Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWXCiQS3gO7WWQSdmqDZznqy29w.roa
File: RWXCiQS3gO7WWQSdmqDZznqy29w.roa (raw, json)
Hash identifier: YlSrk2AxCfRJNfJWcA8ipaNlEVTYhCDoFMLjD1tM99A=
Subject key identifier: 45:65:C2:89:04:B7:80:EE:D6:59:04:9D:9A:A0:D9:CE:7A:B2:DB:DC
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018EC207C37EA328F1C6C52DD84340F9656A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWXCiQS3gO7WWQSdmqDZznqy29w.roa
Signing time: Tue 09 Apr 2024 08:44:32 +0000
ROA not before: Tue 09 Apr 2024 08:44:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
2a13:c700:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 22 Apr 2024 15:34:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:07:c3:7e:a3:28:f1:c6:c5:2d:d8:43:40:f9:65:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 9 08:44:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4565c28904b780eed659049d9aa0d9ce7ab2dbdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6b:2d:74:5f:0e:4b:21:49:d8:08:2b:14:ea:
82:78:b8:b2:f0:d6:20:c1:e0:02:9e:a4:d4:92:94:
e3:41:db:97:45:c1:d1:03:3d:f8:84:d7:d3:3e:02:
27:a7:3b:94:97:25:32:e8:5b:64:38:28:fa:86:bf:
c2:7d:d2:24:03:cf:54:8d:20:d9:39:6f:bb:2b:3a:
26:55:18:11:26:3a:d8:a8:19:30:9a:e4:49:a6:cb:
07:2b:1b:92:1d:84:30:49:cf:8f:38:b4:83:75:7a:
93:54:6f:5c:93:92:87:93:88:5e:52:e4:bb:fc:9d:
54:1f:a6:18:ec:bd:83:80:78:fd:30:f6:1c:3c:54:
bd:ab:86:5b:c3:85:91:34:a4:36:c6:b4:30:e5:f8:
20:be:3d:de:52:2b:7d:4b:48:0b:b7:5f:a3:4c:28:
6e:08:be:cf:2c:69:e7:bb:d2:48:7e:8a:37:b6:57:
c4:b5:82:3d:8e:39:1f:09:49:33:59:d4:4b:0b:81:
94:77:03:5b:32:ab:cb:ae:9e:1a:2f:0a:92:1d:1c:
29:56:43:67:7f:34:28:dd:05:ee:72:20:84:eb:85:
6c:d4:49:b1:78:76:74:a7:42:e6:50:72:df:da:c2:
44:93:16:56:24:db:05:64:a7:7c:86:e7:d1:95:4f:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:65:C2:89:04:B7:80:EE:D6:59:04:9D:9A:A0:D9:CE:7A:B2:DB:DC
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/RWXCiQS3gO7WWQSdmqDZznqy29w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
2a13:c700:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
9a:61:b3:31:cd:9c:6d:7e:1a:13:f4:3c:99:67:ff:1c:fe:6d:
67:f7:c4:c9:b4:bd:8e:05:12:d4:ec:48:81:f0:d2:00:ab:eb:
2b:31:98:b1:1e:51:3b:ae:54:6f:1f:5f:89:13:9b:d9:a2:13:
55:6b:0c:92:94:97:27:59:35:04:d7:0c:98:ff:45:7a:46:4b:
30:62:bb:d4:dc:d9:48:33:4a:2c:b2:2c:9f:92:ae:1f:cb:f7:
da:dc:a3:bd:39:92:37:cc:d7:bb:92:e6:d7:b6:da:4e:ab:fa:
1a:d5:7d:86:43:7c:c1:28:72:c9:d9:5c:48:12:4d:03:e0:cf:
ff:df:cd:c8:71:c5:4c:04:6c:e3:c9:d9:37:21:ce:4a:ed:98:
3c:6c:e4:0c:8d:ac:79:f9:a0:b2:63:e4:8a:6b:44:98:06:99:
06:6d:6a:13:ca:49:64:da:d6:71:65:7a:59:2b:83:a0:c4:bc:
a4:62:92:28:60:98:1f:e6:64:bc:81:d6:7b:a9:97:f4:04:62:
0e:dc:93:13:f2:43:7e:d2:de:e6:b3:9d:d2:af:12:28:c0:34:
ea:48:bc:1b:17:07:2f:aa:fb:b2:8e:96:34:e1:cb:df:4e:b4:
c6:38:7b:1f:e5:25:9b:a2:26:3f:73:94:52:1f:45:b6:1c:b8:
cd:06:95:d7
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAY7CB8N+oyjxxsUt2ENA+WVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNDA5MDg0NDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTY1YzI4OTA0Yjc4MGVlZDY1OTA0OWQ5YWEwZDljZTdhYjJkYmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWstdF8OSyFJ2AgrFOqCeLiy8NYg
weACnqTUkpTjQduXRcHRAz34hNfTPgInpzuUlyUy6FtkOCj6hr/CfdIkA89UjSDZ
OW+7KzomVRgRJjrYqBkwmuRJpssHKxuSHYQwSc+POLSDdXqTVG9ck5KHk4heUuS7
/J1UH6YY7L2DgHj9MPYcPFS9q4Zbw4WRNKQ2xrQw5fggvj3eUit9S0gLt1+jTChu
CL7PLGnnu9JIfoo3tlfEtYI9jjkfCUkzWdRLC4GUdwNbMqvLrp4aLwqSHRwpVkNn
fzQo3QXuciCE64Vs1EmxeHZ0p0LmUHLf2sJEkxZWJNsFZKd8hufRlU85vQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFEVlwokEt4Du1lkEnZqg2c56stvcMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvUldYQ2lRUzNnTzdXV1FTZG1xRFp6bnF5Mjl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDIGCCsGAQUFBwEHAQH/BCMwITAfBAIAAjAZAwUDKg/kQAMH
ACoTxwAAAQMHACoT4QEAAjANBgkqhkiG9w0BAQsFAAOCAQEAmmGzMc2cbX4aE/Q8
mWf/HP5tZ/fEybS9jgUS1OxIgfDSAKvrKzGYsR5RO65Ubx9fiROb2aITVWsMkpSX
J1k1BNcMmP9FekZLMGK71NzZSDNKLLIsn5KuH8v32tyjvTmSN8zXu5Lm17baTqv6
GtV9hkN8wShyydlcSBJNA+DP/9/NyHHFTARs48nZNyHOSu2YPGzkDI2sefmgsmPk
imtEmAaZBm1qE8pJZNrWcWV6WSuDoMS8pGKSKGCYH+ZkvIHWe6mX9ARiDtyTE/JD
ftLe5rOd0q8SKMA06ki8GxcHL6r7so6WNOHL3060xjh7H+Ulm6ImP3OUUh9Fthy4
zQaV1w==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:14:57 2025 by rpki-client