Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/zKv3BoeDYys-5e-RXYaLZEUEI04.roa
File: zKv3BoeDYys-5e-RXYaLZEUEI04.roa (raw, json)
Hash identifier: tiANNQR+z9GQYYvus//p6eytLnx2F/pmY0CZojIKjyI=
Subject key identifier: CC:AB:F7:06:87:83:63:2B:3E:E5:EF:91:5D:86:8B:64:45:04:23:4E
Certificate issuer: /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial: 019504CB892D476AC23CD625159A67760EF4
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/zKv3BoeDYys-5e-RXYaLZEUEI04.roa
Signing time: Fri 14 Feb 2025 14:10:02 +0000
ROA not before: Fri 14 Feb 2025 14:10:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48283
IP address blocks: 194.0.28.0/24 maxlen: 24
194.0.30.0/24 maxlen: 24
194.0.31.0/24 maxlen: 24
2001:678:2c::/48 maxlen: 48
2001:678:30::/48 maxlen: 48
2001:678:34::/48 maxlen: 48
2001:678:38::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 17 Feb 2025 08:44:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:04:cb:89:2d:47:6a:c2:3c:d6:25:15:9a:67:76:0e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Validity
Not Before: Feb 14 14:10:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ccabf7068783632b3ee5ef915d868b644504234e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:af:15:67:82:5c:7b:8f:3b:2a:aa:7f:4b:
00:65:5a:4a:2a:7f:b5:e1:0a:72:29:e6:1c:ef:0d:
fb:1e:ef:94:b7:f8:d7:56:95:94:aa:07:84:86:74:
57:fb:76:55:7f:7d:91:c5:6b:88:5d:74:df:02:db:
09:cb:d1:75:64:6d:76:b8:5f:25:9d:e0:95:72:34:
22:4a:f2:9c:09:5b:18:2c:0f:fb:62:3a:54:cb:89:
96:bd:22:ea:51:4e:2a:95:0d:f4:21:7f:87:52:cd:
4f:cb:be:3f:4d:9e:04:f3:61:65:bc:2a:5e:49:af:
e0:bb:e4:85:a0:dd:2a:ff:1c:a0:a7:d1:e8:7f:27:
20:e2:2c:0d:22:6f:ed:6b:c3:76:94:43:86:57:ef:
51:3a:02:26:d9:b3:72:89:c5:dc:86:7d:92:38:b2:
8f:0a:d7:19:e9:00:f3:e2:78:e7:49:ef:01:31:78:
8c:40:42:8c:8f:c5:21:f7:86:4d:26:62:ff:1c:5b:
57:aa:d7:c8:c8:dc:0c:44:5a:d8:c6:4e:cf:40:b3:
0f:1b:f5:15:9f:f3:59:82:f8:e3:ad:29:6e:ad:4e:
b1:2a:4f:8f:41:da:20:21:4b:e1:7a:48:28:6d:fc:
32:05:f7:8f:9d:e7:76:7e:60:21:b9:b2:ae:09:ae:
6b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:F7:06:87:83:63:2B:3E:E5:EF:91:5D:86:8B:64:45:04:23:4E
X509v3 Authority Key Identifier:
keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/zKv3BoeDYys-5e-RXYaLZEUEI04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.28.0/24
194.0.30.0/23
IPv6:
2001:678:2c::/48
2001:678:30::/48
2001:678:34::/48
2001:678:38::/48
Signature Algorithm: sha256WithRSAEncryption
70:a0:5d:82:8a:dd:97:fb:ce:6e:92:c2:82:51:12:02:26:d6:
a1:9a:5f:35:95:7b:27:3c:ec:ce:52:3b:b7:16:2c:8d:d2:0d:
ae:93:96:d9:db:07:60:2c:b4:ba:1e:5a:37:53:c5:93:04:7b:
52:71:c5:c4:f0:4a:be:e0:34:33:a1:22:15:48:1a:6d:29:b6:
d9:67:d4:3c:c9:44:05:2e:5c:a6:b8:87:ae:cd:f7:84:1c:e2:
68:e8:a4:8e:75:f3:f8:2f:50:61:36:7a:ba:61:1d:03:19:9a:
73:64:4f:0c:13:a8:13:90:c6:de:1f:be:c9:7b:03:59:0d:fc:
e1:39:c3:e4:f0:9a:bd:f4:b8:b4:08:70:1e:b7:5f:28:f7:4c:
97:ed:21:90:f4:da:0e:2d:4d:30:77:6d:9c:46:5e:55:62:58:
3e:92:dd:c3:44:64:9f:d4:ed:c0:92:90:b8:1e:aa:e9:69:fe:
8f:fc:c3:91:72:60:c5:47:d4:4d:6c:38:a1:eb:d8:cc:0d:ee:
eb:1b:76:81:5c:a8:1d:90:50:3a:68:58:e0:8d:1f:f6:50:9c:
b6:19:e2:97:19:85:29:b4:ce:7b:c5:5e:3d:9a:fa:aa:06:12:
e5:06:0b:c3:a8:1a:c1:41:50:e0:42:6c:43:f5:78:16:ee:92:
f7:2a:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 16:59:44 2025 by rpki-client