Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/z8A68a1JSXuWgIfLPLs7EKaff-M.roa
File: z8A68a1JSXuWgIfLPLs7EKaff-M.roa (raw, json)
Hash identifier: iZtgkFWJK4EwZpTDGFgF6+QteasK1SXJFhMav7zHRVY=
Subject key identifier: CF:C0:3A:F1:AD:49:49:7B:96:80:87:CB:3C:BB:3B:10:A6:9F:7F:E3
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 01953883E4B385E67469F1C8EB272132794F
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/z8A68a1JSXuWgIfLPLs7EKaff-M.roa
Signing time: Mon 24 Feb 2025 15:12:02 +0000
ROA not before: Mon 24 Feb 2025 15:12:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42337
IP address blocks: 2001:30c0:ffff:ff00::/64 maxlen: 64
Validation: Failed, certificate revoked on Sat 15 Mar 2025 19:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:83:e4:b3:85:e6:74:69:f1:c8:eb:27:21:32:79:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Feb 24 15:12:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfc03af1ad49497b968087cb3cbb3b10a69f7fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:55:64:9a:8b:42:0f:b1:73:d3:6d:cb:93:
f1:30:18:46:66:ae:ba:12:7c:2e:19:6b:04:ef:d4:
4f:e1:7e:61:b1:25:18:2e:7b:a5:10:27:a0:37:4d:
6e:8e:d4:64:74:96:ac:83:75:77:c9:91:36:d0:d3:
62:cf:77:2c:21:49:0b:cf:de:a5:b3:37:da:28:48:
9b:8c:69:93:53:17:b0:76:78:b6:36:e2:87:12:d1:
86:78:2b:3b:9f:aa:27:8e:b0:d5:87:29:da:40:5c:
62:6a:4c:ea:48:9f:12:38:cd:76:84:f7:35:cb:c1:
90:80:e4:30:b9:14:34:d7:70:34:4e:db:2c:61:64:
2e:9c:56:7b:93:46:1e:fb:be:3a:01:f2:a6:94:b6:
73:b8:bd:f3:2d:88:6e:d2:e4:72:51:43:58:6a:61:
50:1b:dc:8d:8f:db:52:60:24:79:11:d4:b9:db:ba:
d7:45:a2:a3:9e:46:44:d8:71:3a:d9:e9:c3:ed:eb:
9a:99:ff:64:d9:a6:c0:e7:47:1c:6a:a6:6f:63:fe:
30:76:85:4e:ee:56:f3:9d:f4:af:6e:df:cf:aa:31:
76:6d:d5:b4:a4:97:42:71:ea:15:3c:0b:8c:6e:55:
f7:ca:12:47:ea:50:69:71:7c:f9:4a:a2:ca:3a:c5:
80:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:3A:F1:AD:49:49:7B:96:80:87:CB:3C:BB:3B:10:A6:9F:7F:E3
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/z8A68a1JSXuWgIfLPLs7EKaff-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:ffff:ff00::/64
Signature Algorithm: sha256WithRSAEncryption
26:10:74:86:a8:84:1b:26:60:0d:03:c2:20:2c:50:ca:d5:1e:
04:f6:1b:55:ef:8a:7e:4f:5a:be:96:be:f2:da:6e:42:69:f0:
b0:23:35:73:01:87:b8:67:ec:a2:51:85:bf:aa:6b:f2:f3:44:
50:dc:a7:ee:30:91:86:68:d9:7e:95:cd:44:5d:01:75:9e:dd:
8e:9f:fa:c0:bb:93:99:63:42:a9:69:5e:8b:e9:6c:ce:ab:3b:
03:8c:71:38:e7:6b:ab:cc:a6:9b:03:68:1c:a9:cc:09:98:d1:
45:a7:23:3b:90:15:9f:c9:25:71:f4:df:9e:0f:39:9e:46:36:
6c:49:01:21:27:55:70:f2:3d:f0:20:a4:5a:5a:56:79:74:40:
45:c5:61:c9:6e:2e:43:15:2b:39:88:26:5c:62:e0:1e:7c:b3:
3c:38:1f:df:53:1a:ae:97:f7:43:ef:d0:98:b5:03:a5:4e:4e:
67:0d:da:c6:0a:95:ad:47:9c:db:bc:01:38:ae:81:99:d0:67:
f1:3b:fb:e4:3a:c2:57:8b:39:fd:cf:ec:38:b2:64:a8:c8:d0:
65:2b:8e:04:c5:5f:4f:2b:db:45:10:6c:5d:c3:87:62:2d:f6:
71:96:a6:2f:d4:71:a3:31:af:2b:ba:66:12:61:74:10:05:ff:
47:a8:ef:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:13:00 2025 by rpki-client