Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/_Jl_Zd_J97TF5UW9rOIYAjRztUw.roa
File: _Jl_Zd_J97TF5UW9rOIYAjRztUw.roa (raw, json)
Hash identifier: N5IDQzO3k6ppRhdqfUdlhu7McLvY9f9Ta/gQYNTNuVw=
Subject key identifier: FC:99:7F:65:DF:C9:F7:B4:C5:E5:45:BD:AC:E2:18:02:34:73:B5:4C
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0193BAB93E5C01698F1C160EEDD3F8112DE1
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/_Jl_Zd_J97TF5UW9rOIYAjRztUw.roa
Signing time: Thu 12 Dec 2024 11:55:22 +0000
ROA not before: Thu 12 Dec 2024 11:55:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206873
IP address blocks: 2a06:d645::/32 maxlen: 32
2a0a:b386::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 18 Dec 2024 17:15:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:b9:3e:5c:01:69:8f:1c:16:0e:ed:d3:f8:11:2d:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Dec 12 11:55:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc997f65dfc9f7b4c5e545bdace218023473b54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ef:4e:0f:48:46:d4:35:a7:aa:d6:57:98:8d:
ff:3b:dc:85:78:63:5f:eb:b9:bf:21:ef:3b:2c:df:
1c:e3:41:c2:67:9e:f1:86:3e:51:c6:74:f2:a9:54:
9a:14:19:4a:d3:81:19:15:d0:20:f0:4b:05:f5:28:
97:c1:ec:4f:f5:24:9a:a8:d9:b5:e2:5e:2c:df:4b:
2e:0b:d0:7c:8c:1e:2f:bd:dc:4e:88:f3:3f:c2:b4:
a5:7d:4f:a0:b5:09:1b:72:fc:dd:73:2c:d3:5a:d1:
3f:ee:d5:b3:a1:16:c6:ba:29:8a:b0:86:66:0a:6e:
f8:0f:a1:00:7f:cc:86:8c:36:3d:a5:cd:c8:25:d2:
9d:3b:a2:76:8e:df:ed:78:f3:ae:2a:33:03:36:1d:
33:19:2a:65:01:4b:aa:8b:0c:b9:3b:be:28:94:d7:
2d:2b:c8:a7:a7:64:11:80:67:f3:bf:a0:d3:ae:ce:
0c:ec:34:d3:4b:77:f0:da:22:78:b9:03:6f:af:90:
8f:49:91:58:99:5c:9f:ef:42:6f:c0:36:4b:70:1f:
d7:7f:1b:e8:ae:63:bd:36:fd:ad:f4:02:d1:ae:7b:
32:ec:38:d6:e9:fa:62:e8:a3:ff:ce:5a:5a:fe:dc:
0e:ac:89:95:9c:af:7a:17:8a:13:26:cc:59:4f:ae:
e9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:99:7F:65:DF:C9:F7:B4:C5:E5:45:BD:AC:E2:18:02:34:73:B5:4C
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/_Jl_Zd_J97TF5UW9rOIYAjRztUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:d645::/32
2a0a:b386::/32
Signature Algorithm: sha256WithRSAEncryption
98:5b:63:6a:de:98:6d:46:b4:f3:7f:81:b6:14:97:73:32:99:
d7:f7:1e:0e:c9:6a:d0:1e:8e:32:58:e0:20:f4:c8:16:e6:ef:
72:a8:a1:0b:ad:83:1b:cc:31:cf:50:4a:bd:48:67:26:4f:51:
04:d6:37:64:16:60:3c:3b:93:85:bc:33:47:7f:40:cf:c3:d6:
e9:48:2a:10:77:b4:e1:dd:9b:2d:56:f9:8a:28:92:3c:0d:22:
39:2b:a6:81:a0:7f:65:d6:d6:48:08:f0:4b:ae:4a:2e:5a:82:
91:c3:ab:61:c1:b4:2a:b8:1f:40:21:9a:e5:58:26:bf:2e:16:
71:03:1e:aa:3f:25:3c:57:e5:78:23:b6:33:59:07:89:d9:c8:
4a:38:f3:94:9b:99:82:50:ff:2d:27:a2:a2:6a:a6:5a:02:3b:
52:d7:dc:d7:43:8d:bb:00:65:a7:e2:7f:a5:2d:a0:f5:36:50:
b1:9f:77:c0:1b:15:04:a1:3b:5a:d5:ea:4a:5e:ba:25:3f:b4:
0c:d1:ed:bb:1e:95:12:b7:2a:a9:74:04:fa:ed:b6:41:09:ec:
72:3d:2f:a3:1a:80:56:9e:93:c2:ac:ac:4b:92:60:26:a8:69:
08:f1:95:59:6e:c3:3b:8c:af:82:85:b7:a5:5b:b3:b5:c2:ab:
91:5e:3c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:59 2025 by rpki-client