Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zoMGztBSM_3R4X8uEL3rTyEYDMM.roa
File: zoMGztBSM_3R4X8uEL3rTyEYDMM.roa (raw, json)
Hash identifier: Diy/ZUZr7EAJl9WMx+sGhlpK3hjreV3WGg1hAyM/3ak=
Subject key identifier: CE:83:06:CE:D0:52:33:FD:D1:E1:7F:2E:10:BD:EB:4F:21:18:0C:C3
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01915FC61545C3CC797EEA1858D4BD1FD845
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zoMGztBSM_3R4X8uEL3rTyEYDMM.roa
Signing time: Sat 17 Aug 2024 09:58:22 +0000
ROA not before: Sat 17 Aug 2024 09:58:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24940
IP address blocks: 2a0a:2d06:101::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 19 Aug 2024 13:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5f:c6:15:45:c3:cc:79:7e:ea:18:58:d4:bd:1f:d8:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Aug 17 09:58:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8306ced05233fdd1e17f2e10bdeb4f21180cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7a:fb:2f:30:58:69:b7:99:a3:72:60:01:97:
9b:40:1f:e3:24:29:c6:18:df:b6:cd:13:7b:14:3c:
a8:31:e0:58:96:ad:8e:31:34:cf:12:ff:da:00:51:
1b:8c:61:95:53:f9:82:3b:51:a6:34:ec:14:f2:f3:
e2:c1:d5:0f:93:fd:77:78:60:f9:5e:3b:6f:54:a2:
3e:ab:17:42:51:d0:94:11:ca:93:c9:40:50:6e:f7:
96:e9:99:5b:b9:e2:65:a8:0e:72:cd:bf:8b:b7:96:
dc:7e:da:79:e3:bd:4f:32:80:71:ac:af:49:fa:dd:
4b:e5:d0:e1:11:27:22:89:3c:1c:51:cd:32:1b:bb:
a5:67:28:3d:83:d7:9a:ac:78:b2:e5:8d:d7:a8:59:
78:39:88:53:76:81:74:92:15:38:1d:3a:46:e2:e3:
d6:61:18:d9:8d:91:15:5e:67:6d:3b:a3:aa:78:bf:
2d:b5:1b:3e:27:75:35:d0:6f:de:e2:19:48:6f:a0:
25:7a:52:db:0b:3f:ac:2f:06:c0:5d:c6:4e:04:61:
e9:e2:10:1c:4f:dc:a0:53:84:9b:8f:c0:15:0b:b4:
e0:7d:a2:1c:89:90:9b:1c:a0:2a:f2:c9:44:73:f0:
92:d7:72:ca:12:4c:78:b3:ba:fb:bd:08:30:e5:d0:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:83:06:CE:D0:52:33:FD:D1:E1:7F:2E:10:BD:EB:4F:21:18:0C:C3
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/zoMGztBSM_3R4X8uEL3rTyEYDMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2d06:101::/48
Signature Algorithm: sha256WithRSAEncryption
b1:ed:0d:a3:7f:46:c2:c3:31:0b:ea:21:70:3e:45:e4:7b:fe:
ad:2f:a4:16:64:93:e6:20:55:15:94:0f:5f:88:30:4f:f0:d5:
89:c8:66:c6:26:82:4c:ae:0f:fd:ab:c6:39:32:78:13:68:a2:
ac:ce:2d:ac:b8:e8:a8:82:c6:b9:78:6e:09:67:2f:52:ac:e1:
f7:80:0b:83:81:6d:34:44:ac:bc:54:b5:72:ad:b4:da:a1:3a:
b6:f3:26:b8:69:6e:64:33:8f:bc:31:e0:9c:e7:38:7a:04:c3:
5b:20:c6:a0:52:8d:9d:82:1e:69:d2:e9:f2:db:99:a8:85:c0:
b2:37:d0:b2:cd:8b:98:7f:99:c8:aa:68:5b:e7:dd:6c:c8:aa:
30:59:98:de:00:40:ec:fc:8b:3d:43:ca:1d:a0:80:fe:cc:15:
f5:cf:09:c9:3d:cb:f8:df:04:d4:b3:a2:4d:f2:44:1b:55:8e:
a4:36:c4:8f:18:5b:f3:4f:7d:e0:2d:f9:d0:24:dd:f3:89:ac:
d6:30:a2:f1:0e:b1:e4:7a:fd:06:ae:82:a6:99:4f:30:f0:de:
64:c4:df:2e:a9:1f:3e:0e:55:7f:08:2b:b8:d0:d1:65:88:15:
60:5c:48:c4:1e:3b:f8:3c:76:5a:46:4f:b1:cc:8c:f6:ce:85:
d7:4c:fe:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:19:57 2025 by rpki-client