Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZLAwONevjzaDeIgQH0U9bl8eq3w.roa
File: ZLAwONevjzaDeIgQH0U9bl8eq3w.roa (raw, json)
Hash identifier: c0e0Imifj6XjjkQ6KE8cqAyvSMBFD7z/3D97w5EEdsg=
Subject key identifier: 64:B0:30:38:D7:AF:8F:36:83:78:88:10:1F:45:3D:6E:5F:1E:AB:7C
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0191FAD32B71FF3D0FCE258F0714A7310300
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZLAwONevjzaDeIgQH0U9bl8eq3w.roa
Signing time: Mon 16 Sep 2024 12:33:48 +0000
ROA not before: Mon 16 Sep 2024 12:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21738
IP address blocks: 2a0f:140::/29 maxlen: 29
2a10:36c0::/29 maxlen: 29
2a10:5200::/29 maxlen: 29
Validation: Failed, certificate revoked on Sun 22 Sep 2024 19:08:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:d3:2b:71:ff:3d:0f:ce:25:8f:07:14:a7:31:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 16 12:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64b03038d7af8f36837888101f453d6e5f1eab7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:40:6e:a4:45:d4:db:7a:2b:3b:6d:a0:9c:cc:
6c:b8:af:04:08:c6:0e:69:8e:70:9a:0b:27:0f:fe:
dc:a3:27:7b:fa:5a:67:eb:41:30:91:95:b6:4c:12:
1b:97:82:38:00:dc:42:f6:76:14:c0:45:ec:6e:16:
66:8b:05:29:99:6b:ab:df:7b:b7:53:af:bb:c9:64:
6c:0f:d5:4c:74:4e:fe:e2:c1:cb:93:02:37:80:a7:
75:ae:95:d6:8d:af:9d:e5:6a:b3:84:3c:1a:3a:0a:
6a:02:38:e4:4a:65:08:79:b2:ce:90:a2:27:07:54:
d9:aa:27:62:03:40:71:cb:69:9c:8f:d4:d6:ce:44:
76:b2:6d:89:bc:ae:a4:a1:87:68:a0:83:16:31:47:
0e:a6:20:41:87:84:d2:b2:14:52:f1:37:7d:f6:07:
d5:c1:98:7b:4a:5e:02:6b:a9:3e:da:2f:e2:15:36:
a6:2a:bd:0b:10:ce:c1:4f:d7:64:8c:ac:c7:5f:42:
ed:27:1c:05:92:8f:06:13:b8:86:03:7c:ec:c9:1a:
f7:ad:07:d1:41:1d:01:23:3b:99:6b:f6:94:7e:a0:
86:6e:e1:18:ef:7f:60:53:90:ae:3a:eb:76:79:df:
74:ed:fa:e6:b3:b9:a3:05:34:ca:a9:6e:da:a0:ec:
dd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:30:38:D7:AF:8F:36:83:78:88:10:1F:45:3D:6E:5F:1E:AB:7C
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZLAwONevjzaDeIgQH0U9bl8eq3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:140::/29
2a10:36c0::/29
2a10:5200::/29
Signature Algorithm: sha256WithRSAEncryption
bf:93:13:7a:09:40:17:60:6d:05:e6:83:07:89:65:f2:b3:98:
9b:7a:95:64:00:d1:a9:83:24:af:90:a1:ee:a9:d0:f9:0b:54:
54:38:d8:92:4b:93:82:2c:8f:5b:07:88:aa:8c:e6:5a:a2:f2:
58:d0:e3:58:bc:94:14:7f:92:9f:72:b9:c5:83:f9:87:cd:a9:
85:2e:77:60:d5:93:83:c0:19:db:eb:9c:59:b1:7c:65:23:cd:
f2:b9:fe:5c:bb:ec:76:3c:53:af:46:24:92:b3:d5:87:29:1f:
19:7a:1a:6b:a4:c9:15:3e:65:fb:9c:37:e8:99:07:2a:6d:f1:
75:83:28:2f:84:d1:21:e3:b1:4f:65:2c:c7:3b:db:e6:0b:78:
da:13:2b:1a:3a:a6:9d:ef:38:c5:80:3c:33:e5:8d:c3:97:2d:
3d:1e:69:ef:dd:c1:20:88:3d:18:98:32:55:66:d4:09:c2:e8:
bb:3d:7c:8e:7c:b5:4b:f6:37:c4:6b:9b:d6:6e:e0:0e:c5:78:
fd:9c:be:c1:02:8e:6f:92:4b:94:76:76:00:18:49:71:96:99:
18:ee:c1:e6:1a:27:d3:02:ea:49:f7:b7:17:48:f4:1c:cd:5e:
26:ab:4c:d0:fc:2d:0f:a1:52:11:4f:39:08:ed:7f:67:83:a6:
5b:21:b3:5d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZH60ytx/z0PziWPBxSnMQMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQwOTE2MTIzMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NGIwMzAzOGQ3YWY4ZjM2ODM3ODg4MTAxZjQ1M2Q2ZTVmMWVhYjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukBupEXU23orO22gnMxsuK8ECMYO
aY5wmgsnD/7coyd7+lpn60EwkZW2TBIbl4I4ANxC9nYUwEXsbhZmiwUpmWur33u3
U6+7yWRsD9VMdE7+4sHLkwI3gKd1rpXWja+d5WqzhDwaOgpqAjjkSmUIebLOkKIn
B1TZqidiA0Bxy2mcj9TWzkR2sm2JvK6koYdooIMWMUcOpiBBh4TSshRS8Td99gfV
wZh7Sl4Ca6k+2i/iFTamKr0LEM7BT9dkjKzHX0LtJxwFko8GE7iGA3zsyRr3rQfR
QR0BIzuZa/aUfqCGbuEY739gU5CuOut2ed907frms7mjBTTKqW7aoOzdewIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGSwMDjXr482g3iIEB9FPW5fHqt8MB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWkxBd09OZXZqemFEZUlnUUgwVTlibDhlcTN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKg8BQAMF
AyoQNsADBQMqEFIAMA0GCSqGSIb3DQEBCwUAA4IBAQC/kxN6CUAXYG0F5oMHiWXy
s5ibepVkANGpgySvkKHuqdD5C1RUONiSS5OCLI9bB4iqjOZaovJY0ONYvJQUf5Kf
crnFg/mHzamFLndg1ZODwBnb65xZsXxlI83yuf5cu+x2PFOvRiSSs9WHKR8Zehpr
pMkVPmX7nDfomQcqbfF1gygvhNEh47FPZSzHO9vmC3jaEysaOqad7zjFgDwz5Y3D
ly09Hmnv3cEgiD0YmDJVZtQJwui7PXyOfLVL9jfEa5vWbuAOxXj9nL7BAo5vkkuU
dnYAGElxlpkY7sHmGifTAupJ97cXSPQczV4mq0zQ/C0PoVIRTzkI7X9ng6ZbIbNd
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:40 2025 by rpki-client