Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmF-LwpCVPoWBAx66WKITusSXQw.roa
File: dmF-LwpCVPoWBAx66WKITusSXQw.roa (raw, json)
Hash identifier: z15F8RZcwpnDVfsjw3V4QIXupyt7sggybbkuid80194=
Subject key identifier: 76:61:7E:2F:0A:42:54:FA:16:04:0C:7A:E9:62:88:4E:EB:12:5D:0C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018FF1D213A151795ECBB5C85E645C0CD2F4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmF-LwpCVPoWBAx66WKITusSXQw.roa
Signing time: Fri 07 Jun 2024 08:30:27 +0000
ROA not before: Fri 07 Jun 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 2a0c:7884::/32 maxlen: 32
2a0e:1a84::/32 maxlen: 32
2a0f:2d80:1292::/48 maxlen: 48
2a0f:7d00:1::/48 maxlen: 48
2a0f:bc00:a1c4::/48 maxlen: 48
2a0f:e847:1::/48 maxlen: 48
2a12:d6c0::/29 maxlen: 29
2a13:18c0:2::/48 maxlen: 48
2a13:2b40::/29 maxlen: 32
Validation: Failed, certificate revoked on Sat 08 Jun 2024 10:52:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:d2:13:a1:51:79:5e:cb:b5:c8:5e:64:5c:0c:d2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 7 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76617e2f0a4254fa16040c7ae962884eeb125d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bc:ec:6e:b3:19:4e:ad:c0:98:9c:57:e3:fe:
c4:1c:f8:82:01:f4:14:6f:f8:d6:f7:30:ff:f1:c7:
39:21:8e:ec:9f:c3:75:79:87:9c:9f:27:b0:9f:35:
1a:75:aa:ab:fb:e8:8a:35:ce:46:9e:fc:e8:4b:3a:
f2:0e:18:dd:0b:a9:d4:f8:cd:91:a7:1a:c9:37:e9:
fc:90:72:1a:38:a1:0a:a6:bd:43:ba:64:64:f9:b4:
67:b3:20:11:b7:ff:a7:d1:5f:5e:90:de:60:08:44:
ab:75:db:f1:04:33:28:21:93:5f:e4:f6:47:89:d9:
76:63:cc:69:df:5a:aa:7f:7a:3f:e0:64:d6:dc:fa:
ed:8c:c2:98:32:02:68:20:34:91:ea:aa:87:a8:71:
8c:14:6c:87:10:15:f8:05:64:8e:c2:b7:e1:db:42:
39:9a:4c:1d:5f:88:8e:d9:1f:9a:59:b8:f1:26:46:
bc:cb:f3:f2:8b:5e:5a:2a:af:f3:81:6d:a9:3f:ef:
82:f9:e5:e2:05:dd:32:16:8b:59:51:8b:b5:f4:4c:
e6:6d:5d:1a:1d:a7:5e:33:d2:21:af:f8:58:be:07:
99:bf:f8:ec:a1:65:c6:e6:a4:64:69:00:3c:65:b0:
28:70:ed:79:89:fd:dc:aa:2a:80:46:d6:59:44:96:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:61:7E:2F:0A:42:54:FA:16:04:0C:7A:E9:62:88:4E:EB:12:5D:0C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/dmF-LwpCVPoWBAx66WKITusSXQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:7884::/32
2a0e:1a84::/32
2a0f:2d80:1292::/48
2a0f:7d00:1::/48
2a0f:bc00:a1c4::/48
2a0f:e847:1::/48
2a12:d6c0::/29
2a13:18c0:2::/48
2a13:2b40::/29
Signature Algorithm: sha256WithRSAEncryption
94:5d:cc:40:e9:a8:c6:2b:ac:9a:17:4f:b7:35:54:b3:9a:2c:
83:93:e9:70:9b:c1:e8:c3:6c:fc:57:8f:a0:7b:b4:67:08:84:
3f:0f:ca:62:58:5b:87:89:b3:00:20:97:87:c6:93:01:5d:e7:
8f:07:79:2c:92:81:74:b6:4a:3b:06:bf:45:73:19:36:5d:d7:
43:cc:a8:e5:f6:98:67:ca:c4:ae:a3:af:e4:aa:65:aa:f6:90:
59:a6:2c:aa:f7:ff:cb:92:49:9d:7b:af:1d:d9:6c:62:d5:59:
ba:fa:db:e5:0d:c9:8d:a8:19:e9:3e:6a:9f:01:96:0c:0e:e1:
b4:51:b6:8c:e4:97:0c:ee:30:50:07:e2:e1:42:0d:62:15:00:
27:02:0f:d7:70:05:79:d6:81:ae:52:6c:35:b3:c4:4b:41:9d:
62:bd:44:a6:84:ce:2c:ef:e7:64:cb:97:55:86:5d:25:9c:f1:
79:df:75:d6:c7:ae:f2:af:ee:de:21:29:05:40:3d:fa:f8:4b:
99:2a:27:20:d1:66:d8:1b:54:96:a5:7b:e0:36:b5:31:2f:15:
b0:96:ca:13:16:d0:3e:2b:3b:9e:04:58:86:22:62:7a:8f:47:
de:7f:26:3a:53:52:b1:b5:d5:d2:24:ca:53:9b:1d:6b:5e:ee:
6b:34:91:1e
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgISAY/x0hOhUXley7XIXmRcDNL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwNjA3MDgzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjYxN2UyZjBhNDI1NGZhMTYwNDBjN2FlOTYyODg0ZWViMTI1ZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LzsbrMZTq3AmJxX4/7EHPiCAfQU
b/jW9zD/8cc5IY7sn8N1eYecnyewnzUadaqr++iKNc5GnvzoSzryDhjdC6nU+M2R
pxrJN+n8kHIaOKEKpr1DumRk+bRnsyARt/+n0V9ekN5gCESrddvxBDMoIZNf5PZH
idl2Y8xp31qqf3o/4GTW3PrtjMKYMgJoIDSR6qqHqHGMFGyHEBX4BWSOwrfh20I5
mkwdX4iO2R+aWbjxJka8y/Pyi15aKq/zgW2pP++C+eXiBd0yFotZUYu19EzmbV0a
HadeM9Ihr/hYvgeZv/jsoWXG5qRkaQA8ZbAocO15if3cqiqARtZZRJap/QIDAQAB
o4ICTDCCAkgwHQYDVR0OBBYEFHZhfi8KQlT6FgQMeuliiE7rEl0MMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvZG1GLUx3cENWUG9XQkF4NjZXS0lUdXNTWFF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBPBAIAAjBJAwUAKgx4hAMF
ACoOGoQDBwAqDy2AEpIDBwAqD30AAAEDBwAqD7wAocQDBwAqD+hHAAEDBQMqEtbA
AwcAKhMYwAACAwUDKhMrQDANBgkqhkiG9w0BAQsFAAOCAQEAlF3MQOmoxiusmhdP
tzVUs5osg5PpcJvB6MNs/FePoHu0ZwiEPw/KYlhbh4mzACCXh8aTAV3njwd5LJKB
dLZKOwa/RXMZNl3XQ8yo5faYZ8rErqOv5KplqvaQWaYsqvf/y5JJnXuvHdlsYtVZ
uvrb5Q3JjagZ6T5qnwGWDA7htFG2jOSXDO4wUAfi4UINYhUAJwIP13AFedaBrlJs
NbPES0GdYr1EpoTOLO/nZMuXVYZdJZzxed911seu8q/u3iEpBUA9+vhLmSonINFm
2BtUlqV74Da1MS8VsJbKExbQPis7ngRYhiJieo9H3n8mOlNSsbXV0iTKU5sda17u
azSRHg==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:01:20 2025 by rpki-client