Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/DAzptCslw_H07q2GmK3p1STFx-o.roa
File: DAzptCslw_H07q2GmK3p1STFx-o.roa (raw, json)
Hash identifier: HbOGbeztHwhvjM6b9CWT+2K0U1ZaUP88kZL6JP0utl0=
Subject key identifier: 0C:0C:E9:B4:2B:25:C3:F1:F4:EE:AD:86:98:AD:E9:D5:24:C5:C7:EA
Certificate issuer: /CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Certificate serial: 0196E9F32E41F05EFE38E71CF020BB5E403F
Authority key identifier: C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/DAzptCslw_H07q2GmK3p1STFx-o.roa
Signing time: Mon 19 May 2025 19:09:10 +0000
ROA not before: Mon 19 May 2025 19:09:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:f00::/32 maxlen: 32
2a0e:f01::/32 maxlen: 32
2a0e:13c0::/32 maxlen: 32
2a0e:13c4::/32 maxlen: 32
2a0e:67c1::/32 maxlen: 32
2a0e:8541::/32 maxlen: 32
2a0f:bb03::/32 maxlen: 32
2a11:640::/32 maxlen: 32
2a11:642::/32 maxlen: 32
2a11:3181::/32 maxlen: 32
2a11:4a01::/32 maxlen: 32
2a11:7882::/32 maxlen: 32
2a11:8502::/32 maxlen: 32
2a11:8504::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 29 May 2025 16:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e9:f3:2e:41:f0:5e:fe:38:e7:1c:f0:20:bb:5e:40:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38280c5300b74888ac7eb4bfa6417d9a2e7b0be
Validity
Not Before: May 19 19:09:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c0ce9b42b25c3f1f4eead8698ade9d524c5c7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:87:f0:4a:46:2a:cc:bc:68:41:91:99:ce:80:
6f:54:44:f3:29:3a:22:f0:99:4b:52:94:e9:39:dc:
69:d0:0a:c9:d5:55:7d:20:05:15:5e:3b:ca:3d:ce:
98:b7:a2:35:23:33:88:c5:ce:a5:e9:8b:a7:ea:9a:
3e:4c:19:11:00:12:6e:4a:89:26:d5:a0:4e:5e:0c:
f8:46:2c:f4:59:68:7d:6e:8e:56:34:71:3a:44:0f:
3d:99:db:f5:6e:08:df:8c:aa:ea:06:b5:d5:b1:c8:
e0:cd:b5:99:0b:6f:a3:61:99:e8:58:60:2d:4f:56:
e1:6c:fd:bc:d9:d3:9d:5f:2c:ad:55:80:22:1c:bc:
9f:53:aa:d9:41:fd:fc:76:94:89:0b:56:9c:e0:12:
0b:62:bc:0d:2f:a8:87:f7:69:e3:d9:3e:bc:61:43:
74:e9:cc:d2:88:c4:36:ac:54:50:d5:14:f1:67:2e:
98:92:c9:06:29:57:f3:e5:c1:48:24:fa:f0:9f:13:
81:71:c0:4e:88:f6:2c:a2:73:95:76:ca:0c:43:e2:
da:1f:d2:d0:18:9c:05:52:49:ea:d1:a1:52:73:79:
89:d7:3f:6e:47:00:d7:85:74:ae:2e:0b:81:f7:fd:
94:fe:7d:a6:15:0a:25:44:88:6d:e3:80:63:56:4b:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:0C:E9:B4:2B:25:C3:F1:F4:EE:AD:86:98:AD:E9:D5:24:C5:C7:EA
X509v3 Authority Key Identifier:
keyid:C3:82:80:C5:30:0B:74:88:8A:C7:EB:4B:FA:64:17:D9:A2:E7:B0:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4KAxTALdIiKx-tL-mQX2aLnsL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/DAzptCslw_H07q2GmK3p1STFx-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/897449-e9cf-4a79-89cf-41bb21ac2801/1/w4KAxTALdIiKx-tL-mQX2aLnsL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:f00::/31
2a0e:13c0::/32
2a0e:13c4::/32
2a0e:67c1::/32
2a0e:8541::/32
2a0f:bb03::/32
2a11:640::/32
2a11:642::/32
2a11:3181::/32
2a11:4a01::/32
2a11:7882::/32
2a11:8502::/32
2a11:8504::/32
Signature Algorithm: sha256WithRSAEncryption
aa:6d:67:30:43:e5:58:fa:91:c5:c4:57:bb:5e:1a:15:e6:c7:
4a:b9:5a:b1:63:b2:50:08:63:43:52:6e:f2:95:36:c8:52:c1:
b1:87:30:ea:48:37:9e:b8:73:ae:37:3d:ae:16:8b:29:d9:a4:
02:51:cf:bc:dc:d4:d6:cb:2a:5a:61:4c:59:a8:82:74:98:ca:
e5:1a:79:59:cc:36:58:0e:fe:c5:00:f2:7b:88:ee:b1:44:3f:
62:ca:a2:5e:9e:9c:14:a9:b2:0a:89:a0:30:9c:a2:02:22:45:
80:3b:9f:7f:32:d8:60:13:44:c0:f7:1e:ea:cd:bc:83:00:b7:
55:71:c1:eb:08:f1:8a:32:e4:2b:f3:0d:98:0f:81:fe:c1:5e:
1f:66:70:50:f1:99:1e:40:8a:23:fd:73:83:47:33:13:7d:06:
ab:35:a5:a2:04:81:14:5a:45:41:fc:43:89:c1:16:ab:be:58:
6f:8b:33:77:4a:d0:27:b9:a2:b5:42:96:1c:d1:bc:80:2e:69:
d4:0b:45:dd:63:f7:67:53:87:f5:13:d6:6d:8c:5d:c2:37:80:
04:45:4c:eb:67:4a:7d:ac:8d:3f:29:cc:7d:d2:b4:e3:c7:88:
31:26:66:36:a9:f4:87:be:d8:5d:af:b9:fe:dc:84:59:d8:16:
4f:42:7e:10
-----BEGIN CERTIFICATE-----
MIIFUjCCBDqgAwIBAgISAZbp8y5B8F7+OOcc8CC7XkA/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODI4MGM1MzAwYjc0ODg4YWM3ZWI0YmZhNjQxN2Q5YTJl
N2IwYmUwHhcNMjUwNTE5MTkwOTEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzBjZTliNDJiMjVjM2YxZjRlZWFkODY5OGFkZTlkNTI0YzVjN2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4fwSkYqzLxoQZGZzoBvVETzKToi
8JlLUpTpOdxp0ArJ1VV9IAUVXjvKPc6Yt6I1IzOIxc6l6Yun6po+TBkRABJuSokm
1aBOXgz4Riz0WWh9bo5WNHE6RA89mdv1bgjfjKrqBrXVscjgzbWZC2+jYZnoWGAt
T1bhbP282dOdXyytVYAiHLyfU6rZQf38dpSJC1ac4BILYrwNL6iH92nj2T68YUN0
6czSiMQ2rFRQ1RTxZy6YkskGKVfz5cFIJPrwnxOBccBOiPYsonOVdsoMQ+LaH9LQ
GJwFUknq0aFSc3mJ1z9uRwDXhXSuLguB9/2U/n2mFQolRIht44BjVkvBDQIDAQAB
o4ICXjCCAlowHQYDVR0OBBYEFAwM6bQrJcPx9O6thpit6dUkxcfqMB8GA1UdIwQY
MBaAFMOCgMUwC3SIisfrS/pkF9mi57C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2Yt
NDFiYjIxYWMyODAxLzEvREF6cHRDc2x3X0gwN3EyR21LM3AxU1RGeC1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84OTc0NDktZTljZi00YTc5LTg5Y2YtNDFiYjIxYWMyODAx
LzEvdzRLQXhUQUxkSWlLeC10TC1tUVgyYUxuc0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBhBAIAAjBbAwUBKg4PAAMF
ACoOE8ADBQAqDhPEAwUAKg5nwQMFACoOhUEDBQAqD7sDAwUAKhEGQAMFACoRBkID
BQAqETGBAwUAKhFKAQMFACoReIIDBQAqEYUCAwUAKhGFBDANBgkqhkiG9w0BAQsF
AAOCAQEAqm1nMEPlWPqRxcRXu14aFebHSrlasWOyUAhjQ1Ju8pU2yFLBsYcw6kg3
nrhzrjc9rhaLKdmkAlHPvNzU1ssqWmFMWaiCdJjK5Rp5Wcw2WA7+xQDye4jusUQ/
YsqiXp6cFKmyComgMJyiAiJFgDuffzLYYBNEwPce6s28gwC3VXHB6wjxijLkK/MN
mA+B/sFeH2ZwUPGZHkCKI/1zg0czE30GqzWlogSBFFpFQfxDicEWq75Yb4szd0rQ
J7mitUKWHNG8gC5p1AtF3WP3Z1OH9RPWbYxdwjeABEVM62dKfayNPynMfdK048eI
MSZmNqn0h77YXa+5/tyEWdgWT0J+EA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:24:53 2025 by rpki-client