Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y7ie7n2ExTmIo2aI2t66vkTdpMM.roa
File: Y7ie7n2ExTmIo2aI2t66vkTdpMM.roa (raw, json)
Hash identifier: MPZCMO7VeJKrRwRcFONDIQvfE1TtXJVuyiqho2v01Os=
Subject key identifier: 63:B8:9E:EE:7D:84:C5:39:88:A3:66:88:DA:DE:BA:BE:44:DD:A4:C3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01917B39AB9F0062F92DC09F3EF95AC93476
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y7ie7n2ExTmIo2aI2t66vkTdpMM.roa
Signing time: Thu 22 Aug 2024 17:54:22 +0000
ROA not before: Thu 22 Aug 2024 17:54:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a09:17c7:fc3a::/48 maxlen: 48
2a0f:1200:d9::/48 maxlen: 48
2a0f:1207:fe5a::/48 maxlen: 48
2a0f:2ec0:1::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e1c0:37a::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e200:25f::/48 maxlen: 48
2a0f:e207:fd38::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c0:11c::/48 maxlen: 48
2a0f:e6c0:3af::/48 maxlen: 48
2a0f:e6c6:99::/48 maxlen: 48
2a0f:e6c6:bf88::/48 maxlen: 48
2a0f:e7c7:fcd8::/48 maxlen: 48
2a0f:ea40:8::/48 maxlen: 48
2a0f:ea47:fc1d::/48 maxlen: 48
2a0f:ea47:ff49::/48 maxlen: 48
2a12:ac46:88::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:4::/48 maxlen: 48
2a12:ecc0:66::/48 maxlen: 48
2a12:ecc0:188::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a12:ecc0:34a::/48 maxlen: 48
2a13:18c6:44::/48 maxlen: 48
2a13:18c6:99::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:8c86:100::/48 maxlen: 48
2a13:8c86:140::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:c900:66::/48 maxlen: 48
2a13:c900:110::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
2a13:e107:77::/48 maxlen: 48
2a13:e107:29b::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 13 Sep 2024 16:34:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7b:39:ab:9f:00:62:f9:2d:c0:9f:3e:f9:5a:c9:34:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 22 17:54:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63b89eee7d84c53988a36688dadebabe44dda4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:db:01:f9:bc:f5:0c:ee:1a:80:45:a9:9d:
44:d2:fd:63:cf:6f:13:76:38:c7:f1:80:5a:cd:99:
d4:19:7a:fe:72:a5:75:31:53:0e:a2:36:83:ec:0c:
c5:42:61:6f:6d:8e:dc:c9:e0:55:ce:df:bd:04:6e:
8a:f6:e8:93:04:25:1b:e2:2b:49:f3:85:bd:7b:1e:
0a:e8:5f:58:26:fd:bf:5d:42:d8:11:73:84:12:93:
18:ba:a6:18:cc:88:db:8d:08:06:a7:e3:04:d6:82:
60:d3:45:b7:47:d2:fa:d1:08:5c:b5:61:a7:23:1b:
af:5b:6a:d6:4e:2d:d0:3f:52:b0:38:c1:fb:39:e7:
b1:de:d7:6d:ec:da:e4:0f:3f:fe:f5:83:23:de:b9:
19:f5:06:96:cd:33:c0:b3:cb:3b:38:c2:bb:ab:7e:
92:5c:64:ae:06:30:c9:55:72:c0:2f:91:74:8c:f8:
28:85:a4:c2:81:c2:4b:d2:03:bb:29:ba:a9:c7:4b:
6c:90:46:4c:3e:b1:50:fa:cc:3a:35:ce:3f:b9:57:
51:ae:3e:ce:19:c2:38:04:2c:5d:a2:cf:fa:a8:12:
23:e5:9d:3d:ae:86:57:16:89:01:25:b7:11:98:84:
a9:6f:6e:ad:0c:81:0e:5b:0f:0f:62:05:ba:a4:be:
21:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B8:9E:EE:7D:84:C5:39:88:A3:66:88:DA:DE:BA:BE:44:DD:A4:C3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/Y7ie7n2ExTmIo2aI2t66vkTdpMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a09:17c7:fc3a::/48
2a0f:1200:d9::/48
2a0f:1207:fe5a::/48
2a0f:2ec0:1::/48
2a0f:e1c0:3::/48
2a0f:e1c0:37a::/48
2a0f:e200:5::/48
2a0f:e200:25f::/48
2a0f:e207:fd38::/48
2a0f:e440::/29
2a0f:e6c0:11c::/48
2a0f:e6c0:3af::/48
2a0f:e6c6:99::/48
2a0f:e6c6:bf88::/48
2a0f:e7c7:fcd8::/48
2a0f:ea40:8::/48
2a0f:ea47:fc1d::/48
2a0f:ea47:ff49::/48
2a12:ac46:88::/48
2a12:ecc0:3::-2a12:ecc0:4:ffff:ffff:ffff:ffff:ffff
2a12:ecc0:66::/48
2a12:ecc0:188::/48
2a12:ecc0:316::/48
2a12:ecc0:34a::/48
2a13:18c6:44::/48
2a13:18c6:99::/48
2a13:8c82:2::/48
2a13:8c86:100::/48
2a13:8c86:140::/48
2a13:c700:1::/48
2a13:c900:22::/48
2a13:c900:66::/48
2a13:c900:110::/48
2a13:e102:2::/48
2a13:e107:77::/48
2a13:e107:29b::/48
Signature Algorithm: sha256WithRSAEncryption
b2:74:f0:1b:b4:89:db:18:87:10:2c:5d:b2:81:18:cc:1e:df:
03:e1:71:2a:b3:cd:aa:23:97:03:82:78:4b:27:20:e1:d2:bb:
18:ba:35:ad:b6:e2:c1:7a:66:6c:0d:5f:2f:57:06:4f:be:78:
8a:d2:90:92:c5:c7:1d:da:40:e7:18:6b:f7:f8:8a:03:7b:1a:
fb:ce:b4:2e:85:c0:77:e0:43:03:3a:09:c8:54:f9:a2:cc:b3:
f5:c7:d6:26:72:d5:72:de:47:d8:08:af:9d:a7:8a:81:2c:45:
a8:ac:06:4f:b1:7e:fd:12:fc:d2:5c:60:2b:a5:8e:fc:8e:e8:
64:3a:03:ab:c8:a7:11:aa:d4:d0:fd:f9:c8:5c:f7:56:fa:f2:
55:9a:dd:b0:e2:52:d0:b3:e4:cd:9f:46:ef:ac:5b:56:8c:23:
b7:aa:25:2c:d1:2f:ee:3a:3e:5e:70:61:b6:8b:6b:f1:7f:25:
5d:f7:f2:90:92:95:d1:6d:0d:8d:34:97:f3:7b:6c:c2:dc:60:
71:23:14:c3:fe:23:59:9a:ba:c0:9c:d6:ae:cc:95:86:ef:f1:
ab:ab:19:97:92:39:25:c4:ef:03:40:02:84:94:6c:d1:e4:56:
d3:b7:37:5b:62:ec:47:26:1e:bc:7b:48:dc:30:b5:1c:4b:d0:
46:3b:94:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:11:22 2025 by rpki-client