Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/inZGO99BphMkwMPMT2AX8K6fVDM.roa
File: inZGO99BphMkwMPMT2AX8K6fVDM.roa (raw, json)
Hash identifier: kYO6af+psz6HJ0XvLW3rcr57vmWO+pb7rcFjNbRqNss=
Subject key identifier: 8A:76:46:3B:DF:41:A6:13:24:C0:C3:CC:4F:60:17:F0:AE:9F:54:33
Certificate issuer: /CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Certificate serial: 01933EE5D7013A586E8C59698D26D86DA15D
Authority key identifier: AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/inZGO99BphMkwMPMT2AX8K6fVDM.roa
Signing time: Mon 18 Nov 2024 10:51:10 +0000
ROA not before: Mon 18 Nov 2024 10:51:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50022
IP address blocks: 2a05:7400:c000::/34 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 05:47:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3e:e5:d7:01:3a:58:6e:8c:59:69:8d:26:d8:6d:a1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7f747df5f24353154dc4d4bf70d2ddcb53e900
Validity
Not Before: Nov 18 10:51:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a76463bdf41a61324c0c3cc4f6017f0ae9f5433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:31:5a:72:3d:e7:18:08:f9:cf:71:34:9d:6d:
fd:07:a7:4d:10:c2:ab:a2:98:b6:70:c2:c7:7a:30:
a0:75:a6:75:c2:e0:1a:3b:82:38:a1:23:b0:39:30:
5e:21:49:d3:48:a2:2c:60:e3:e3:8c:1a:0c:ab:a3:
5b:f6:15:47:ce:2d:76:3a:94:9f:87:67:fc:90:20:
8b:92:bc:f9:54:9b:7b:42:f8:ac:b0:4a:3f:b5:f9:
20:b7:a7:62:24:9f:02:68:13:bb:6c:71:b7:8a:aa:
df:ce:d6:8e:54:bc:4d:a4:a2:de:ca:36:02:5e:ce:
91:6e:10:f1:08:ba:2c:90:8d:2b:1d:af:47:87:6e:
18:40:5c:e4:38:36:71:8e:98:9d:14:7e:72:06:8b:
87:d7:aa:e5:83:8d:ba:74:a9:ec:a3:83:37:15:eb:
09:dc:96:00:df:45:1a:3c:41:f4:fc:d6:31:4b:7a:
4b:8f:5c:59:e8:4d:e3:26:51:af:bc:ca:88:0f:b6:
bc:17:96:df:f2:11:bf:85:f9:b3:5c:dc:52:8e:4e:
b7:63:a2:89:c2:20:e1:b4:60:3c:09:90:c8:71:1e:
73:59:5b:25:86:3c:f2:d8:74:1f:32:7f:90:62:24:
35:c8:57:06:d5:e4:8b:0c:5b:a1:9d:73:2e:ed:0c:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:76:46:3B:DF:41:A6:13:24:C0:C3:CC:4F:60:17:F0:AE:9F:54:33
X509v3 Authority Key Identifier:
keyid:AE:7F:74:7D:F5:F2:43:53:15:4D:C4:D4:BF:70:D2:DD:CB:53:E9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rn90ffXyQ1MVTcTUv3DS3ctT6QA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/inZGO99BphMkwMPMT2AX8K6fVDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/58af24-c454-44b0-a7ca-c6f1e6ac9ba9/1/rn90ffXyQ1MVTcTUv3DS3ctT6QA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:7400:c000::/34
Signature Algorithm: sha256WithRSAEncryption
4c:8f:5a:52:0d:f6:1d:4b:6e:09:a9:dd:ad:69:81:4f:44:ae:
2f:d6:cd:45:87:a8:75:a5:89:67:e2:b4:ce:9e:aa:78:b4:d1:
02:a7:55:17:5c:af:62:06:32:b1:25:b5:2b:d2:95:3b:3e:6b:
c1:65:aa:b5:66:32:30:b5:5b:20:ca:ef:6b:98:b8:32:69:05:
59:c6:46:f5:88:9e:e7:60:93:60:68:22:2f:be:4d:4d:eb:9d:
51:67:1b:9b:19:6e:37:fd:7c:2e:36:f9:df:fa:c0:c2:36:83:
7b:17:2b:bb:15:b2:93:f2:60:11:d4:e9:74:69:ce:98:4d:5d:
34:02:ab:87:3f:59:bd:24:92:17:3f:34:20:aa:4e:5d:db:34:
33:22:89:a2:62:19:14:01:64:18:b3:46:17:3c:29:10:d5:2b:
58:b3:77:5b:06:95:45:1b:0e:63:50:10:e2:f0:2d:d7:eb:72:
e0:3f:2b:32:14:c1:0f:78:af:fd:5c:af:25:a2:c0:a1:91:a4:
b9:a4:ef:0b:55:f9:e1:37:bb:f4:50:38:8f:a1:59:79:87:af:
e4:b1:d7:ff:0e:96:7c:9e:9d:66:b3:09:5b:4f:96:67:ec:ce:
d5:01:34:f8:bb:3e:ef:5b:15:55:de:24:86:1c:d3:3c:80:45:
8d:26:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:25 2025 by rpki-client