Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zckQr7aoE-XmIFHL2zTKVSF7K_o.roa
File: zckQr7aoE-XmIFHL2zTKVSF7K_o.roa (raw, json)
Hash identifier: 4c+UAPUb+iEacubZrJEa+zi2fgmfaAQ1ccdcQtC/PIs=
Subject key identifier: CD:C9:10:AF:B6:A8:13:E5:E6:20:51:CB:DB:34:CA:55:21:7B:2B:FA
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0191EFA7FA6556B7F5AB555B33BFBC8286C0
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zckQr7aoE-XmIFHL2zTKVSF7K_o.roa
Signing time: Sat 14 Sep 2024 08:30:48 +0000
ROA not before: Sat 14 Sep 2024 08:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214967
IP address blocks: 2a05:9a40::/29 maxlen: 29
2a13:b9c0::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 22 Oct 2024 05:21:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:a7:fa:65:56:b7:f5:ab:55:5b:33:bf:bc:82:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Sep 14 08:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cdc910afb6a813e5e62051cbdb34ca55217b2bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:eb:f1:10:f5:76:db:4c:88:2a:2e:ad:ce:
28:16:95:6e:e1:f2:81:41:5e:89:bf:7a:9a:54:4e:
13:e7:b4:17:96:db:d4:d4:03:c5:e2:31:52:48:b0:
1c:03:d9:30:e2:ad:77:10:58:e6:3f:28:45:42:20:
16:a1:9d:e3:bf:e1:d2:dd:8b:91:d3:65:54:99:bd:
fa:99:92:56:5a:a4:9b:72:22:0e:88:b8:fb:64:61:
8c:08:23:c5:6e:6d:d4:03:56:e5:91:29:ce:e6:b7:
a1:3a:23:ff:47:63:94:e4:65:b4:3c:2c:a5:51:e3:
e4:d4:53:e5:b7:49:cf:f9:a5:25:4e:e4:d5:f7:6e:
3b:31:e6:de:c7:09:18:0b:8f:ed:ee:00:81:28:bc:
4b:83:fe:02:b0:2b:a1:1f:4e:14:48:5c:ed:d8:43:
e0:00:ec:54:cf:1a:23:b2:2c:c1:62:8d:27:30:c6:
d1:4d:97:4f:dc:23:92:ad:d9:1b:a9:bb:0f:38:04:
76:fe:16:39:85:94:07:bb:9f:cf:3a:1b:57:1c:2b:
a3:ad:1f:19:5d:8f:0d:c6:d0:a6:65:a6:61:68:32:
d1:30:10:ad:15:79:bb:53:f4:be:26:53:da:88:74:
5d:f1:06:d6:d3:fc:c6:5a:a9:3f:53:a9:41:a9:1f:
e8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:10:AF:B6:A8:13:E5:E6:20:51:CB:DB:34:CA:55:21:7B:2B:FA
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zckQr7aoE-XmIFHL2zTKVSF7K_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:9a40::/29
2a13:b9c0::/29
Signature Algorithm: sha256WithRSAEncryption
b3:c9:19:a8:22:ec:29:16:87:6c:16:bd:d7:c3:ab:02:5a:50:
e4:35:db:37:97:b0:1a:ae:1f:7b:b8:47:7f:69:c0:85:bc:52:
cc:a4:b5:eb:19:78:d1:04:cb:3a:c1:45:a0:2c:20:68:b8:39:
25:1d:f2:e3:02:22:69:a5:96:61:69:04:59:a8:05:df:35:2c:
74:f0:6b:67:97:cf:41:d1:34:55:bc:8b:a4:90:c4:9d:ec:27:
e0:74:80:30:b5:fa:c9:bb:a6:67:66:15:f0:fb:fa:31:ef:c9:
87:7f:35:75:42:70:f1:5e:47:51:15:2a:cd:18:c4:06:46:42:
08:ae:06:27:75:d5:f5:a0:0b:de:59:bf:c9:bd:70:c6:a6:01:
29:64:d3:68:b0:1d:1f:84:64:3c:e9:88:54:3d:a2:f6:31:25:
d9:2b:ab:a0:74:34:52:6c:bf:59:51:b7:0e:96:95:d9:c2:c0:
7f:17:c1:5b:68:e9:0d:41:ef:7a:8a:00:ff:36:fc:52:32:c9:
a1:8c:b7:ac:df:1a:74:79:2d:dc:ae:07:bf:08:38:88:11:a2:
f1:78:f7:7e:a5:f4:ea:b4:ea:1b:f5:04:01:58:e7:81:c8:88:
a2:2e:80:1c:df:6d:37:43:f2:8d:29:92:65:f3:cf:be:74:e0:
fd:b1:8d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:09:50 2025 by rpki-client