Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZbuMQ9zN-MpV0OXcelFZ1sId-5k.roa
File: ZbuMQ9zN-MpV0OXcelFZ1sId-5k.roa (raw, json)
Hash identifier: HgXHUtvM1fJLP5LSe8jOsf+ofXocDZvL+AutajAgfUs=
Subject key identifier: 65:BB:8C:43:DC:CD:F8:CA:55:D0:E5:DC:7A:51:59:D6:C2:1D:FB:99
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 0193BA66D8E6F21DEBAF461DEB182718AFA2
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZbuMQ9zN-MpV0OXcelFZ1sId-5k.roa
Signing time: Thu 12 Dec 2024 10:25:22 +0000
ROA not before: Thu 12 Dec 2024 10:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 607081
IP address blocks: 2a13:c906::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 13 Dec 2024 21:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:ba:66:d8:e6:f2:1d:eb:af:46:1d:eb:18:27:18:af:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 12 10:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65bb8c43dccdf8ca55d0e5dc7a5159d6c21dfb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5d:f7:d2:19:b8:ed:3a:ec:06:51:dd:3b:39:
ae:d2:5e:cf:f7:ef:c9:43:0b:b1:23:fb:75:e9:7b:
cb:f3:e4:6d:9c:c5:8c:2a:d2:25:ee:21:23:80:c5:
52:58:a3:74:d6:ac:50:19:2d:c7:cc:84:92:51:ea:
b7:d6:be:f2:27:8c:f9:6a:a0:dc:2f:47:73:9b:d0:
5b:10:53:e4:d1:05:4b:41:3d:e8:75:a9:58:4b:9c:
cc:d1:61:1d:30:f1:cc:55:21:9e:ea:9d:b3:0b:21:
35:5e:12:20:b0:d3:23:54:ff:8f:e4:0e:d1:a4:44:
5f:62:91:5b:7d:7e:49:3d:16:eb:97:e0:df:fd:38:
d4:d9:90:86:c9:c2:dd:6d:b9:5a:c8:69:58:b3:07:
78:a6:f1:a1:56:c9:93:c2:62:e7:df:43:10:d9:a4:
b2:8b:95:3f:b8:89:a2:e1:82:5e:4c:d2:d3:e2:14:
d0:fb:bf:1a:51:f7:ea:b6:0a:78:97:29:e9:35:13:
86:14:d7:11:3a:8c:e6:53:d8:fe:cc:e1:b4:e1:f9:
43:c8:03:d5:4c:61:48:46:2a:b6:f3:1b:77:52:8a:
09:f0:04:f8:d8:19:bd:ba:02:5b:82:32:7e:b2:ee:
b8:b3:ca:82:73:62:bf:de:6e:28:12:ad:97:0b:35:
6e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BB:8C:43:DC:CD:F8:CA:55:D0:E5:DC:7A:51:59:D6:C2:1D:FB:99
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZbuMQ9zN-MpV0OXcelFZ1sId-5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c906::/32
Signature Algorithm: sha256WithRSAEncryption
97:6c:57:cb:f9:8c:ba:30:57:49:80:9c:54:8c:21:d3:0d:09:
b9:93:80:2f:1d:32:c9:ac:02:3b:d0:76:72:03:ff:c8:ae:e6:
a4:d4:0f:0e:b3:01:90:22:05:44:3e:e9:80:8f:04:79:27:97:
32:b5:1e:62:5a:78:43:e8:7b:19:3e:5e:cd:91:2a:d2:1d:f1:
9d:96:73:78:d2:d0:38:e0:d7:0f:b7:58:2c:b9:a8:7d:52:97:
c0:7b:fc:78:55:f3:56:64:d6:d1:fc:66:8a:06:0a:07:90:f8:
af:c0:ff:ec:fb:df:89:1c:0a:8a:7e:e5:11:28:7e:16:ea:d7:
17:8a:28:c3:d9:ac:0e:4d:87:ca:2f:0e:93:e2:ca:0a:b4:65:
fb:03:8a:ae:ff:95:5f:3c:ba:bf:26:60:2f:f8:7a:17:72:cf:
73:cc:3d:9d:7f:40:68:04:69:54:61:72:73:3b:ae:74:7a:af:
5e:b5:b5:8f:e8:26:0f:71:df:3c:ac:68:69:2a:e6:dd:4e:d2:
53:74:22:0f:d5:af:dc:a6:08:df:73:0e:74:6c:01:09:88:79:
c7:23:29:8d:4a:9e:ae:28:0a:3f:e0:07:57:3b:b7:c5:d7:b1:
7b:38:37:ba:db:a2:20:af:03:87:42:77:10:fc:ef:a5:6d:3e:
ba:94:fc:47
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZO6Ztjm8h3rr0Yd6xgnGK+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTU5YWFmYmZjMDkzMTI0MmUxZDYzNzI5OGNmMWRkMjIz
ZTRjMjYwHhcNMjQxMjEyMTAyNTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWJiOGM0M2RjY2RmOGNhNTVkMGU1ZGM3YTUxNTlkNmMyMWRmYjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3V330hm47TrsBlHdOzmu0l7P9+/J
QwuxI/t16XvL8+RtnMWMKtIl7iEjgMVSWKN01qxQGS3HzISSUeq31r7yJ4z5aqDc
L0dzm9BbEFPk0QVLQT3odalYS5zM0WEdMPHMVSGe6p2zCyE1XhIgsNMjVP+P5A7R
pERfYpFbfX5JPRbrl+Df/TjU2ZCGycLdbblayGlYswd4pvGhVsmTwmLn30MQ2aSy
i5U/uImi4YJeTNLT4hTQ+78aUffqtgp4lynpNROGFNcROozmU9j+zOG04flDyAPV
TGFIRiq28xt3UooJ8AT42Bm9ugJbgjJ+su64s8qCc2K/3m4oEq2XCzVuxQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGW7jEPczfjKVdDl3HpRWdbCHfuZMB8GA1UdIwQY
MBaAFH1Vmq+/wJMSQuHWNymM8d0iPkwmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTkt
OGM1MDA3YzJhNGI2LzEvWmJ1TVE5ek4tTXBWME9YY2VsRloxc0lkLTVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC80OWFkYzYtYmE4OS00MDNmLWFkYTktOGM1MDA3YzJhNGI2
LzEvZlZXYXI3X0FreEpDNGRZM0tZengzU0ktVENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKhPJBjAN
BgkqhkiG9w0BAQsFAAOCAQEAl2xXy/mMujBXSYCcVIwh0w0JuZOALx0yyawCO9B2
cgP/yK7mpNQPDrMBkCIFRD7pgI8EeSeXMrUeYlp4Q+h7GT5ezZEq0h3xnZZzeNLQ
OODXD7dYLLmofVKXwHv8eFXzVmTW0fxmigYKB5D4r8D/7PvfiRwKin7lESh+FurX
F4oow9msDk2Hyi8Ok+LKCrRl+wOKrv+VXzy6vyZgL/h6F3LPc8w9nX9AaARpVGFy
czuudHqvXrW1j+gmD3HfPKxoaSrm3U7SU3QiD9Wv3KYI33MOdGwBCYh5xyMpjUqe
rigKP+AHVzu3xdexezg3utuiIK8Dh0J3EPzvpW0+upT8Rw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:05:03 2025 by rpki-client