Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zwDeGRRR0_fGQL7Memf-XkSxRR4.roa
File: zwDeGRRR0_fGQL7Memf-XkSxRR4.roa (raw, json)
Hash identifier: EFLHRDXe/TmCh/7+LePwTFpE3GDbrJECJNlBHw/yDT8=
Subject key identifier: CF:00:DE:19:14:51:D3:F7:C6:40:BE:CC:7A:67:FE:5E:44:B1:45:1E
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 0191A7B54ED20B09174D946DC3FB865C1217
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zwDeGRRR0_fGQL7Memf-XkSxRR4.roa
Signing time: Sat 31 Aug 2024 09:12:42 +0000
ROA not before: Sat 31 Aug 2024 09:12:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
Validation: Failed, certificate revoked on Sat 31 Aug 2024 10:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a7:b5:4e:d2:0b:09:17:4d:94:6d:c3:fb:86:5c:12:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Aug 31 09:12:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf00de191451d3f7c640becc7a67fe5e44b1451e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:dd:95:b3:d4:46:72:a9:01:68:05:2c:fa:
9f:48:39:6c:c3:c0:4b:d9:ca:85:b6:5b:ad:c5:3e:
36:c2:22:b9:e7:01:1a:33:3e:03:18:2b:f0:5a:bd:
d3:c6:2d:0a:d6:28:01:16:f1:1b:c7:06:17:67:d6:
e9:f1:89:2b:b5:a7:d5:7d:91:e2:e6:1c:2a:56:f1:
71:8c:fc:9b:66:db:4a:4f:2d:0c:45:3b:0f:aa:72:
34:00:fc:27:dd:60:34:43:10:9b:67:fd:93:e1:4a:
7b:0c:d8:7c:56:76:81:60:6d:8c:bd:69:99:c2:e2:
1a:21:a8:d5:94:26:d6:16:37:f9:ee:2e:66:52:3d:
06:03:86:e2:f5:52:96:4a:11:ec:9c:f8:04:49:d0:
d1:a2:ad:54:3f:32:3d:80:97:62:bf:7c:cd:50:f3:
66:aa:8a:59:34:60:04:83:16:c4:0d:db:8e:3b:35:
13:14:d4:2f:03:66:14:d2:18:32:61:ca:56:f0:ea:
a6:20:94:b3:fe:ed:83:1e:2e:0a:3f:03:e9:23:d2:
2a:f1:35:32:96:3c:aa:b4:cc:2b:f7:b8:6e:b8:81:
28:e7:1f:1a:21:9e:18:08:27:54:4f:5f:26:c5:b5:
82:3a:bc:20:10:44:f1:91:03:71:09:41:58:e1:7c:
6e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:00:DE:19:14:51:D3:F7:C6:40:BE:CC:7A:67:FE:5E:44:B1:45:1E
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zwDeGRRR0_fGQL7Memf-XkSxRR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
Signature Algorithm: sha256WithRSAEncryption
29:30:e2:0f:b8:83:9c:da:af:78:cd:c4:ee:6d:c8:69:a7:35:
d1:d2:25:f5:5b:a3:0d:d0:b9:4c:ce:3f:ec:17:8a:0e:39:ea:
d3:9a:35:99:f7:a9:6d:c5:5d:45:c6:af:a0:e6:ca:6a:2c:ca:
f5:35:b3:b5:26:c8:bc:46:78:35:5a:c1:c9:f1:05:0c:95:17:
9e:a0:e4:17:29:78:25:5c:3b:c3:9d:c2:fa:58:59:23:76:58:
b1:ce:28:bb:52:df:22:f5:3f:a3:ff:3b:7a:5b:cf:58:9e:53:
82:3e:a8:3e:0d:2a:fe:9a:c8:c1:94:08:05:d3:22:1e:bb:76:
dc:f7:98:60:34:fc:bd:ad:ac:46:e3:f4:fd:e3:03:1d:be:04:
18:61:3a:db:b6:cb:db:9f:8f:c0:28:95:52:3b:6e:5d:6b:ac:
31:da:86:44:b3:46:1c:05:10:9b:c9:dd:de:c1:56:2d:4f:c1:
2a:ef:da:ac:7a:45:eb:a3:a6:bb:02:b8:9e:ee:29:7a:f9:9a:
8f:66:70:6e:8e:f9:99:c2:d0:42:75:c7:89:7a:76:06:40:2c:
6e:be:34:c6:de:04:f2:15:16:3b:07:5a:2b:87:5c:d1:2c:44:
ca:04:7b:de:25:01:66:8b:8d:16:a2:68:e1:1e:49:3d:c2:bb:
dc:4e:c5:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:44:54 2025 by rpki-client