Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zwFWbXyQhujxWe-NIivIiAzMHeE.roa
File: zwFWbXyQhujxWe-NIivIiAzMHeE.roa (raw, json)
Hash identifier: hShAcZKBC1N74UlKHCzDCUIFTMgtr7F23Q1JTgyUF1k=
Subject key identifier: CF:01:56:6D:7C:90:86:E8:F1:59:EF:8D:22:2B:C8:88:0C:CC:1D:E1
Certificate issuer: /CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Certificate serial: 019103F5795F0A3343F7EE6E4E9128196C46
Authority key identifier: 52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zwFWbXyQhujxWe-NIivIiAzMHeE.roa
Signing time: Tue 30 Jul 2024 14:05:04 +0000
ROA not before: Tue 30 Jul 2024 14:05:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:190:fdf2:f302/128 maxlen: 128
2001:67c:64:ffff:0:191:3f4:fe42/128 maxlen: 128
Validation: Failed, certificate revoked on Tue 30 Jul 2024 14:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:03:f5:79:5f:0a:33:43:f7:ee:6e:4e:91:28:19:6c:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52620415d2490a5ec3f6925b9f79040e8e22ddbf
Validity
Not Before: Jul 30 14:05:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cf01566d7c9086e8f159ef8d222bc8880ccc1de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:15:1c:cf:e9:d3:2f:38:e0:03:4c:29:2d:
1b:25:0d:49:86:52:6a:9b:c8:1f:f4:38:20:89:3e:
59:9d:64:9a:2f:b6:e8:dc:63:b8:cf:a6:5a:1d:04:
e9:e4:1b:94:e5:ee:ab:23:b0:38:8e:f0:c6:b0:9e:
a2:96:7e:e2:d9:82:b9:73:28:b0:40:a2:16:ce:7a:
08:9d:00:ed:a3:d1:e9:16:42:80:57:57:64:83:e8:
4c:f6:e5:b0:b3:af:9a:9d:00:94:c7:b0:14:8c:77:
34:97:a5:e9:e0:ab:f7:23:94:51:6a:93:34:2a:6f:
48:92:93:0f:13:e3:71:3f:68:59:7d:a9:af:9a:46:
a2:d6:7a:04:cc:98:dd:f8:6b:40:ba:ac:65:7c:56:
07:64:bc:70:1e:5e:28:4b:8e:6b:c3:cb:1d:4f:99:
e5:13:bd:d7:ac:c0:e8:6d:de:f1:5e:ca:e9:7e:53:
8b:2f:4c:60:ec:3c:82:55:4c:5c:8a:b8:7e:f6:94:
9f:f8:33:74:48:9f:3f:19:d2:07:b9:a7:0b:5b:fb:
9b:62:1f:56:a6:5d:5b:1b:3e:84:b9:c0:94:2c:9a:
f3:39:10:ed:9f:04:3e:08:11:53:b7:b8:4b:48:14:
b1:c2:3d:61:a9:0d:b7:f8:d8:2c:2a:7e:ce:2e:e4:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:01:56:6D:7C:90:86:E8:F1:59:EF:8D:22:2B:C8:88:0C:CC:1D:E1
X509v3 Authority Key Identifier:
keyid:52:62:04:15:D2:49:0A:5E:C3:F6:92:5B:9F:79:04:0E:8E:22:DD:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmIEFdJJCl7D9pJbn3kEDo4i3b8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/zwFWbXyQhujxWe-NIivIiAzMHeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/09837c-98f3-4c9f-aebf-881488ffdbb0/1/UmIEFdJJCl7D9pJbn3kEDo4i3b8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:190:fdf2:f302/128
2001:67c:64:ffff:0:191:3f4:fe42/128
Signature Algorithm: sha256WithRSAEncryption
24:5b:eb:55:9e:dc:b8:0e:ab:f8:f3:0c:15:da:d4:6e:c9:c5:
6f:56:c3:df:70:28:ff:09:24:0a:dd:af:c3:55:f0:44:70:f7:
35:d0:10:f3:39:1e:8e:96:58:d4:37:5a:d5:81:c5:dc:26:da:
e0:bd:c9:4e:fc:ea:3b:54:17:9c:33:84:08:35:a8:18:f8:20:
2c:1a:dd:ee:09:f7:3f:a3:80:7e:84:21:49:f9:b6:f1:11:92:
81:22:48:21:36:e9:32:4b:e9:bf:08:fe:aa:c4:ca:0b:2b:e2:
c7:0a:d2:ef:b0:a5:e1:ae:d6:f4:99:98:e8:76:6d:e3:c3:cf:
ec:17:fc:ba:c0:9e:43:da:7e:9d:88:1d:c6:16:89:4a:23:36:
40:e6:32:a3:a7:b2:a7:9c:6f:77:9f:17:e0:23:f0:8d:cc:bd:
ea:00:96:3b:40:f9:6c:cd:4d:71:8b:a5:fb:51:2d:55:d2:cd:
33:7f:81:e3:15:a0:4f:11:09:4d:e5:0b:83:7e:40:a8:ed:a8:
1d:7f:bb:71:de:e4:59:1c:71:87:ed:55:38:90:8e:35:c7:55:
45:f7:8c:49:55:e2:93:ac:69:39:e4:c1:6f:ab:3f:1e:74:da:
3e:b6:d7:45:d7:de:dc:d2:03:b5:d7:ec:57:0c:f0:be:a6:62:
6b:21:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:03 2025 by rpki-client