Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/ZWXJr5w3JH9wYEGmLPmeDlxxIJM.roa
File: ZWXJr5w3JH9wYEGmLPmeDlxxIJM.roa (raw, json)
Hash identifier: frx8V15MA5b8qXpwnMJfzgX9XCWtsF+s34ptbiuVFcU=
Subject key identifier: 65:65:C9:AF:9C:37:24:7F:70:60:41:A6:2C:F9:9E:0E:5C:71:20:93
Certificate issuer: /CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Certificate serial: 018CC4248434DC8108247DFA5ED291ECE7DC
Authority key identifier: F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/ZWXJr5w3JH9wYEGmLPmeDlxxIJM.roa
Signing time: Mon 01 Jan 2024 08:29:36 +0000
ROA not before: Mon 01 Jan 2024 08:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31027
IP address blocks: 2a03:6947:600::/40 maxlen: 40
Validation: Failed, certificate revoked on Thu 02 Jan 2025 03:49:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:84:34:dc:81:08:24:7d:fa:5e:d2:91:ec:e7:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3b90781dbbebdb8ec42baf66488059ea5866aac
Validity
Not Before: Jan 1 08:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6565c9af9c37247f706041a62cf99e0e5c712093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:eb:bd:9d:53:02:0f:87:4b:18:dd:71:dd:5b:
be:0d:d0:35:e6:53:31:8e:a9:d9:7f:30:5a:b0:85:
b5:79:b5:39:93:d7:71:20:7e:7d:97:0e:80:7a:06:
5a:bc:75:d5:ba:f0:a0:07:13:59:88:05:5d:53:8d:
2d:ec:5c:7c:49:9f:5c:34:de:5a:54:4c:85:e8:74:
d1:53:5b:a9:f5:1c:01:f6:aa:33:b9:97:15:9a:52:
5b:11:f7:65:fe:f6:05:cc:a8:d5:2c:4c:ab:cf:aa:
49:91:fb:35:4b:ad:dd:f5:da:93:1d:36:a5:c5:c5:
49:ce:07:8e:c0:f3:0f:f6:85:20:0b:a5:c5:f1:75:
60:9d:ed:4d:ec:42:89:af:12:74:33:2e:d5:d5:26:
ae:83:73:a1:48:67:fc:42:54:42:f7:7d:5a:25:b2:
61:6e:b7:5a:9f:6a:e9:70:84:af:d0:e2:55:10:7a:
ee:3b:39:a4:ae:9b:f8:45:8b:f6:81:4c:8e:6e:c7:
51:8f:2b:7f:32:88:15:71:e6:f1:12:c1:a1:a6:6c:
f1:90:b6:31:c8:25:a8:69:c3:c7:dc:83:2d:73:c3:
0f:bb:cf:af:b3:6d:13:e5:71:ae:1f:a9:8a:6d:68:
56:94:b7:35:ba:4a:18:e6:2e:31:e3:15:0e:8f:32:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:65:C9:AF:9C:37:24:7F:70:60:41:A6:2C:F9:9E:0E:5C:71:20:93
X509v3 Authority Key Identifier:
keyid:F3:B9:07:81:DB:BE:BD:B8:EC:42:BA:F6:64:88:05:9E:A5:86:6A:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87kHgdu-vbjsQrr2ZIgFnqWGaqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/ZWXJr5w3JH9wYEGmLPmeDlxxIJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8c5808-3165-41dc-90a0-3ef5eb7c8598/1/87kHgdu-vbjsQrr2ZIgFnqWGaqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:6947:600::/40
Signature Algorithm: sha256WithRSAEncryption
1f:e2:4f:77:80:d5:a4:c9:07:8a:fc:13:50:d9:9c:55:3f:21:
f0:ba:58:da:10:7a:e6:ec:cf:0b:4a:08:5c:3b:f0:7f:64:8d:
39:2e:1c:db:28:3d:38:cb:eb:13:a5:67:7c:ac:18:07:95:ba:
6f:dc:ec:03:ae:44:3f:a9:24:ce:99:72:d5:38:a1:53:88:ea:
93:d9:1d:d1:4a:df:84:76:77:f0:55:96:44:87:fd:00:0e:1e:
9b:7b:00:e2:b1:02:94:52:1b:0b:33:d9:df:ff:a1:a2:31:03:
c7:88:48:3e:6e:fa:9e:1c:4b:c9:f3:0a:e6:cc:87:6a:70:02:
05:7d:34:d5:44:9b:2e:e4:ef:21:72:58:d1:66:bf:0a:29:ff:
5f:1f:e1:c0:39:19:b3:d2:d0:8f:96:52:50:5f:a2:a9:a7:60:
c1:6c:5d:34:fe:98:af:c3:05:a5:c8:db:cc:de:41:a2:4a:ce:
e4:92:be:20:2d:54:f7:eb:ca:ed:67:71:16:69:93:6d:50:4c:
d0:36:ac:c8:f4:5d:0b:be:e8:82:2b:2e:03:70:17:a6:9d:88:
bf:5e:c9:e0:73:68:d8:22:c4:c2:f0:f0:4d:ee:2f:de:f5:17:
5b:c4:b5:f5:2f:a0:da:0c:05:30:47:fd:16:c6:56:7b:81:78:
49:7e:7b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:41 2025 by rpki-client