Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SpsPyljrfWDezI4iEsTRKv3xe6g.roa
File: SpsPyljrfWDezI4iEsTRKv3xe6g.roa (raw, json)
Hash identifier: owKK6fynDp9EjzdlmgMfqxb/IOTRn7WSJUDYHBACmOA=
Subject key identifier: 4A:9B:0F:CA:58:EB:7D:60:DE:CC:8E:22:12:C4:D1:2A:FD:F1:7B:A8
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0194274831CCB21D5FD8603327912B28C44E
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SpsPyljrfWDezI4iEsTRKv3xe6g.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215523
IP address blocks: 2a0f:30c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 15 Jan 2025 08:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:31:cc:b2:1d:5f:d8:60:33:27:91:2b:28:c4:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a9b0fca58eb7d60decc8e2212c4d12afdf17ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:22:5f:2b:70:44:c5:72:b1:86:14:8b:61:
bc:d1:f0:64:79:ac:39:31:b9:d2:74:88:31:3b:c1:
ae:97:95:74:86:69:48:67:78:6d:ab:cb:f5:cb:71:
61:51:b3:e3:3d:94:38:17:8c:cf:39:a3:95:e5:f4:
8f:bf:04:c2:ae:5c:5f:fa:55:13:26:18:83:aa:16:
61:4d:b1:10:69:11:e7:4c:b6:b7:a9:8e:83:c5:1f:
ae:6d:72:c9:98:66:8b:ec:9f:01:dc:f8:b6:19:b9:
0d:f8:91:8e:0a:ad:73:8d:0c:81:fc:2f:6e:05:c7:
8b:8d:c9:6b:82:ce:8f:62:0a:8d:05:4c:19:4c:5f:
38:03:22:bc:65:c4:4f:6a:4f:dc:2d:35:c2:81:63:
10:cf:a5:12:49:3e:84:a9:8e:ec:d2:a4:db:18:93:
02:2f:30:01:53:3d:29:e0:33:e3:1b:30:eb:be:5a:
02:f7:44:54:28:84:e3:64:83:5c:fb:8d:4c:8e:32:
d8:1d:f0:29:1d:11:ae:97:91:c5:2c:32:50:ec:f8:
27:4f:14:12:65:ee:d7:f2:60:0b:55:5f:6e:b0:aa:
85:dd:c2:c8:1c:a6:29:b5:ee:8d:c8:68:d6:5a:20:
67:e6:66:61:4d:5e:6f:32:92:e2:11:64:00:c7:19:
9a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9B:0F:CA:58:EB:7D:60:DE:CC:8E:22:12:C4:D1:2A:FD:F1:7B:A8
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/SpsPyljrfWDezI4iEsTRKv3xe6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:30c0::/29
Signature Algorithm: sha256WithRSAEncryption
bf:53:96:6c:19:01:c6:11:1f:a7:7a:fc:a6:9e:22:55:22:fd:
8d:6f:8c:d0:c7:45:2b:38:ba:38:3c:42:c9:7f:d4:6d:5b:8f:
a5:03:53:eb:cd:1d:77:83:42:24:03:90:ab:ca:7c:00:08:7a:
a5:0a:9e:f3:55:36:c2:54:e3:7c:67:e6:ed:0e:d9:75:8d:b5:
fc:7f:36:d0:f2:cf:6d:07:e3:14:41:f2:d3:36:3b:19:3a:c9:
46:83:03:ed:74:62:c0:60:35:73:e0:71:5c:d2:d5:f7:c3:9e:
90:ce:d6:fb:6b:f6:65:21:36:ea:1f:82:b3:59:f1:9c:b2:df:
b4:b6:d0:9c:57:ab:f2:ea:dd:f5:12:67:9d:7b:83:2c:53:df:
4b:ed:5b:80:1f:99:6f:72:6a:d1:bb:a0:b6:15:26:fb:d2:06:
b5:dd:c5:e1:d1:2f:16:22:d0:1e:cf:81:5a:2b:a9:c7:bb:aa:
7d:20:5e:8a:78:fe:f2:89:85:3a:f7:79:35:ee:1e:f4:96:49:
23:44:70:e6:00:3c:d2:eb:c1:5c:20:ae:9d:b7:6b:49:1a:ff:
9d:3d:7a:63:23:1a:1c:8d:94:66:29:24:b4:10:51:89:98:e4:
5a:0a:77:06:74:20:09:6c:c9:7c:77:47:80:fe:32:eb:74:0f:
5b:48:d4:ce
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQnSDHMsh1f2GAzJ5ErKMROMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMTAyMTM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTliMGZjYTU4ZWI3ZDYwZGVjYzhlMjIxMmM0ZDEyYWZkZjE3YmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5AiXytwRMVysYYUi2G80fBkeaw5
MbnSdIgxO8Gul5V0hmlIZ3htq8v1y3FhUbPjPZQ4F4zPOaOV5fSPvwTCrlxf+lUT
JhiDqhZhTbEQaRHnTLa3qY6DxR+ubXLJmGaL7J8B3Pi2GbkN+JGOCq1zjQyB/C9u
BceLjclrgs6PYgqNBUwZTF84AyK8ZcRPak/cLTXCgWMQz6USST6EqY7s0qTbGJMC
LzABUz0p4DPjGzDrvloC90RUKITjZINc+41MjjLYHfApHRGul5HFLDJQ7PgnTxQS
Ze7X8mALVV9usKqF3cLIHKYpte6NyGjWWiBn5mZhTV5vMpLiEWQAxxmalwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEqbD8pY631g3syOIhLE0Sr98XuoMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvU3BzUHlsanJmV0Rlekk0aUVzVFJLdjN4ZTZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKg8wwDAN
BgkqhkiG9w0BAQsFAAOCAQEAv1OWbBkBxhEfp3r8pp4iVSL9jW+M0MdFKzi6ODxC
yX/UbVuPpQNT680dd4NCJAOQq8p8AAh6pQqe81U2wlTjfGfm7Q7ZdY21/H820PLP
bQfjFEHy0zY7GTrJRoMD7XRiwGA1c+BxXNLV98OekM7W+2v2ZSE26h+Cs1nxnLLf
tLbQnFer8urd9RJnnXuDLFPfS+1bgB+Zb3Jq0bugthUm+9IGtd3F4dEvFiLQHs+B
Wiupx7uqfSBeinj+8omFOvd5Ne4e9JZJI0Rw5gA80uvBXCCunbdrSRr/nT16YyMa
HI2UZikktBBRiZjkWgp3BnQgCWzJfHdHgP4y63QPW0jUzg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:12 2025 by rpki-client