Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/ZUECsX_4m-UW2JQiFgVbyrnVfJI.roa
File: ZUECsX_4m-UW2JQiFgVbyrnVfJI.roa (raw, json)
Hash identifier: 0qD5lgBpLgncEBSzCNaFnXozXEijLwYEGQ4HisMgTTY=
Subject key identifier: 65:41:02:B1:7F:F8:9B:E5:16:D8:94:22:16:05:5B:CA:B9:D5:7C:92
Certificate issuer: /CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Certificate serial: 01910997702CC217CB781A9BC02F99AF15C5
Authority key identifier: 50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/ZUECsX_4m-UW2JQiFgVbyrnVfJI.roa
Signing time: Wed 31 Jul 2024 16:20:04 +0000
ROA not before: Wed 31 Jul 2024 16:20:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209395
IP address blocks: 2001:678:14c::/48 maxlen: 48
2001:678:a08::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 21 Aug 2024 20:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:09:97:70:2c:c2:17:cb:78:1a:9b:c0:2f:99:af:15:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504073b8619efc07052b9edfb5ccb61b1f5ce781
Validity
Not Before: Jul 31 16:20:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=654102b17ff89be516d8942216055bcab9d57c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:10:f0:92:f5:1f:90:64:3a:b6:73:82:48:66:
bf:c1:40:7b:0d:19:fa:fb:32:97:87:d0:00:74:4c:
27:10:f8:0a:72:ec:81:07:38:51:cd:aa:f4:ab:67:
48:ee:0d:ed:a7:6d:38:af:40:d8:e9:54:75:9f:88:
f7:25:32:51:83:75:40:f0:55:cf:93:1d:fd:f0:b4:
ed:23:70:30:27:11:a9:73:b5:59:18:90:65:6f:d4:
23:e0:09:2d:8a:31:d5:dd:a3:4f:98:6e:43:31:6e:
f8:0a:56:82:6c:c8:aa:87:75:86:7b:8c:2c:a5:69:
ff:85:71:2a:61:d4:00:7f:3e:fb:d4:0a:dd:5c:82:
4c:ba:50:23:bf:f1:bc:9c:e2:c1:1f:00:d8:82:fc:
cb:8f:ee:76:36:48:f0:b4:4d:7c:85:4d:e3:63:72:
af:61:05:42:8a:62:52:ef:85:d9:3f:06:9a:df:3b:
06:cc:e3:17:7e:3a:6c:0a:4b:32:b7:77:8d:1b:14:
29:7e:da:75:36:7c:68:21:51:41:5c:59:b6:16:e2:
03:97:20:8d:7f:db:99:25:c7:a8:cb:54:79:99:5e:
7e:6d:91:91:ec:05:27:49:de:09:ae:fa:55:88:36:
5e:db:67:3d:d3:a7:7f:54:8b:9a:df:64:34:cd:ff:
73:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:41:02:B1:7F:F8:9B:E5:16:D8:94:22:16:05:5B:CA:B9:D5:7C:92
X509v3 Authority Key Identifier:
keyid:50:40:73:B8:61:9E:FC:07:05:2B:9E:DF:B5:CC:B6:1B:1F:5C:E7:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEBzuGGe_AcFK57ftcy2Gx9c54E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/ZUECsX_4m-UW2JQiFgVbyrnVfJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/5721b9-f931-4fc6-9c34-d717cf3cc155/1/UEBzuGGe_AcFK57ftcy2Gx9c54E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:14c::/48
2001:678:a08::/48
Signature Algorithm: sha256WithRSAEncryption
a6:93:d3:1a:cd:06:bd:49:34:34:29:ec:48:bd:21:c7:5d:68:
6f:83:65:05:be:31:03:b0:6b:59:31:07:07:c1:b4:c6:a0:0d:
f1:67:22:c0:19:16:77:c4:67:c9:8f:66:b1:79:10:2b:84:fe:
ef:85:47:2f:1f:37:63:5a:d1:a0:ed:64:b0:ea:e3:dd:95:b9:
86:e0:80:84:30:c9:46:97:88:7f:da:71:41:9c:b6:61:20:c5:
02:f6:a8:14:8f:39:f9:00:39:09:19:77:96:ff:b0:37:cb:44:
9a:4f:46:34:45:61:ce:75:3c:2d:20:66:dc:e1:e5:e5:1a:f3:
c8:a8:05:d7:e0:02:9d:2d:51:5c:b2:42:73:ac:10:96:9e:3c:
3d:36:ae:9e:25:24:30:ba:21:94:03:15:0c:75:5e:ea:a4:c6:
37:92:b6:4a:27:04:48:cd:9f:b7:59:6c:7f:e4:eb:b8:b5:02:
55:ad:da:76:6b:86:7d:41:73:17:57:a4:75:fb:fe:d8:6b:a2:
85:ea:bf:f1:6c:f5:05:93:50:90:da:55:f1:87:c6:b0:37:38:
bd:02:d2:93:04:36:01:8e:78:30:87:eb:63:b5:6d:4d:9f:77:
2d:83:7f:00:b3:9e:32:a8:03:71:f8:1b:50:ac:58:bb:3f:27:
87:6e:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:11 2025 by rpki-client