Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pSOGGJorMnTJQ-6HLEyQT4FLXKQ.roa
File: pSOGGJorMnTJQ-6HLEyQT4FLXKQ.roa (raw, json)
Hash identifier: MjKnghQ0e5tLKkX7lkocDv2qA0MyhW1AmtTnz7KAMS4=
Subject key identifier: A5:23:86:18:9A:2B:32:74:C9:43:EE:87:2C:4C:90:4F:81:4B:5C:A4
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01954D382538289E90328BCE035EB4D2EC94
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pSOGGJorMnTJQ-6HLEyQT4FLXKQ.roa
Signing time: Fri 28 Feb 2025 15:41:19 +0000
ROA not before: Fri 28 Feb 2025 15:41:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215120
IP address blocks: 2a06:5280::/29 maxlen: 29
2a09:4500::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 16 Mar 2025 10:51:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4d:38:25:38:28:9e:90:32:8b:ce:03:5e:b4:d2:ec:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 28 15:41:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a52386189a2b3274c943ee872c4c904f814b5ca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:77:a9:93:ae:11:ad:d5:29:97:f2:b9:f2:ee:
30:81:a0:3e:92:37:fb:e8:ca:9d:c7:ec:c8:bd:b0:
24:74:82:59:c8:f9:8c:0b:52:fe:1d:4d:59:05:17:
f7:9a:71:53:5b:f7:fc:7f:22:f5:64:06:f2:e3:f2:
72:cf:80:7e:95:8a:a6:62:69:0a:97:b0:7d:ad:f8:
24:23:c5:0f:71:ca:59:36:eb:6c:93:d2:35:5f:8b:
d9:0d:61:06:c4:f0:e9:09:76:de:4b:ce:4f:ca:03:
f7:4c:1c:06:dd:45:c7:00:bc:c2:68:7a:a7:ff:d1:
cf:f9:d8:6f:6a:b6:60:7c:2e:bd:e0:c0:d5:49:39:
7c:b2:d4:29:8f:c1:a7:47:52:00:b0:4f:26:2d:31:
d0:ba:9c:18:63:d3:68:ca:a1:20:3b:a7:f7:ce:0e:
0b:09:ad:43:7c:73:3c:4c:d0:6a:9e:18:1b:a4:78:
17:b6:22:5c:35:33:54:d1:26:5d:5d:d0:0d:93:85:
b7:12:3f:7d:da:c0:11:d4:90:ff:6d:3a:a6:fe:ec:
9d:c3:1f:95:45:b3:30:e7:15:6c:c8:23:f1:e5:55:
18:75:93:e0:e2:93:37:b3:7c:a7:bc:e5:e2:a9:d5:
88:bd:f9:a3:69:ed:64:26:e5:0e:4c:dd:7b:91:0c:
00:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:23:86:18:9A:2B:32:74:C9:43:EE:87:2C:4C:90:4F:81:4B:5C:A4
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/pSOGGJorMnTJQ-6HLEyQT4FLXKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
2a09:4500::/29
Signature Algorithm: sha256WithRSAEncryption
a2:27:4e:e4:0f:f3:03:8a:6a:c7:74:71:ab:4f:4b:7b:14:32:
4d:37:30:fb:f5:2e:63:15:79:e3:64:e0:20:ef:da:cf:fd:b5:
6f:88:88:d0:57:9d:a3:14:49:1a:36:3d:4b:ea:99:42:b1:1b:
ce:db:ee:d6:64:83:30:b6:33:c4:f8:a9:dc:fa:1d:31:1b:e9:
4a:46:bc:c4:24:4c:df:af:ef:73:d6:ab:27:a6:3a:03:17:16:
27:53:54:e6:76:d2:c5:96:c0:54:ed:a0:af:61:45:04:f8:e2:
ee:82:37:68:21:bc:4d:d0:d5:06:4f:c2:53:94:c7:5d:2c:96:
71:47:22:a3:a6:60:15:44:37:f4:bb:8f:ca:35:49:da:5d:5c:
eb:4e:9d:dd:cd:2e:46:3f:4f:0e:51:5f:df:29:74:68:3b:b3:
d2:c6:33:42:06:49:60:72:50:b4:83:a7:53:fc:92:1a:51:ee:
02:b5:3c:bd:b9:b8:97:ac:22:5d:4c:4f:27:d8:9e:2c:45:ed:
91:30:62:62:43:e3:64:af:a1:e2:f9:10:b9:5b:52:d3:dd:41:
83:7b:f3:af:14:9b:f7:6b:91:a5:47:57:02:3f:ab:4f:ac:75:
0c:a1:10:ad:1e:f8:c2:d7:f5:27:fd:30:40:62:5a:c6:34:0c:
b9:e4:a4:bf
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZVNOCU4KJ6QMovOA1600uyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwMjI4MTU0MTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTIzODYxODlhMmIzMjc0Yzk0M2VlODcyYzRjOTA0ZjgxNGI1Y2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHepk64RrdUpl/K58u4wgaA+kjf7
6Mqdx+zIvbAkdIJZyPmMC1L+HU1ZBRf3mnFTW/f8fyL1ZAby4/Jyz4B+lYqmYmkK
l7B9rfgkI8UPccpZNutsk9I1X4vZDWEGxPDpCXbeS85PygP3TBwG3UXHALzCaHqn
/9HP+dhvarZgfC694MDVSTl8stQpj8GnR1IAsE8mLTHQupwYY9NoyqEgO6f3zg4L
Ca1DfHM8TNBqnhgbpHgXtiJcNTNU0SZdXdANk4W3Ej992sAR1JD/bTqm/uydwx+V
RbMw5xVsyCPx5VUYdZPg4pM3s3ynvOXiqdWIvfmjae1kJuUOTN17kQwASQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKUjhhiaKzJ0yUPuhyxMkE+BS1ykMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvcFNPR0dKb3JNblRKUS02SExFeVFUNEZMWEtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKgZSgAMF
AyoJRQAwDQYJKoZIhvcNAQELBQADggEBAKInTuQP8wOKasd0catPS3sUMk03MPv1
LmMVeeNk4CDv2s/9tW+IiNBXnaMUSRo2PUvqmUKxG87b7tZkgzC2M8T4qdz6HTEb
6UpGvMQkTN+v73PWqyemOgMXFidTVOZ20sWWwFTtoK9hRQT44u6CN2ghvE3Q1QZP
wlOUx10slnFHIqOmYBVEN/S7j8o1SdpdXOtOnd3NLkY/Tw5RX98pdGg7s9LGM0IG
SWByULSDp1P8khpR7gK1PL25uJesIl1MTyfYnixF7ZEwYmJD42SvoeL5ELlbUtPd
QYN7868Um/drkaVHVwI/q0+sdQyhEK0e+MLX9Sf9MEBiWsY0DLnkpL8=
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:21 2025 by rpki-client