Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zMeMCDm2BM8Ef2ODIVjUCTJnbiU.roa
File: zMeMCDm2BM8Ef2ODIVjUCTJnbiU.roa (raw, json)
Hash identifier: Pl+HPnYdTtthpcMYcc78i2hnTG+L2mKbVg2vS+/UA2s=
Subject key identifier: CC:C7:8C:08:39:B6:04:CF:04:7F:63:83:21:58:D4:09:32:67:6E:25
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01927C4E30FAF187D358D638C21D97617B77
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zMeMCDm2BM8Ef2ODIVjUCTJnbiU.roa
Signing time: Fri 11 Oct 2024 15:59:12 +0000
ROA not before: Fri 11 Oct 2024 15:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21738
IP address blocks: 2a0e:e980::/29 maxlen: 29
2a0f:140::/29 maxlen: 29
2a0f:e740::/29 maxlen: 29
2a10:34c0::/29 maxlen: 29
2a10:37c0::/29 maxlen: 29
2a10:5200::/29 maxlen: 29
2a10:6900::/29 maxlen: 29
2a10:6f00::/29 maxlen: 29
2a10:7100::/29 maxlen: 29
2a10:7300::/29 maxlen: 29
2a10:7f00::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 12 Oct 2024 12:14:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:7c:4e:30:fa:f1:87:d3:58:d6:38:c2:1d:97:61:7b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Oct 11 15:59:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ccc78c0839b604cf047f63832158d40932676e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:54:5d:65:80:ca:33:3e:94:35:11:d3:d6:43:
24:87:c1:9c:7e:13:34:44:f9:9b:13:4a:31:ad:43:
82:39:88:40:4c:ff:81:98:e7:b3:a5:be:e3:07:08:
64:34:f2:0e:aa:f9:ee:5e:b9:7f:7d:0a:1e:fc:d6:
a8:8c:e5:ff:28:b9:a2:9b:8b:1b:c3:1e:c9:0a:ea:
f2:b0:03:f6:c1:b9:9e:39:0c:5e:b0:30:1a:4e:9e:
fc:f0:25:66:f1:2a:37:3e:97:1c:12:77:e0:cf:3a:
21:fa:55:8e:dd:a8:64:a2:16:ea:8c:bf:cb:f3:82:
18:0f:20:cf:35:66:85:b8:38:d6:0c:b6:b5:45:ba:
bd:fe:07:0e:53:d8:e9:75:75:80:f0:0c:32:65:00:
e0:5e:db:68:c9:2f:9b:e4:95:c9:e1:c0:03:1a:1e:
c7:63:19:b4:b1:e6:fe:85:3d:5b:53:59:44:52:fe:
39:15:ff:d8:55:eb:8f:f3:a3:27:1e:3d:65:cc:53:
c0:c5:97:bc:c3:a1:a8:57:01:0e:fe:8f:ab:eb:48:
20:c0:c5:00:77:b1:22:85:86:45:70:20:d4:d6:8b:
88:c0:91:bf:e1:2b:03:9d:77:26:aa:9a:8e:69:18:
33:bd:a2:df:c6:16:da:71:ca:e3:63:23:8d:9b:06:
17:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:C7:8C:08:39:B6:04:CF:04:7F:63:83:21:58:D4:09:32:67:6E:25
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zMeMCDm2BM8Ef2ODIVjUCTJnbiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:e980::/29
2a0f:140::/29
2a0f:e740::/29
2a10:34c0::/29
2a10:37c0::/29
2a10:5200::/29
2a10:6900::/29
2a10:6f00::/29
2a10:7100::/29
2a10:7300::/29
2a10:7f00::/29
Signature Algorithm: sha256WithRSAEncryption
79:6f:42:e1:a3:a0:4c:1a:66:bc:56:a1:0d:fa:c2:81:82:36:
64:3b:e9:a4:2b:2c:bc:78:3a:d2:cf:ee:11:5c:98:4a:b7:86:
8b:43:d0:0d:95:97:b4:f5:9b:00:48:b6:50:2a:0f:1d:37:c1:
1c:51:51:ee:78:16:db:03:37:fb:1e:f4:0c:07:44:87:ed:4d:
c2:0b:8d:1f:b0:0f:83:9e:df:e4:ae:1a:00:95:d9:e8:ab:bc:
cf:5e:a0:68:f2:29:1a:c7:cb:eb:77:1e:d5:af:15:cb:d5:8b:
79:79:7d:3f:7f:dc:45:5c:e8:3c:62:2a:37:46:7b:c4:70:e1:
49:ba:d9:ec:40:2d:05:76:0b:1b:0e:24:fb:8b:ff:d4:ad:2b:
11:ac:1d:2c:94:29:b4:bc:0e:6e:d8:c2:4e:0f:d1:ba:58:42:
e6:cb:ed:35:67:04:e0:94:da:b1:ac:29:7a:53:4a:ce:73:24:
35:45:2e:96:85:d5:6a:7a:2c:0d:96:7a:a1:c1:3d:d2:84:ed:
88:4e:6f:b0:a4:76:89:57:9d:7a:2d:67:1a:85:40:f9:1d:ed:
e2:b1:9b:8d:e1:7c:ba:6f:49:dc:1f:69:55:4a:9f:4e:89:6e:
0a:7e:c5:c5:39:d2:ae:53:89:98:bb:89:39:4b:32:de:77:ce:
4a:5c:ac:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:10:18 2025 by rpki-client