Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zSqUp796r4Xx4pjkiCFlLAaoCXY.roa
File: zSqUp796r4Xx4pjkiCFlLAaoCXY.roa (raw, json)
Hash identifier: yS65spk8C+pNpAIgjEzppS7Meyyfs65tccj3rlQnP1c=
Subject key identifier: CD:2A:94:A7:BF:7A:AF:85:F1:E2:98:E4:88:21:65:2C:06:A8:09:76
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018F72F8AAD19C29D830E23A7EB93654AEFD
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zSqUp796r4Xx4pjkiCFlLAaoCXY.roa
Signing time: Mon 13 May 2024 17:20:50 +0000
ROA not before: Mon 13 May 2024 17:20:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214955
IP address blocks: 2a05:4140:64::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:72:f8:aa:d1:9c:29:d8:30:e2:3a:7e:b9:36:54:ae:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: May 13 17:20:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd2a94a7bf7aaf85f1e298e48821652c06a80976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:5a:09:95:bb:49:24:3f:be:79:cd:1a:78:
94:88:c9:63:74:0b:67:de:85:a8:be:fe:76:41:37:
82:49:87:08:1c:88:8d:9f:a4:2f:7b:00:89:30:db:
f7:46:fe:99:d3:0b:67:ba:e9:5b:64:1a:a0:84:93:
3f:ba:06:54:a7:ba:26:12:2d:fb:00:2f:f6:9a:60:
15:c4:dc:48:5c:25:d6:7a:81:7a:a2:e0:6d:e5:f5:
8f:32:9a:93:0e:d4:f1:c6:4b:6f:7c:82:17:1d:a0:
90:37:11:0c:b2:f2:2c:2d:f6:b0:b4:2d:ee:c4:d6:
52:d8:f6:d9:e9:69:af:2e:fb:f6:a5:40:80:82:35:
fe:35:02:ca:53:55:73:77:6a:c1:12:8e:88:57:a9:
b2:a3:8f:2d:f7:48:8a:28:9d:a7:c5:94:3d:77:0f:
95:a1:8d:70:aa:b2:9b:67:6a:cc:cb:63:1d:b1:6b:
29:62:09:62:06:b1:6d:28:d5:0e:2a:34:e3:1b:06:
57:ab:cb:39:4f:48:0f:2c:bc:0b:44:a1:3e:34:55:
7c:fb:f4:57:68:2c:66:be:71:2a:3d:85:3c:b8:21:
ab:ba:29:5f:45:c4:cb:c9:ed:b1:68:71:49:9b:f6:
79:bb:45:5c:6a:04:6d:ba:f2:be:47:80:3e:89:ff:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2A:94:A7:BF:7A:AF:85:F1:E2:98:E4:88:21:65:2C:06:A8:09:76
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zSqUp796r4Xx4pjkiCFlLAaoCXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140:64::/48
Signature Algorithm: sha256WithRSAEncryption
52:d1:59:5a:6c:88:b4:a6:c3:e1:9a:2b:97:d5:e7:cf:67:e1:
90:98:c7:14:25:1f:58:20:d7:40:a6:3f:f5:24:e2:81:bb:67:
6b:02:8e:93:9c:e2:e1:92:d2:47:51:58:77:d3:b0:e2:7a:70:
88:f0:25:5d:02:d1:87:fe:f2:c8:be:23:9b:f6:e6:d3:b0:62:
9a:64:e7:99:d6:e2:5c:b8:74:96:15:ca:e4:dc:16:63:99:41:
1e:dd:96:ce:2d:de:e0:cf:81:00:c6:75:fd:13:e8:61:45:f1:
cc:17:e5:8a:10:3f:24:55:aa:58:77:64:d9:ea:ac:56:da:42:
f8:63:67:4d:3c:cc:2a:6f:3a:67:89:eb:93:30:86:c3:b2:8c:
de:80:e2:42:f6:2f:a9:b7:cd:16:30:4e:c9:f6:7a:6b:5b:08:
db:20:36:9f:7d:a0:08:fd:a9:3b:0e:91:be:6b:25:91:b6:91:
ba:e6:5a:5a:01:16:b2:96:c3:55:74:7d:65:63:00:c2:ee:99:
c5:f5:56:6e:0b:8b:ac:55:2a:9c:aa:84:ee:f9:2b:2c:5a:bf:
10:bc:7e:04:f2:a7:e6:64:23:98:9a:67:f8:0a:11:78:d2:ec:
4c:26:94:3a:f6:ec:f3:e3:c9:09:f4:8b:79:35:f6:31:53:46:
d9:9c:0b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:05 2025 by rpki-client