Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rZHXPZOrOlygBYMcsnKWXNZI95A.roa
File: rZHXPZOrOlygBYMcsnKWXNZI95A.roa (raw, json)
Hash identifier: OaADfZ8X7RomGstb41f1qIZhgAqrWhl81EnGLOTMtyM=
Subject key identifier: AD:91:D7:3D:93:AB:3A:5C:A0:05:83:1C:B2:72:96:5C:D6:48:F7:90
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019390CC7CBDAD94E71EFC72C3B635508ADA
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rZHXPZOrOlygBYMcsnKWXNZI95A.roa
Signing time: Wed 04 Dec 2024 08:32:20 +0000
ROA not before: Wed 04 Dec 2024 08:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214610
IP address blocks: 2a06:1180:1000::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 31 Dec 2024 08:45:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:90:cc:7c:bd:ad:94:e7:1e:fc:72:c3:b6:35:50:8a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Dec 4 08:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad91d73d93ab3a5ca005831cb272965cd648f790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:fa:58:fb:f4:e5:f7:bb:a8:59:25:5e:a2:
9d:4f:d2:10:0b:6b:ac:69:67:66:cd:d2:c9:08:81:
81:22:79:bc:e8:99:ea:a7:cc:77:e2:ad:06:6e:6a:
bb:a7:51:79:d9:b7:49:b9:46:4b:51:23:2c:00:c5:
26:5c:c3:36:1e:ec:f8:40:12:2c:39:39:64:8e:16:
66:f8:6e:08:41:86:f1:e3:e7:20:a0:ce:05:e5:bf:
63:ef:28:e2:b7:3f:0e:e1:d3:c4:7e:ef:33:85:4e:
4b:6b:aa:d1:60:02:f3:40:d5:f4:32:7b:6b:66:92:
4e:70:0a:e1:79:86:7d:85:f9:78:e5:12:a5:44:20:
f7:db:4e:68:48:52:2a:8e:5f:2c:43:28:8c:0a:82:
08:6d:a8:41:91:4c:2f:df:18:17:74:2e:5c:e3:21:
3e:4f:d2:e5:94:fa:35:71:d9:c7:6a:02:c5:f4:91:
2c:ce:10:a1:b7:28:ac:8c:70:c9:ca:a0:0f:ba:9d:
6b:fb:4f:87:f4:c0:77:79:d9:c8:8c:e0:81:29:51:
65:1c:75:30:9d:d9:bc:96:57:1c:96:d1:c5:48:25:
f3:56:c7:77:7b:5e:46:f6:e8:76:db:4a:2e:a7:f7:
5b:67:79:93:0d:a9:cf:b9:d0:04:06:3b:1d:b9:e5:
13:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:91:D7:3D:93:AB:3A:5C:A0:05:83:1C:B2:72:96:5C:D6:48:F7:90
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/rZHXPZOrOlygBYMcsnKWXNZI95A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:1180:1000::/48
Signature Algorithm: sha256WithRSAEncryption
98:fc:6d:1e:c6:7a:21:06:2f:ab:1d:b2:3e:04:c8:90:ca:36:
fc:1d:c1:da:f3:cd:31:44:e7:86:24:5b:c7:d7:c6:1c:fa:87:
c5:ec:93:ae:93:5e:57:c6:f1:bb:51:54:5c:d7:db:00:6f:2b:
32:cb:dc:7b:dc:a1:b6:5e:81:58:a6:84:fe:a2:c9:3d:77:f8:
44:27:b4:53:59:eb:b0:2e:3d:74:e8:1e:42:b7:e0:bb:9b:56:
f4:b0:68:49:4c:50:78:35:46:74:56:fb:77:73:ca:69:31:0a:
64:12:2c:9b:28:e7:46:cb:be:34:c4:2f:44:02:da:99:60:e2:
64:9e:01:82:86:76:9c:3f:3e:e3:80:ef:96:a4:36:30:50:38:
97:98:e2:5c:49:f4:fc:a3:ca:15:51:e8:32:a5:7f:cf:d9:20:
dc:62:6f:80:67:2e:2c:ea:20:82:68:6b:44:5e:bf:c8:8b:4c:
0c:70:60:28:5c:c5:45:49:f3:ed:1c:7b:f9:61:c4:57:6f:fb:
d6:5e:98:f5:67:79:1a:37:4e:95:65:3d:e5:db:f1:5d:37:ef:
75:de:64:ac:7c:c7:c7:e9:b0:02:c3:bd:c1:62:3a:35:a6:04:
c7:8d:5a:b3:90:b4:39:92:e1:23:0a:d6:47:d1:3a:f1:1e:41:
6a:39:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:13:18 2025 by rpki-client