XhcUktfGwQCRYreHlGnqQsWODjSmxr8TI0MYLCFdNzEgUfqc3ARVpYMIFS7NO0Y3
VQWx9CiyWoT0doWfWm1h2Fr4hNWbDP7LUWknZLNhwem4xNVizBrgcvXmhQIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFDnElbW3e+Og5DqSt2iqfdHKv3pBMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvT2NTVnRiZDc0NkRrT3BLM2FLcDkwY3FfZWtFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBxAQCAAIwgb0DBQMq
BqXAAwUDKgbfwAMFAyoJtwADBQMqDw4AAwUDKg8jAAMFAyoPKEADBQMqD54AAwUD
Kg+iAAMFAyoP5UADBQMqD+YAAwUDKg/pwAMFAyoQNUADBQMqEGUAAwUDKhB5AAMF
AyoQfwADBQMqEUgAAwUDKhFcgAMFAyoR5YADBQMqEiyAAwUDKhJLAAMFAyoSXgAD
BQMqEtVAAwUDKhLVwAMFAyoTAgADBQMqEzCAAwUDKhOWgAMFAyoT+QAwDQYJKoZI
hvcNAQELBQADggEBAGVYoz6IYYrF8KaKw/kYjK3oQbSHt6ptNszb/MzbWFlXW0Dy
FAbnt8TZWXAj6jwYbNl4Z4u6mY/2ksCKkqRhE3RBWK5osh3mEGhpr7aOuK/Vw1kR
vvXuv8RIeanfbwZTGocPjVUdPMCq3mWQP00uP8AFiZDCQMvMUJ3Se4rQTfMt+b2U
7xxvtD0nQzV9hpjwBLwv3GFAortxbwe6XW8wC4rck9S6gViMH+ONGYxWVVk1eSrg
ZPLnHe10uEns+BVh5SpiEOz+GJ9NJwelDuaCZrcfrpEoXJDVCQ2j4FnlumgVaWul
u4tS9yhKTxkaxjAcqIGqrstkjvKoXyPzeHFVtTM=
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:40:15 2025 by rpki-client