Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j5LYC1RN84bqfe_auxZTbD_ZnNk.roa
File: j5LYC1RN84bqfe_auxZTbD_ZnNk.roa (raw, json)
Hash identifier: 8nrVZAmzqkf2K/+42MU5h+mvvoc7C8oSw3p+GJ/JaDs=
Subject key identifier: 8F:92:D8:0B:54:4D:F3:86:EA:7D:EF:DA:BB:16:53:6C:3F:D9:9C:D9
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0195806BC177617B22221D0B92C91E8F5CB4
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j5LYC1RN84bqfe_auxZTbD_ZnNk.roa
Signing time: Mon 10 Mar 2025 14:18:20 +0000
ROA not before: Mon 10 Mar 2025 14:18:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a0f:2840::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 18 Mar 2025 15:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:80:6b:c1:77:61:7b:22:22:1d:0b:92:c9:1e:8f:5c:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Mar 10 14:18:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f92d80b544df386ea7defdabb16536c3fd99cd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ba:42:d0:6c:b5:2b:0a:73:a4:88:b2:be:15:
6a:78:d7:a2:fd:fc:c7:ab:52:94:4c:db:23:ce:a0:
5a:05:ab:6f:8c:06:5b:05:71:1e:3e:41:62:5c:ca:
12:3b:43:c5:b4:e9:71:e9:a3:8a:cc:a9:de:7b:1e:
7b:47:37:3c:f4:4f:4c:b1:7a:71:80:e2:77:79:65:
db:6d:b8:b4:7f:6b:d8:09:80:75:11:c1:c4:1f:78:
1d:29:4f:cc:52:73:34:30:65:97:1e:38:42:36:7d:
c2:6a:33:83:4f:39:45:d5:3d:0e:63:d0:ae:ab:c4:
d4:e0:e1:51:dd:f4:8c:95:a1:11:f1:2b:70:f5:fb:
3f:90:b7:1b:8c:6c:2f:60:a2:68:85:cc:5e:c2:80:
ee:87:6d:e6:eb:92:38:83:6a:b8:66:8a:ff:db:ad:
79:24:45:f9:d3:92:79:c2:ef:71:0e:d5:5e:60:69:
94:a4:e0:b4:35:1a:f0:b1:14:0d:ed:de:5b:8b:1b:
84:ac:f2:65:65:dd:a3:8e:0f:90:27:8a:40:33:79:
78:85:3e:9a:73:52:3d:90:4c:37:d1:ac:93:ba:9f:
25:f7:38:41:98:a7:b1:68:67:23:17:06:24:b4:88:
8b:a4:90:ae:d6:3a:05:4b:29:f0:5f:fd:1b:8d:ac:
22:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:92:D8:0B:54:4D:F3:86:EA:7D:EF:DA:BB:16:53:6C:3F:D9:9C:D9
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/j5LYC1RN84bqfe_auxZTbD_ZnNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:2840::/29
2a0f:9e00::/29
2a12:4b00::/29
Signature Algorithm: sha256WithRSAEncryption
6b:56:3a:b7:34:1f:36:c8:9a:77:98:a7:18:43:13:dc:27:be:
ca:2b:6c:69:f5:ae:58:46:a5:fc:00:fb:f3:f2:d8:0e:fe:f7:
48:94:d6:86:88:84:99:b7:96:37:c0:0d:da:bc:89:a3:db:b8:
af:8e:05:3e:ed:72:83:81:c9:f2:4f:cd:b0:64:23:8a:37:55:
9f:1b:63:ed:50:6c:b6:6b:95:14:10:5c:7a:97:45:c5:83:b9:
a9:8f:39:fa:81:6f:f4:07:39:07:da:4c:b8:3f:d2:8c:4e:4c:
17:79:52:e0:4f:0c:85:bc:dd:37:a3:08:87:4a:40:c2:f7:5f:
db:89:c2:c2:83:5c:1d:78:a2:ae:33:8a:1c:1e:19:2a:0e:b2:
7d:94:4b:ba:d8:d1:57:46:eb:7d:11:d6:3f:5a:30:13:0b:4b:
f1:42:08:42:ce:59:c4:1c:5a:47:3e:90:da:18:04:99:05:80:
b4:f5:cf:e5:d9:6f:e5:3e:a8:54:93:49:d4:27:68:36:40:1c:
8d:bc:60:9c:b9:87:58:2a:cb:ce:ff:ba:23:30:77:51:08:d1:
d7:43:0f:db:ee:b5:f0:8c:81:1c:85:c9:de:56:c0:d6:75:28:
e2:f5:0d:4d:78:65:24:a6:f2:9e:7d:7f:73:50:45:45:86:d8:
f5:4e:33:69
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZWAa8F3YXsiIh0Lkskej1y0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMzEwMTQxODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjkyZDgwYjU0NGRmMzg2ZWE3ZGVmZGFiYjE2NTM2YzNmZDk5Y2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rpC0Gy1KwpzpIiyvhVqeNei/fzH
q1KUTNsjzqBaBatvjAZbBXEePkFiXMoSO0PFtOlx6aOKzKneex57Rzc89E9MsXpx
gOJ3eWXbbbi0f2vYCYB1EcHEH3gdKU/MUnM0MGWXHjhCNn3CajODTzlF1T0OY9Cu
q8TU4OFR3fSMlaER8Stw9fs/kLcbjGwvYKJohcxewoDuh23m65I4g2q4Zor/2615
JEX505J5wu9xDtVeYGmUpOC0NRrwsRQN7d5bixuErPJlZd2jjg+QJ4pAM3l4hT6a
c1I9kEw30ayTup8l9zhBmKexaGcjFwYktIiLpJCu1joFSynwX/0bjawi1QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI+S2AtUTfOG6n3v2rsWU2w/2ZzZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvajVMWUMxUk44NGJxZmVfYXV4WlRiRF9abk5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg8oQAMF
AyoPngADBQMqEksAMA0GCSqGSIb3DQEBCwUAA4IBAQBrVjq3NB82yJp3mKcYQxPc
J77KK2xp9a5YRqX8APvz8tgO/vdIlNaGiISZt5Y3wA3avImj27ivjgU+7XKDgcny
T82wZCOKN1WfG2PtUGy2a5UUEFx6l0XFg7mpjzn6gW/0BzkH2ky4P9KMTkwXeVLg
TwyFvN03owiHSkDC91/bicLCg1wdeKKuM4ocHhkqDrJ9lEu62NFXRut9EdY/WjAT
C0vxQghCzlnEHFpHPpDaGASZBYC09c/l2W/lPqhUk0nUJ2g2QByNvGCcuYdYKsvO
/7ojMHdRCNHXQw/b7rXwjIEchcneVsDWdSji9Q1NeGUkpvKefX9zUEVFhtj1TjNp
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:17 2025 by rpki-client