Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XnGDGU5ieLBFXWXxFGIqCOFMTwM.roa
File: XnGDGU5ieLBFXWXxFGIqCOFMTwM.roa (raw, json)
Hash identifier: 4IunzG0yl4r3nCCIPzBMT7RwKI2FsvWtSiBqqJZbz+k=
Subject key identifier: 5E:71:83:19:4E:62:78:B0:45:5D:65:F1:14:62:2A:08:E1:4C:4F:03
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196D8E99C33A86C38E04E26A2E862189918
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XnGDGU5ieLBFXWXxFGIqCOFMTwM.roa
Signing time: Fri 16 May 2025 11:45:10 +0000
ROA not before: Fri 16 May 2025 11:45:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a07:95c0::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 22 May 2025 09:22:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:e9:9c:33:a8:6c:38:e0:4e:26:a2:e8:62:18:99:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 16 11:45:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5e7183194e6278b0455d65f114622a08e14c4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a1:d1:76:4c:59:08:e6:63:77:49:7d:31:83:
d2:ab:a2:a8:8f:d0:5b:92:35:ed:27:d2:2f:0a:7f:
fb:e0:d0:1e:f7:86:b2:37:a7:0a:ca:e0:c1:92:d2:
4c:5a:40:05:09:1e:40:27:96:6e:f2:77:22:3e:d0:
25:f8:cf:84:d5:6e:0d:36:14:a7:61:ad:3f:cf:92:
74:88:d9:47:60:96:64:05:73:5e:fc:e8:2f:a6:69:
a1:e3:89:b8:12:33:f5:7e:3e:7b:fa:d3:25:37:02:
f8:38:cd:64:ef:42:bd:36:8d:cf:3b:62:93:b4:3e:
eb:ba:b0:3e:b8:03:d4:94:e8:4a:61:e2:89:07:ef:
0b:a4:e8:dd:52:a3:41:56:da:56:64:bf:10:fe:59:
a7:7a:50:62:a4:4b:d4:9f:34:a4:fc:7d:b1:65:c0:
97:53:3e:dd:f8:d7:bd:bb:d4:6a:c8:2c:f2:45:59:
85:1d:13:01:40:95:d0:6c:5f:ef:4d:9d:25:7a:f4:
bd:e3:bc:26:c5:c5:a6:7e:ff:7f:f1:4c:c8:44:77:
a0:45:ee:3c:d9:53:ab:2a:31:63:96:27:47:d3:2b:
0e:9d:5c:d5:61:3c:42:a1:f9:5a:f9:ab:de:13:02:
52:ad:5e:9a:34:1d:14:52:cc:8e:37:f5:4c:10:36:
b4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:71:83:19:4E:62:78:B0:45:5D:65:F1:14:62:2A:08:E1:4C:4F:03
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/XnGDGU5ieLBFXWXxFGIqCOFMTwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:95c0::/29
2a0d:1140::/29
2a0d:a9c0::/29
2a0f:16c0::/29
2a0f:1a40::/29
2a0f:27c0::/29
2a0f:2e40::/29
2a0f:3740::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:3640::/29
2a10:6300::/29
2a10:6900::/29
2a11:f040::/29
2a12:cd00::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
af:7e:0e:67:7d:e0:5e:9b:4c:e1:fa:2e:c6:ed:7b:26:5a:5b:
aa:4c:5d:77:9c:d5:f0:07:d1:1f:39:e0:15:2d:50:c4:47:e0:
8a:3b:51:28:94:e0:41:9f:a0:4c:7e:2a:c9:39:a7:0d:88:f7:
ea:4a:95:5c:41:d2:83:57:54:e5:b7:57:08:b8:7b:77:4f:ab:
9f:11:66:dd:90:62:66:c6:b5:5f:03:37:8b:e0:e2:64:e4:85:
9e:79:24:13:7e:60:d5:c9:fd:5b:04:e1:fa:6d:cc:46:29:03:
9f:43:2c:1d:c9:1c:4b:ff:a1:d0:e0:da:d0:5b:97:62:36:b1:
13:ad:66:61:06:56:6b:32:86:6f:83:5e:ac:42:f4:34:54:6a:
7c:5b:40:8d:1f:e6:36:fe:71:d8:e6:2d:06:28:f5:02:53:1d:
ca:de:c6:13:e4:73:86:ed:70:1f:e5:27:ca:88:d8:e3:30:f7:
b7:dd:d7:f5:c4:0a:2a:cc:2b:c4:97:7d:35:f9:b4:36:3f:10:
58:b2:f2:fa:04:87:d8:56:0f:d9:5b:8e:62:29:50:60:a9:d4:
83:68:49:f9:b3:d8:a9:ac:7a:bf:78:58:7c:d7:d5:2c:a9:4f:
08:a7:f1:38:d2:7f:ad:da:35:46:49:26:0d:a7:83:68:7f:91:
5e:d7:64:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:23:07 2025 by rpki-client