Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pCEomdBmJpmSxzf9ydHkgZjxfu0.roa
File: pCEomdBmJpmSxzf9ydHkgZjxfu0.roa (raw, json)
Hash identifier: Z/doNLqC4xMI8JHZA40cbHAnIv/8/b+HSsSomgg38BM=
Subject key identifier: A4:21:28:99:D0:66:26:99:92:C7:37:FD:C9:D1:E4:81:98:F1:7E:ED
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01970D142B304FE15E02F080DF53F37796A9
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pCEomdBmJpmSxzf9ydHkgZjxfu0.roa
Signing time: Mon 26 May 2025 14:51:54 +0000
ROA not before: Mon 26 May 2025 14:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a06:a5c0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:bb40::/29 maxlen: 29
2a09:b700::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:3240::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
2a11:5c80::/29 maxlen: 29
2a11:7440::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 28 May 2025 15:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0d:14:2b:30:4f:e1:5e:02:f0:80:df:53:f3:77:96:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 26 14:51:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a4212899d066269992c737fdc9d1e48198f17eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:32:0f:7d:a3:6e:b2:17:18:b8:a2:c3:f5:
f3:4c:61:bc:70:ce:91:0c:54:7a:6b:dc:82:e5:bc:
22:26:8c:90:7c:a9:4a:64:0c:3c:0b:94:7d:dd:7b:
16:b5:98:dd:23:3a:e4:5d:c4:c9:0d:f0:65:36:12:
6d:3e:ea:d1:dd:be:1f:3f:fb:b5:c4:6d:61:87:c4:
5c:a2:2d:11:8e:8b:67:b7:ee:7b:73:34:03:97:c4:
db:f7:ef:68:6a:b3:a0:4d:38:7d:a8:0d:6b:72:c2:
eb:4b:3d:72:2c:74:f5:46:af:e6:00:fb:9d:0f:e1:
2d:bf:d2:4e:a3:0c:f2:8d:0e:a9:bf:20:e3:4a:25:
a2:0a:1b:8f:54:49:b7:12:91:83:ce:27:75:40:01:
a8:4e:b4:ed:3f:96:b6:9e:93:e2:b7:0e:23:92:20:
f3:50:cc:01:1c:6e:53:27:90:fc:7c:27:4c:60:b7:
87:88:ba:64:4c:56:c9:07:ff:be:ff:f6:50:4e:f0:
84:2f:b4:84:c8:a0:94:9c:fa:92:68:c4:70:b4:45:
0a:50:fd:7f:af:80:84:1a:89:a1:32:e3:64:35:99:
02:28:6a:16:44:5a:da:db:e1:c8:6c:94:a2:9e:14:
9b:8d:cd:ac:11:34:5c:4f:68:a3:b9:eb:98:9c:0f:
4e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:21:28:99:D0:66:26:99:92:C7:37:FD:C9:D1:E4:81:98:F1:7E:ED
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pCEomdBmJpmSxzf9ydHkgZjxfu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a5c0::/29
2a06:dfc0::/29
2a07:bb40::/29
2a09:b700::/29
2a0d:8f80::/29
2a0f:e00::/29
2a0f:19c0::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:2d40::/29
2a0f:3240::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:e540::/29
2a0f:e600::/29
2a0f:e9c0::/29
2a10:30c0::/29
2a10:3140::/29
2a10:31c0::/29
2a10:3340::/29
2a10:3540::/29
2a10:36c0::/29
2a10:3740::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6400::/29
2a10:6500::/29
2a10:6b00::/29
2a10:6d00::/29
2a10:7100::/29
2a10:7300::/29
2a10:7500::/29
2a10:7900::/29
2a10:7b00::/29
2a10:7d00::/29
2a10:7f00::/29
2a11:4800::/29
2a11:5c80::/29
2a11:7440::/29
2a11:89c0::/29
2a11:e580::/29
2a12:2c80::/29
2a12:4b00::/29
2a12:5e00::/29
2a12:d100::/29
2a12:d540::/29
2a12:d5c0::/29
2a13:200::/29
2a13:2bc0::/29
2a13:3080::/29
2a13:8f00::/29
2a13:9680::/29
2a13:a100::/29
2a13:df00::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
41:f1:e3:0a:b2:aa:23:8d:13:28:8a:6c:f0:79:93:94:9c:0b:
12:08:ca:bf:e2:90:d4:78:71:2f:95:19:c8:7f:ab:11:32:a1:
0c:76:95:e9:1a:a7:95:5e:d7:12:bf:72:f6:94:a4:00:2c:86:
ab:c2:ba:e6:1f:bb:9b:34:f6:89:ab:25:ae:f0:4e:28:36:3d:
af:5f:40:00:a2:52:53:fb:7c:bb:53:10:18:33:3d:01:48:2c:
6d:ef:25:a9:59:1f:5e:f4:fc:eb:32:3d:39:4c:bd:3a:37:0d:
63:a0:76:fc:f5:d0:77:e3:97:71:dd:b3:37:6c:44:54:80:23:
7a:b0:46:20:4d:64:b6:18:2b:97:bf:a5:df:d1:37:64:22:88:
ba:53:30:a3:cb:ed:51:cb:74:cc:bb:b5:68:dc:05:91:31:11:
fa:05:f5:bb:1a:37:75:7e:af:3e:ac:b8:22:c3:95:78:93:5d:
53:07:ab:36:4f:1d:08:cb:71:8c:d8:50:fe:34:a1:0e:42:37:
2d:10:c2:f7:a3:cb:64:ff:79:f3:76:81:75:75:92:23:74:5b:
d6:31:5a:71:fc:77:94:55:db:71:2a:11:e1:96:89:34:53:46:
10:74:e6:ec:5d:0d:a2:d7:77:25:27:e1:01:e1:28:b8:5d:83:
95:7c:d9:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:23:25 2025 by rpki-client