Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xXNk6Rh1Z2anlcGesirl4JyVx2o.roa
File: xXNk6Rh1Z2anlcGesirl4JyVx2o.roa (raw, json)
Hash identifier: pJdUMYzR23ea1xvtFvZLVgy30tkrGJXvzgDmeLExe9E=
Subject key identifier: C5:73:64:E9:18:75:67:66:A7:95:C1:9E:B2:2A:E5:E0:9C:95:C7:6A
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0196F86A40A1824B42A246131F71455FFC39
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xXNk6Rh1Z2anlcGesirl4JyVx2o.roa
Signing time: Thu 22 May 2025 14:33:54 +0000
ROA not before: Thu 22 May 2025 14:33:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197992
IP address blocks: 2a06:5280::/29 maxlen: 29
2a07:95c0::/29 maxlen: 29
2a0d:1140::/29 maxlen: 29
2a0d:a9c0::/29 maxlen: 29
2a0f:16c0::/29 maxlen: 29
2a0f:1a40::/29 maxlen: 29
2a0f:27c0::/29 maxlen: 29
2a0f:2e40::/29 maxlen: 29
2a0f:3640::/29 maxlen: 29
2a0f:3740::/29 maxlen: 29
2a0f:7280::/29 maxlen: 29
2a0f:9600::/29 maxlen: 29
2a0f:ec00::/29 maxlen: 29
2a10:3040::/29 maxlen: 29
2a10:3640::/29 maxlen: 29
2a10:6300::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a11:3f80::/29 maxlen: 29
2a11:f040::/29 maxlen: 29
2a12:cd00::/29 maxlen: 29
2a13:2f40::/29 maxlen: 29
2a13:4f00::/29 maxlen: 29
2a13:9100::/29 maxlen: 29
2a13:9480::/29 maxlen: 29
2a13:9b00::/29 maxlen: 29
2a13:9d00::/29 maxlen: 29
2a13:c700::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 May 2025 09:27:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:f8:6a:40:a1:82:4b:42:a2:46:13:1f:71:45:5f:fc:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: May 22 14:33:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c57364e918756766a795c19eb22ae5e09c95c76a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:9c:f9:86:f4:4f:05:8e:6b:35:17:cf:00:
88:4b:49:85:6f:6d:8b:8b:94:28:6a:d3:58:e5:73:
a2:9c:73:85:a4:76:ab:06:10:f3:67:d8:a1:a4:1a:
bf:d4:c4:33:56:13:ae:87:1c:32:42:4a:7f:46:97:
54:54:38:55:3f:98:7b:d3:7b:1c:de:a4:15:9a:f2:
35:d1:2b:99:6c:a2:09:b5:db:ac:dc:8b:bc:be:cc:
9a:8c:5d:ae:87:57:99:37:49:f6:c0:7c:f0:82:38:
16:d9:4d:18:03:18:35:26:ab:b2:b8:31:55:a8:2a:
39:88:a5:19:9c:34:49:c6:07:23:66:7e:4b:59:58:
f3:56:96:88:d2:70:ef:60:ac:36:87:5d:be:c5:32:
e3:49:35:92:2d:00:e6:c4:02:42:62:ff:2a:a4:c8:
5d:75:ad:5e:f5:82:cb:1d:80:5e:de:0c:cc:07:6b:
8b:ec:ce:e1:d1:00:d0:fe:a0:41:a3:aa:55:ae:07:
d2:df:e7:d9:a1:1f:83:dc:70:e4:9e:d7:63:5b:81:
bd:46:bb:4f:7c:83:a1:17:47:2d:f3:7e:89:a5:e4:
0a:aa:a4:cb:55:3a:7f:73:14:ed:e4:e5:78:90:6f:
c1:4e:68:a0:23:f1:22:af:96:88:ab:a0:fe:ae:df:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:73:64:E9:18:75:67:66:A7:95:C1:9E:B2:2A:E5:E0:9C:95:C7:6A
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/xXNk6Rh1Z2anlcGesirl4JyVx2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:5280::/29
2a07:95c0::/29
2a0d:1140::/29
2a0d:a9c0::/29
2a0f:16c0::/29
2a0f:1a40::/29
2a0f:27c0::/29
2a0f:2e40::/29
2a0f:3640::/29
2a0f:3740::/29
2a0f:7280::/29
2a0f:9600::/29
2a0f:ec00::/29
2a10:3040::/29
2a10:3640::/29
2a10:6300::/29
2a10:6900::/29
2a11:3f80::/29
2a11:f040::/29
2a12:cd00::/29
2a13:2f40::/29
2a13:4f00::/29
2a13:9100::/29
2a13:9480::/29
2a13:9b00::/29
2a13:9d00::/29
2a13:c700::/29
Signature Algorithm: sha256WithRSAEncryption
b6:52:59:85:bf:71:32:6b:29:ad:e6:ac:a6:dc:71:52:40:b9:
b4:83:ef:7d:c0:4b:60:25:56:76:7e:1a:5e:bf:e6:b3:2f:e2:
bd:16:f0:79:2e:65:76:89:fa:97:93:64:cf:d2:85:38:64:05:
f4:0c:c6:bd:3e:0e:49:c8:9b:e5:f6:80:e7:5b:12:05:d4:bc:
73:fb:38:a4:0f:a2:43:91:5e:47:62:97:e4:bb:6a:b0:79:87:
b4:00:e9:8e:f9:ca:5c:5a:8c:27:0b:ce:e7:9b:b5:fc:76:3b:
ee:0a:68:2c:d0:03:a6:0e:5c:c1:50:24:41:c6:70:a1:45:7c:
65:11:34:3b:fb:92:a3:ec:6b:7e:10:1c:dd:a2:c6:7d:63:43:
17:8e:1a:74:6d:81:2f:39:97:bd:83:1a:5d:12:32:66:3c:28:
ce:1b:5f:70:72:dd:fa:ef:41:1c:7b:53:df:4f:ee:4b:5b:3e:
f4:b9:4d:35:99:79:3d:62:d6:89:f5:7b:db:f5:55:56:c3:b1:
e1:bf:c5:16:5c:65:69:d8:4f:95:94:ad:f5:58:17:67:1f:13:
2c:8f:fe:74:1e:57:09:cc:52:cf:c9:50:95:ce:ac:69:32:61:
d2:2a:e4:88:b1:5e:1f:16:d9:a3:78:8e:fa:0a:da:22:bb:a8:
df:fb:d3:96
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAZb4akChgktCokYTH3FFX/w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjUwNTIyMTQzMzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTczNjRlOTE4NzU2NzY2YTc5NWMxOWViMjJhZTVlMDljOTVjNzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDic+Yb0TwWOazUXzwCIS0mFb22L
i5QoatNY5XOinHOFpHarBhDzZ9ihpBq/1MQzVhOuhxwyQkp/RpdUVDhVP5h703sc
3qQVmvI10SuZbKIJtdus3Iu8vsyajF2uh1eZN0n2wHzwgjgW2U0YAxg1JquyuDFV
qCo5iKUZnDRJxgcjZn5LWVjzVpaI0nDvYKw2h12+xTLjSTWSLQDmxAJCYv8qpMhd
da1e9YLLHYBe3gzMB2uL7M7h0QDQ/qBBo6pVrgfS3+fZoR+D3HDkntdjW4G9RrtP
fIOhF0ct836JpeQKqqTLVTp/cxTt5OV4kG/BTmigI/Eir5aIq6D+rt8x5wIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFMVzZOkYdWdmp5XBnrIq5eCclcdqMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEveFhOazZSaDFaMmFubGNHZXNpcmw0SnlWeDJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBxAQCAAIwgb0DBQMq
BlKAAwUDKgeVwAMFAyoNEUADBQMqDanAAwUDKg8WwAMFAyoPGkADBQMqDyfAAwUD
Kg8uQAMFAyoPNkADBQMqDzdAAwUDKg9ygAMFAyoPlgADBQMqD+wAAwUDKhAwQAMF
AyoQNkADBQMqEGMAAwUDKhBpAAMFAyoRP4ADBQMqEfBAAwUDKhLNAAMFAyoTL0AD
BQMqE08AAwUDKhORAAMFAyoTlIADBQMqE5sAAwUDKhOdAAMFAyoTxwAwDQYJKoZI
hvcNAQELBQADggEBALZSWYW/cTJrKa3mrKbccVJAubSD733AS2AlVnZ+Gl6/5rMv
4r0W8HkuZXaJ+peTZM/ShThkBfQMxr0+DknIm+X2gOdbEgXUvHP7OKQPokORXkdi
l+S7arB5h7QA6Y75ylxajCcLzuebtfx2O+4KaCzQA6YOXMFQJEHGcKFFfGURNDv7
kqPsa34QHN2ixn1jQxeOGnRtgS85l72DGl0SMmY8KM4bX3By3frvQRx7U99P7ktb
PvS5TTWZeT1i1on1e9v1VVbDseG/xRZcZWnYT5WUrfVYF2cfEyyP/nQeVwnMUs/J
UJXOrGkyYdIq5IixXh8W2aN4jvoK2iK7qN/705Y=
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:00:58 2025 by rpki-client