Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JzS3K_E78pXZ3fwx90Pdp0M6Sl8.roa
File: JzS3K_E78pXZ3fwx90Pdp0M6Sl8.roa (raw, json)
Hash identifier: ScI8zxOz/Q7cFGM6P3vJ7uORwxloQRLhBImcGSSxtik=
Subject key identifier: 27:34:B7:2B:F1:3B:F2:95:D9:DD:FC:31:F7:43:DD:A7:43:3A:4A:5F
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019156DEFC268F268806FA29CF674511C695
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JzS3K_E78pXZ3fwx90Pdp0M6Sl8.roa
Signing time: Thu 15 Aug 2024 16:28:59 +0000
ROA not before: Thu 15 Aug 2024 16:28:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a09:17c0:b19a::/48 maxlen: 48
2a0f:1207:fe5a::/48 maxlen: 48
2a0f:2ec0:1::/48 maxlen: 48
2a0f:e1c0:3::/48 maxlen: 48
2a0f:e200:5::/48 maxlen: 48
2a0f:e440::/29 maxlen: 29
2a0f:e6c6:bf88::/48 maxlen: 48
2a0f:ea40:8::/48 maxlen: 48
2a12:ecc0:3::/48 maxlen: 48
2a12:ecc0:316::/48 maxlen: 48
2a13:8c82:2::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:c900:22::/48 maxlen: 48
2a13:e102:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 15 Aug 2024 19:39:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:de:fc:26:8f:26:88:06:fa:29:cf:67:45:11:c6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 15 16:28:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2734b72bf13bf295d9ddfc31f743dda7433a4a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:8b:ac:de:2b:a2:17:c3:c0:40:94:2b:f1:
63:9b:09:8d:0a:c9:9d:54:be:71:42:e9:76:4d:32:
1c:78:49:ff:d6:13:94:fa:be:08:3c:3e:cb:0a:e1:
1f:f6:8f:73:92:3c:38:67:89:4d:2c:c2:d6:aa:5e:
47:24:6d:73:ed:4f:ac:d8:3c:3a:a1:86:41:58:05:
8c:57:c0:f8:a5:90:e1:5a:44:3f:82:cd:de:a5:db:
c1:1f:b8:5e:17:11:ce:74:79:43:d0:b5:6e:50:c2:
90:79:16:ce:01:b0:a4:68:52:94:08:25:91:8d:6f:
0f:b1:12:56:b1:d2:52:20:cf:8b:a9:ca:27:1e:bd:
37:cf:de:46:1d:08:d6:01:85:c1:c4:5f:16:c2:8f:
c8:fd:2d:ca:94:fa:87:bc:f8:6f:d1:80:ed:6f:d6:
93:7f:02:45:c1:77:a0:4a:68:62:4f:20:8c:22:9a:
60:e8:ec:f0:70:f9:50:f6:60:04:e4:bc:ee:a7:28:
a0:7e:71:b9:ae:42:9d:59:2b:87:2c:91:94:5f:35:
f9:f8:6e:3c:6e:4e:08:14:57:fe:12:4e:ce:97:81:
87:c0:8e:fc:b5:c5:97:85:64:dc:ca:bf:e8:23:8b:
8e:ac:79:24:ba:19:9e:65:8d:b4:3f:1e:16:0c:34:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:34:B7:2B:F1:3B:F2:95:D9:DD:FC:31:F7:43:DD:A7:43:3A:4A:5F
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/JzS3K_E78pXZ3fwx90Pdp0M6Sl8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:b19a::/48
2a0f:1207:fe5a::/48
2a0f:2ec0:1::/48
2a0f:e1c0:3::/48
2a0f:e200:5::/48
2a0f:e440::/29
2a0f:e6c6:bf88::/48
2a0f:ea40:8::/48
2a12:ecc0:3::/48
2a12:ecc0:316::/48
2a13:8c82:2::/48
2a13:c700:1::/48
2a13:c900:22::/48
2a13:e102:2::/48
Signature Algorithm: sha256WithRSAEncryption
64:db:08:a2:9e:d8:14:a6:89:30:e5:22:1c:c4:c4:7c:c8:b6:
f2:68:f2:ce:74:60:b2:e5:e0:45:da:33:6f:ae:d1:c1:a1:34:
c1:49:8e:1a:b8:6a:e9:b8:62:60:97:dc:bb:e3:00:5c:9d:23:
b6:69:09:00:93:c3:20:d8:dc:bb:ae:ad:cb:cd:c2:b7:ef:8f:
b3:55:27:c6:b5:fd:1a:32:8c:4f:dc:7f:dd:b7:9b:bf:89:04:
51:35:17:d0:9e:90:78:f7:b2:f5:b6:8f:6d:0b:b9:c6:8f:e0:
ed:eb:0c:b4:c3:2b:f4:41:15:3b:46:a7:0f:77:e9:62:62:bf:
95:45:46:fe:e8:ff:4d:e2:e1:ae:0b:98:63:b6:1b:30:c4:d3:
3d:e7:28:9b:06:57:8f:1c:cb:d1:49:00:f2:2c:a4:8d:e3:a9:
75:5e:c9:ae:01:6b:ea:db:df:82:33:13:04:04:bf:6f:c4:76:
f3:f5:4a:03:ba:44:80:a6:4a:02:e2:a7:8a:bc:a5:71:7b:85:
38:8e:c4:75:f2:42:e0:b1:f1:ac:9f:e2:ca:9e:f1:b4:a3:52:
e7:c1:aa:88:ea:87:24:da:bd:ea:69:b0:b2:15:b3:ef:2a:22:
d2:78:55:b8:39:bb:a4:a1:29:bf:88:9d:8b:97:5c:03:a0:77:
8d:51:9c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:04:56 2025 by rpki-client