Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RICUn5hKBEuhSJfyA5lllK0QNgM.roa
File: RICUn5hKBEuhSJfyA5lllK0QNgM.roa (raw, json)
Hash identifier: idF+aYtYJ7x8rO6f3gXCgvjoO50w5lOpn2QF0DkWBls=
Subject key identifier: 44:80:94:9F:98:4A:04:4B:A1:48:97:F2:03:99:65:94:AD:10:36:03
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0197171FE2CAF475306C8AB4A8328B6C5342
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RICUn5hKBEuhSJfyA5lllK0QNgM.roa
Signing time: Wed 28 May 2025 13:40:55 +0000
ROA not before: Wed 28 May 2025 13:40:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9123
IP address blocks: 2a09:4900::/29 maxlen: 29
2a0f:e640::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a11:4c40::/29 maxlen: 29
2a11:4e80::/29 maxlen: 29
2a11:5200::/29 maxlen: 29
2a12:f440::/29 maxlen: 29
2a13:540::/29 maxlen: 29
2a13:600::/29 maxlen: 29
2a13:cc0::/29 maxlen: 29
2a13:3040::/29 maxlen: 29
2a13:c500::/29 maxlen: 29
2a13:fd00::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 06 Jun 2025 10:06:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:17:1f:e2:ca:f4:75:30:6c:8a:b4:a8:32:8b:6c:53:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 28 13:40:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4480949f984a044ba14897f203996594ad103603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8f:03:9e:9f:4f:00:78:9f:1a:55:d9:0e:c5:
f4:06:f8:ab:4c:53:2a:03:0c:87:69:cf:81:3b:eb:
c2:b0:5b:cc:03:35:b3:da:1e:2b:28:cc:e4:02:c3:
4f:cd:25:72:6f:3a:b3:af:33:ec:f1:48:50:97:32:
83:21:f5:e8:eb:97:c4:d2:c2:d2:b2:ea:94:de:f6:
5c:68:f0:4d:21:7b:25:e8:06:30:9c:55:d7:7b:16:
03:81:1c:b9:64:9d:50:c4:22:bc:dd:43:a8:83:b6:
e6:93:93:b3:4d:aa:2b:79:7c:9f:f0:71:a8:c3:03:
9b:f4:15:dd:89:ad:b5:e3:57:c0:a7:96:43:25:06:
e3:b4:e6:5e:2f:88:4a:89:21:6a:71:32:94:f4:7e:
f0:18:de:03:5a:6b:f1:5f:ea:e9:c7:45:59:56:f1:
53:9a:d0:c8:a9:91:e5:07:85:7d:cf:9a:70:e1:7f:
fe:6f:48:7d:a3:5c:d4:00:95:3a:59:a4:f6:9e:b5:
fe:e6:b2:68:a9:67:3d:1c:b0:8a:78:11:9c:28:d5:
99:40:4f:17:5c:7d:22:86:a1:88:90:d3:7c:12:5b:
44:75:27:c7:1b:18:34:d4:05:3f:63:8c:05:5f:10:
95:c6:b1:1d:76:a6:e4:d9:59:f1:8b:ba:67:0c:68:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:80:94:9F:98:4A:04:4B:A1:48:97:F2:03:99:65:94:AD:10:36:03
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RICUn5hKBEuhSJfyA5lllK0QNgM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:4900::/29
2a0f:e640::/29
2a0f:e740::/29
2a11:4c40::/29
2a11:4e80::/29
2a11:5200::/29
2a12:f440::/29
2a13:540::/29
2a13:600::/29
2a13:cc0::/29
2a13:3040::/29
2a13:c500::/29
2a13:fd00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:ec:de:c4:85:42:3b:96:3c:9e:44:a0:07:13:5f:29:27:f1:
6e:a9:91:f2:8c:e7:71:9c:ac:91:ec:41:95:d3:e2:f5:4f:e0:
34:2d:a4:f7:df:01:7e:43:6a:4c:06:c3:a7:80:62:88:2e:c8:
da:47:07:9d:01:4d:f3:49:6e:81:c5:fa:7f:ba:c6:2c:05:4d:
3f:2c:21:df:20:34:39:05:bd:50:89:56:9c:25:d6:f3:7d:f0:
ce:62:34:e9:9f:32:aa:75:55:cd:13:32:9e:4d:e2:0a:44:a1:
a7:05:67:e4:03:13:e5:27:85:e6:d1:ae:60:ac:4b:be:92:84:
f3:4a:0c:88:aa:05:ce:0d:d1:e5:b3:b1:66:d7:69:04:e0:e3:
1c:ce:3a:91:2d:0c:69:90:43:d0:02:e6:07:d5:db:a9:75:61:
8b:b1:1b:35:89:f1:93:45:b6:71:f7:c9:61:22:2d:7c:1a:96:
bd:dc:2f:0b:69:f4:f1:cd:00:b0:21:24:e1:35:ac:6b:d8:9b:
7d:74:e3:a3:51:e6:d0:da:02:c6:31:e5:50:6e:ef:63:8b:5a:
21:cc:c7:55:b2:01:92:4c:a3:59:67:4a:cc:7f:07:ce:4c:ec:
4f:05:e5:25:a4:41:4a:63:6f:1b:a2:ff:ea:67:81:8e:75:5e:
57:f7:81:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:51:11 2025 by rpki-client