Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/K-NfBzQnh663aoFhKhYjUJ_zzmk.roa
File: K-NfBzQnh663aoFhKhYjUJ_zzmk.roa (raw, json)
Hash identifier: wlUNZkWRnpYOViWc4TrBxZwqcetDr3UV28T0Cqxkz9I=
Subject key identifier: 2B:E3:5F:07:34:27:87:AE:B7:6A:81:61:2A:16:23:50:9F:F3:CE:69
Certificate issuer: /CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Certificate serial: 01956BE93408D5448074D1B1EA8DFBAFB47C
Authority key identifier: CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/K-NfBzQnh663aoFhKhYjUJ_zzmk.roa
Signing time: Thu 06 Mar 2025 14:43:19 +0000
ROA not before: Thu 06 Mar 2025 14:43:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 2a06:a640::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 12 Mar 2025 15:44:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6b:e9:34:08:d5:44:80:74:d1:b1:ea:8d:fb:af:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccc478dd9ccd6162f82488ac6fc50c21d369f2a0
Validity
Not Before: Mar 6 14:43:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2be35f07342787aeb76a81612a1623509ff3ce69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:2e:44:24:84:41:45:6a:db:e8:f1:3c:aa:
86:56:64:ac:b9:5e:b1:14:d3:bf:4b:6d:94:7e:99:
cf:d2:a4:a4:d6:24:c0:cf:b5:f6:5a:ab:fb:d3:60:
37:6c:b1:5d:77:f0:35:e0:d6:be:6f:a9:97:36:b6:
2d:75:95:e3:ee:39:7b:f0:1e:ac:6e:48:cc:2d:fb:
ab:49:97:a2:d7:34:49:1b:9d:31:d3:2d:fa:aa:0d:
a9:06:d8:b8:72:2d:00:1f:5b:1b:41:5e:53:61:53:
37:f7:6d:22:f8:1a:e2:33:1a:3d:b9:55:aa:05:d3:
d2:cb:2d:80:34:32:dc:bd:0b:cc:2d:63:0f:1e:24:
91:cd:73:b9:db:4c:73:55:db:31:64:90:8a:30:8e:
ec:43:8b:38:dd:57:65:ae:af:d7:d1:80:cf:54:ba:
75:96:b0:07:5e:82:86:7a:86:f8:b3:12:a7:c4:91:
02:21:53:d2:6b:02:f6:1e:1b:33:c7:f2:7b:0a:16:
02:12:bc:69:b1:e2:8e:81:fb:1d:fb:31:4c:b0:26:
d7:ef:c1:db:46:a2:fe:56:d2:7c:b1:35:90:c7:c7:
46:0a:29:25:67:c8:9b:ec:04:51:40:2d:d6:1e:92:
a3:5e:35:5c:a8:f5:75:ad:36:31:29:b5:01:d5:18:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:5F:07:34:27:87:AE:B7:6A:81:61:2A:16:23:50:9F:F3:CE:69
X509v3 Authority Key Identifier:
keyid:CC:C4:78:DD:9C:CD:61:62:F8:24:88:AC:6F:C5:0C:21:D3:69:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMR43ZzNYWL4JIisb8UMIdNp8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/K-NfBzQnh663aoFhKhYjUJ_zzmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ee3e3f-3a45-43eb-a5de-4285998392d3/1/zMR43ZzNYWL4JIisb8UMIdNp8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:a640::/29
Signature Algorithm: sha256WithRSAEncryption
af:65:60:6e:32:59:3c:84:97:b4:1c:5e:b3:8b:c8:34:fb:76:
3d:f9:7f:ac:35:db:e2:79:49:38:0e:c6:2b:76:b2:39:8f:6b:
fe:cc:35:d8:a4:56:6e:cb:4d:32:c4:00:29:7f:75:a6:b6:7d:
19:4a:6b:e2:b3:03:01:8b:a9:45:5f:1c:64:07:2a:7d:90:af:
a9:0d:cf:7d:96:8a:8d:20:80:cf:49:44:48:e6:e7:70:3b:ce:
e7:06:08:7b:f9:61:2c:5c:e4:34:fd:51:b2:12:f9:aa:29:22:
01:49:67:8a:6e:4d:57:4a:92:69:37:d4:8a:6c:25:ac:9c:00:
1e:8c:3b:04:4e:19:96:64:60:bb:bb:12:e2:02:1c:0f:18:b4:
a5:e1:d5:2c:7d:02:ab:bd:81:f3:fb:b6:73:f4:8c:a3:26:b5:
15:1a:9d:c3:ed:c1:84:5f:92:70:24:f2:4f:47:02:ce:46:4f:
55:73:ca:0e:f2:c1:49:14:53:a3:61:97:39:5c:94:93:42:1f:
d3:13:49:53:dc:47:6e:a8:20:01:52:50:55:9f:84:52:59:66:
16:c6:33:92:8f:77:10:a7:71:6a:ef:28:b7:8b:a6:1a:e7:fa:
aa:c0:e6:0b:f8:a4:e7:90:1f:57:92:29:73:5a:d0:18:5f:e9:
b8:a1:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:10:39 2025 by rpki-client