Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zFXTUbt4HdrN19UcE2fRcTQ5YUI.roa
File: zFXTUbt4HdrN19UcE2fRcTQ5YUI.roa (raw, json)
Hash identifier: AMaERIMypAs29Ewg4J4/er1PFKV3E1Akk9Ra0EBVzBY=
Subject key identifier: CC:55:D3:51:BB:78:1D:DA:CD:D7:D5:1C:13:67:D1:71:34:39:61:42
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 018DEEA15B05C0B621B93FE26DCB15F55871
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zFXTUbt4HdrN19UcE2fRcTQ5YUI.roa
Signing time: Wed 28 Feb 2024 07:32:48 +0000
ROA not before: Wed 28 Feb 2024 07:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205544
IP address blocks: 2a0f:e440::/29 maxlen: 29
2a0f:e6c6:1::/48 maxlen: 48
2a12:ecc6:1::/48 maxlen: 48
2a13:3380:1::/48 maxlen: 48
2a13:c700:1::/48 maxlen: 48
2a13:e101:2::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 18 Mar 2024 08:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ee:a1:5b:05:c0:b6:21:b9:3f:e2:6d:cb:15:f5:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 28 07:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc55d351bb781ddacdd7d51c1367d17134396142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ab:33:0b:40:1d:5d:13:33:b8:00:71:1a:7e:
41:62:c6:26:f4:36:b9:34:ce:19:24:3a:b8:1a:a9:
f6:17:47:10:2e:09:40:0c:ac:53:ed:7a:96:c9:73:
79:37:4f:d8:70:39:45:08:48:bd:39:55:e7:91:7c:
65:a2:2f:57:1f:17:e5:bf:86:98:91:b7:0a:41:b3:
4e:9a:62:7f:57:5b:32:94:da:87:3f:ba:63:ef:45:
c0:cf:2d:61:34:d3:ab:3a:17:74:8d:0b:3b:55:94:
62:8c:22:a2:67:4e:db:62:f1:14:96:e1:bb:2c:7d:
c2:91:d4:a1:6a:07:33:05:ef:3d:af:b8:d7:83:1d:
01:ef:e9:87:ec:64:4c:a8:b5:e2:ed:29:9f:5a:db:
b1:a3:06:5e:5d:b8:6d:2f:f4:5b:14:50:dc:9c:30:
c2:d8:d3:65:5c:68:18:f7:b3:85:1b:0f:da:bd:b2:
0d:7c:82:58:87:a2:02:ca:fa:48:64:c3:bd:e6:93:
0d:a6:7d:6d:af:be:97:be:dc:4e:9e:31:36:5b:a0:
0a:51:85:a1:b9:f4:53:a9:9b:2e:2c:4d:93:a0:c2:
60:90:65:61:43:d8:6d:88:4b:0d:fc:8c:f7:6d:f7:
da:ad:c1:ab:3f:37:d0:11:f2:85:9d:c2:bb:59:b3:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:55:D3:51:BB:78:1D:DA:CD:D7:D5:1C:13:67:D1:71:34:39:61:42
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zFXTUbt4HdrN19UcE2fRcTQ5YUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:e440::/29
2a0f:e6c6:1::/48
2a12:ecc6:1::/48
2a13:3380:1::/48
2a13:c700:1::/48
2a13:e101:2::/48
Signature Algorithm: sha256WithRSAEncryption
14:c3:72:85:76:f3:58:88:c0:5a:1d:9f:ed:28:81:7e:88:17:
a3:9b:56:80:ce:db:9a:27:d6:e2:c7:7f:8e:f4:37:9b:42:1f:
35:54:82:b6:e2:0d:9a:a1:c1:aa:32:10:dc:48:60:05:18:2e:
e0:12:df:96:ec:da:b5:3a:e8:dd:15:85:0d:57:f2:da:64:b5:
52:b5:62:d1:13:32:6d:ed:aa:bc:f7:77:d9:77:f1:66:54:09:
08:73:1d:2f:f0:d6:cd:c9:bf:ba:d4:ab:5e:19:07:59:4d:02:
c0:98:29:9d:b6:80:db:b0:c6:a3:9a:74:7a:c4:f6:34:7c:0f:
4c:84:90:5e:de:27:c4:ab:d9:15:63:e4:e5:98:ae:80:13:6b:
72:41:b8:d2:a0:01:62:00:ad:ce:6d:32:84:3e:09:67:53:08:
b4:d0:a2:83:17:fc:f8:e8:f1:e7:d2:cc:11:b6:5e:1d:62:27:
f4:b8:27:03:8e:44:94:a0:08:b3:b0:97:6b:8b:6d:60:9a:31:
5f:f5:08:0c:ef:19:55:cb:50:c8:e1:9b:62:f8:37:72:56:3e:
2f:a5:22:b9:94:77:cc:50:61:f3:9e:b6:97:78:88:1f:96:29:
34:3e:28:ec:9d:85:06:06:4f:78:06:e4:d9:61:9c:9b:2e:1d:
ab:2e:0b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:28 2025 by rpki-client