Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xIxuqvvCD6datG69DfqoWn0Yq34.roa
File: xIxuqvvCD6datG69DfqoWn0Yq34.roa (raw, json)
Hash identifier: By9+s0DWWeH1HMjbOavhZ/CXBPprm7K8/zLacTfzX/k=
Subject key identifier: C4:8C:6E:AA:FB:C2:0F:A7:5A:B4:6E:BD:0D:FA:A8:5A:7D:18:AB:7E
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01973B60EF7144C80B68F0C2E8525C24CADF
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xIxuqvvCD6datG69DfqoWn0Yq34.roa
Signing time: Wed 04 Jun 2025 14:38:17 +0000
ROA not before: Wed 04 Jun 2025 14:38:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14576
IP address blocks: 2a06:a5c0::/29 maxlen: 29
2a06:dfc0::/29 maxlen: 29
2a07:bb40::/29 maxlen: 29
2a09:b700::/29 maxlen: 29
2a0d:8f80::/29 maxlen: 29
2a0f:e00::/29 maxlen: 29
2a0f:19c0::/29 maxlen: 29
2a0f:2300::/29 maxlen: 29
2a0f:2840::/29 maxlen: 29
2a0f:2d40::/29 maxlen: 29
2a0f:3240::/29 maxlen: 29
2a0f:35c0::/29 maxlen: 29
2a0f:36c0::/29 maxlen: 29
2a0f:9e00::/29 maxlen: 29
2a0f:a200::/29 maxlen: 29
2a0f:e540::/29 maxlen: 29
2a0f:e600::/29 maxlen: 29
2a0f:e9c0::/29 maxlen: 29
2a10:30c0::/29 maxlen: 29
2a10:3140::/29 maxlen: 29
2a10:31c0::/29 maxlen: 29
2a10:3340::/29 maxlen: 29
2a10:3540::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:3740::/29 maxlen: 29
2a10:4a00::/29 maxlen: 29
2a10:5400::/29 maxlen: 29
2a10:6400::/29 maxlen: 29
2a10:6500::/29 maxlen: 29
2a10:6b00::/29 maxlen: 29
2a10:6d00::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7500::/29 maxlen: 29
2a10:7900::/29 maxlen: 29
2a10:7b00::/29 maxlen: 29
2a10:7d00::/29 maxlen: 29
2a11:4800::/29 maxlen: 32
2a11:7440::/29 maxlen: 29
2a11:89c0::/29 maxlen: 29
2a11:e580::/29 maxlen: 29
2a12:2c80::/29 maxlen: 29
2a12:4b00::/29 maxlen: 29
2a12:5e00::/29 maxlen: 29
2a12:d100::/29 maxlen: 29
2a12:d540::/29 maxlen: 29
2a12:d5c0::/29 maxlen: 29
2a13:200::/29 maxlen: 29
2a13:2bc0::/29 maxlen: 29
2a13:3080::/29 maxlen: 29
2a13:8f00::/29 maxlen: 29
2a13:9680::/29 maxlen: 29
2a13:a100::/29 maxlen: 29
2a13:df00::/29 maxlen: 29
2a13:f900::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 05 Jun 2025 12:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3b:60:ef:71:44:c8:0b:68:f0:c2:e8:52:5c:24:ca:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jun 4 14:38:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c48c6eaafbc20fa75ab46ebd0dfaa85a7d18ab7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8c:26:20:15:09:9d:f9:0c:33:41:4c:92:90:
09:93:f3:50:39:41:28:9d:e6:2b:32:89:d3:f8:3b:
44:9e:41:6c:50:38:31:16:19:39:63:e8:a3:2f:2d:
be:91:70:34:98:29:a4:6b:a2:2b:2a:04:68:87:c9:
8e:da:fd:c0:3b:02:78:12:66:8f:9b:89:b2:a8:33:
ad:6c:26:87:c5:d7:a5:84:8b:be:f5:73:74:f8:53:
3e:5d:e1:ee:99:ef:b4:6e:fe:fb:ad:68:cf:ee:3f:
15:17:52:c8:3f:c5:06:0e:8f:47:fb:fe:38:01:5a:
77:4b:02:d8:64:41:d2:a2:b7:39:ba:8f:7e:b4:88:
37:6d:c5:e3:60:d8:35:d7:bf:bd:43:b9:ee:90:e9:
5c:1f:16:a9:94:32:3f:75:da:62:75:48:78:12:f2:
68:ea:70:26:95:d2:f6:0b:04:b4:fa:2e:a9:ff:56:
84:25:18:c5:4d:d0:82:91:13:aa:d8:a7:eb:45:3b:
43:65:1d:1f:2c:cb:2e:61:8f:89:71:87:3a:7f:d0:
13:c2:62:c4:94:9b:05:60:34:f1:f0:7e:91:14:3d:
94:9a:de:6a:70:e9:95:5c:60:22:f5:88:95:86:b0:
11:c3:36:55:ef:8e:11:a5:85:5f:c6:b9:66:4c:0b:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:6E:AA:FB:C2:0F:A7:5A:B4:6E:BD:0D:FA:A8:5A:7D:18:AB:7E
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xIxuqvvCD6datG69DfqoWn0Yq34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a5c0::/29
2a06:dfc0::/29
2a07:bb40::/29
2a09:b700::/29
2a0d:8f80::/29
2a0f:e00::/29
2a0f:19c0::/29
2a0f:2300::/29
2a0f:2840::/29
2a0f:2d40::/29
2a0f:3240::/29
2a0f:35c0::/29
2a0f:36c0::/29
2a0f:9e00::/29
2a0f:a200::/29
2a0f:e540::/29
2a0f:e600::/29
2a0f:e9c0::/29
2a10:30c0::/29
2a10:3140::/29
2a10:31c0::/29
2a10:3340::/29
2a10:3540::/29
2a10:36c0::/29
2a10:3740::/29
2a10:4a00::/29
2a10:5400::/29
2a10:6400::/29
2a10:6500::/29
2a10:6b00::/29
2a10:6d00::/29
2a10:7100::/29
2a10:7300::/29
2a10:7500::/29
2a10:7900::/29
2a10:7b00::/29
2a10:7d00::/29
2a11:4800::/29
2a11:7440::/29
2a11:89c0::/29
2a11:e580::/29
2a12:2c80::/29
2a12:4b00::/29
2a12:5e00::/29
2a12:d100::/29
2a12:d540::/29
2a12:d5c0::/29
2a13:200::/29
2a13:2bc0::/29
2a13:3080::/29
2a13:8f00::/29
2a13:9680::/29
2a13:a100::/29
2a13:df00::/29
2a13:f900::/29
Signature Algorithm: sha256WithRSAEncryption
c1:1c:dd:3f:ac:3b:3b:57:8b:84:fa:bc:5c:5b:5b:ac:cd:07:
ba:a7:f5:18:19:13:8e:02:c2:7e:c7:f2:31:23:c8:de:83:66:
a9:e2:0c:19:03:8e:a2:c6:41:29:89:c3:15:ff:b8:6a:32:f3:
d5:4e:56:5a:fe:5a:82:b3:c0:f3:fd:77:59:bc:33:d8:9a:7f:
9f:fe:05:fa:d7:73:bd:20:c7:9e:88:12:17:b8:39:0c:bb:65:
fc:25:88:62:31:41:86:c0:61:9d:37:7e:b9:d8:b0:40:24:bb:
8c:d0:fc:fb:7a:51:d4:e5:27:3e:e0:0e:c1:2c:5f:e2:2a:4f:
61:be:b3:56:19:d0:13:9b:95:93:c2:bf:1d:12:cc:61:9a:a9:
6e:77:35:e4:db:68:5e:6e:98:51:d8:37:7e:a9:f7:a6:8b:72:
8b:44:94:17:88:c3:d8:ce:9a:b1:3d:9b:f4:ce:cc:e6:36:68:
f7:72:91:69:43:11:24:04:b2:b6:1d:ca:a3:c3:97:12:a4:fb:
88:9b:68:f3:02:d9:33:17:cf:11:b8:6a:d1:ff:b5:78:c6:e6:
f1:f6:8e:59:e2:d5:b7:dc:c6:19:d3:c7:4e:b5:57:80:57:9f:
03:6c:25:58:89:3e:49:f0:f1:d5:77:31:4e:4c:48:a0:97:c2:
c7:c1:e3:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:17:22 2025 by rpki-client