Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/SZGsPXN41lYW6JTzyon-QJoqF9I.roa
File: SZGsPXN41lYW6JTzyon-QJoqF9I.roa (raw, json)
Hash identifier: kjg5aWcwFbCMnFtLmnxWWjcLBctxJizKi9hBmQCUlWs=
Subject key identifier: 49:91:AC:3D:73:78:D6:56:16:E8:94:F3:CA:89:FE:40:9A:2A:17:D2
Certificate issuer: /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial: 019397331E6C492D5CA7042DC228CBB4AD06
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/SZGsPXN41lYW6JTzyon-QJoqF9I.roa
Signing time: Thu 05 Dec 2024 14:22:09 +0000
ROA not before: Thu 05 Dec 2024 14:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214466
IP address blocks: 2a14:9400::/29 maxlen: 29
2a14:9400:1337::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:97:33:1e:6c:49:2d:5c:a7:04:2d:c2:28:cb:b4:ad:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Validity
Not Before: Dec 5 14:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4991ac3d7378d65616e894f3ca89fe409a2a17d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:30:d1:7d:e5:24:43:97:ab:19:3f:a6:50:b1:
4b:32:42:f5:d5:26:cf:3a:03:4b:3d:9c:4a:0a:80:
6d:df:d8:49:c6:82:4e:aa:3f:65:d9:1f:86:ee:c3:
cb:75:4d:a0:8c:02:35:d8:8e:73:a1:b1:fe:bb:e9:
72:d1:34:a2:ef:25:f6:d9:16:a2:84:c7:33:0c:be:
62:9e:d4:c7:89:37:2f:e6:8d:95:64:4a:5c:b0:bd:
22:58:f7:1c:ef:4c:8b:6c:14:b9:07:a5:bc:22:38:
6d:3e:fe:6c:34:d2:05:d0:4b:c4:fb:23:50:93:ad:
90:60:cb:6e:1d:cd:23:da:1d:db:74:ea:eb:56:a9:
dd:f4:1c:19:f9:24:8e:03:6f:9c:8e:49:63:a6:25:
96:1d:15:3a:d3:8a:cd:7e:a8:45:01:a4:b8:63:e8:
a2:bd:2d:23:c6:41:a4:7f:27:9d:c6:1c:f9:fb:02:
9e:fd:d6:d2:58:5f:87:bc:f3:d0:d8:17:2e:84:ae:
22:d9:87:10:26:f6:fb:12:f7:55:1a:5f:f1:39:f4:
57:08:18:be:b8:bb:4d:c0:43:ef:f9:29:42:1e:8b:
1a:c6:eb:32:df:51:f4:6a:fb:57:66:ce:81:b5:e8:
30:a7:ba:92:52:3f:c0:7b:60:25:27:ee:aa:e8:4a:
35:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:91:AC:3D:73:78:D6:56:16:E8:94:F3:CA:89:FE:40:9A:2A:17:D2
X509v3 Authority Key Identifier:
keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/SZGsPXN41lYW6JTzyon-QJoqF9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:9400::/29
Signature Algorithm: sha256WithRSAEncryption
99:81:73:3b:85:78:87:17:eb:50:56:cb:af:d3:0b:c0:7c:d7:
cf:10:3b:81:c9:09:ba:12:69:5c:58:28:54:e5:f6:c5:9e:81:
17:d1:e5:83:4a:db:c8:89:c0:51:7a:62:ef:c9:20:00:e3:6b:
0c:8f:c0:7e:d7:57:ca:16:ef:4e:65:bf:cd:d8:a5:00:3f:87:
2e:2a:68:27:67:12:94:e6:78:54:52:2c:f7:33:e6:21:e5:3f:
e8:75:92:84:e8:94:1c:66:7d:85:67:22:f7:f7:34:2f:ca:d3:
6c:38:93:41:5e:a2:6b:25:89:df:f0:1b:24:45:13:88:7e:b9:
a6:14:7c:6a:d8:e6:39:75:47:47:df:2a:16:b2:40:b4:8c:b6:
2f:a6:74:e7:3e:8c:82:c9:14:0d:35:86:62:17:00:73:1d:b7:
4d:51:57:eb:b2:50:07:fe:40:c6:58:9b:03:e7:27:6c:1c:07:
54:d5:cc:a3:cc:f4:45:d4:9f:dc:4d:00:a2:08:83:f9:b9:ed:
b0:32:70:28:72:d9:a7:51:84:2f:46:2a:a2:30:ac:c5:5a:02:
7f:0b:26:bc:ea:ba:ba:4e:95:39:83:a6:cf:eb:1f:d5:96:d7:
bc:c2:3b:c1:7f:de:8c:fa:3a:58:1a:2e:66:72:c3:3c:05:29:
27:1c:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:06 2025 by rpki-client