Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/V5MCCLNBfDsY4S3iJRwgoFkP3zE.roa
File: V5MCCLNBfDsY4S3iJRwgoFkP3zE.roa (raw, json)
Hash identifier: HeFAFjw+dQ+2oYs3ZWf+ku7yOJ5BE+8cn77d5PT0GeU=
Subject key identifier: 57:93:02:08:B3:41:7C:3B:18:E1:2D:E2:25:1C:20:A0:59:0F:DF:31
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018F715D39960CB3E21ACA12E52C53321733
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/V5MCCLNBfDsY4S3iJRwgoFkP3zE.roa
Signing time: Mon 13 May 2024 09:51:25 +0000
ROA not before: Mon 13 May 2024 09:51:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 2a0d:1140::/29 maxlen: 29
2a0e:5800::/29 maxlen: 29
2a0f:2500::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a11:3500::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 03 Jun 2024 06:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:71:5d:39:96:0c:b3:e2:1a:ca:12:e5:2c:53:32:17:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 13 09:51:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57930208b3417c3b18e12de2251c20a0590fdf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:18:02:01:cf:94:32:d9:ea:4d:87:be:1a:07:
e8:3a:11:90:02:d5:65:2e:cf:4a:ba:24:a5:50:56:
e8:36:8a:01:e9:52:5d:b5:1a:69:47:e9:48:44:46:
1d:f5:ac:99:09:f4:cc:98:dc:8f:12:d1:0d:b5:fa:
ef:59:4e:f6:7e:f3:a6:44:7f:22:5b:32:f4:e7:22:
8f:05:25:d3:f3:11:9d:46:a4:0b:ab:2a:bc:17:80:
91:70:1d:8b:d2:a3:0e:ec:46:68:ff:54:80:ea:ed:
d5:ab:90:bb:ec:6c:b3:bc:17:35:34:82:d7:d5:e5:
3b:99:2b:73:a6:46:c3:2a:aa:b4:6d:95:8d:9f:f9:
c7:55:8a:61:b8:0d:35:71:8d:12:4b:a0:5f:a6:0f:
d0:7b:14:58:4e:7f:af:03:50:76:24:4a:e2:67:37:
91:f8:70:de:9c:6b:5d:28:cf:17:85:12:18:e5:b2:
8d:e2:8d:2e:c6:ad:96:bb:54:15:b1:78:59:42:a8:
d7:81:e3:91:38:6c:c5:c2:fe:4b:bd:48:e9:ec:9f:
52:97:de:15:e7:57:36:b7:64:b1:fc:0c:b1:26:5f:
43:b4:76:67:40:80:d2:17:9a:e4:60:a1:7e:92:10:
a7:11:c6:c0:b8:03:ca:f4:0d:e5:a5:5a:1f:b0:7c:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:93:02:08:B3:41:7C:3B:18:E1:2D:E2:25:1C:20:A0:59:0F:DF:31
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/V5MCCLNBfDsY4S3iJRwgoFkP3zE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:1140::/29
2a0e:5800::/29
2a0f:2500::/29
2a0f:e740::/29
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
84:6f:0c:c7:08:7c:b8:7d:36:3e:af:ce:da:23:20:26:fe:c4:
7f:5b:ba:89:1a:ec:49:3e:89:60:c3:3f:48:d1:c0:eb:19:fb:
67:5e:1c:b4:a0:ca:2b:de:7a:29:45:f7:c2:73:30:72:25:5e:
6b:83:f2:3d:34:41:ff:9d:c6:90:f5:28:41:69:66:45:4d:47:
55:7a:8d:da:3c:d2:82:46:60:0f:a5:0d:7e:ba:17:29:2a:5f:
76:24:21:41:f5:02:6f:6b:1c:60:1c:52:d4:50:65:f9:e4:73:
62:98:ca:3e:21:04:34:2e:01:b8:16:c1:99:0e:7b:0e:8e:65:
f7:ab:b5:9c:38:a4:49:16:64:75:60:23:21:96:74:7b:f4:ff:
f6:6e:c7:f7:bb:f4:01:29:e6:67:6a:b9:41:d4:9a:19:15:92:
d6:49:ee:35:48:de:76:35:17:13:15:d0:a4:ed:92:7d:35:14:
18:e4:e5:dc:ba:03:1a:95:4e:5f:92:4b:b7:9d:31:2a:9d:eb:
69:79:26:54:b1:ed:98:a4:1d:00:65:6d:89:e2:54:81:96:23:
ad:fb:2d:0a:03:1a:12:7c:8f:c0:d4:cd:76:d1:0f:5d:44:0f:
68:7b:ea:79:3a:d0:83:48:02:bf:c0:7e:19:14:ae:f4:d4:c2:
af:b0:7c:0d
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAY9xXTmWDLPiGsoS5SxTMhczMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNTEzMDk1MTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NzkzMDIwOGIzNDE3YzNiMThlMTJkZTIyNTFjMjBhMDU5MGZkZjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxgCAc+UMtnqTYe+GgfoOhGQAtVl
Ls9KuiSlUFboNooB6VJdtRppR+lIREYd9ayZCfTMmNyPEtENtfrvWU72fvOmRH8i
WzL05yKPBSXT8xGdRqQLqyq8F4CRcB2L0qMO7EZo/1SA6u3Vq5C77GyzvBc1NILX
1eU7mStzpkbDKqq0bZWNn/nHVYphuA01cY0SS6Bfpg/QexRYTn+vA1B2JEriZzeR
+HDenGtdKM8XhRIY5bKN4o0uxq2Wu1QVsXhZQqjXgeOROGzFwv5LvUjp7J9Sl94V
51c2t2Sx/AyxJl9DtHZnQIDSF5rkYKF+khCnEcbAuAPK9A3lpVofsHzzlQIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFFeTAgizQXw7GOEt4iUcIKBZD98xMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvVjVNQ0NMTkJmRHNZNFMzaUpSd2dvRmtQM3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzApBAIAAjAjAwUDKg0RQAMF
AyoOWAADBQMqDyUAAwUDKg/nQAMFAyoRNQAwDQYJKoZIhvcNAQELBQADggEBAIRv
DMcIfLh9Nj6vztojICb+xH9buoka7Ek+iWDDP0jRwOsZ+2deHLSgyiveeilF98Jz
MHIlXmuD8j00Qf+dxpD1KEFpZkVNR1V6jdo80oJGYA+lDX66FykqX3YkIUH1Am9r
HGAcUtRQZfnkc2KYyj4hBDQuAbgWwZkOew6OZfertZw4pEkWZHVgIyGWdHv0//Zu
x/e79AEp5mdquUHUmhkVktZJ7jVI3nY1FxMV0KTtkn01FBjk5dy6AxqVTl+SS7ed
MSqd62l5JlSx7ZikHQBlbYniVIGWI637LQoDGhJ8j8DUzXbRD11ED2h76nk60INI
Ar/AfhkUrvTUwq+wfA0=
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:27 2025 by rpki-client