Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/ZNrSwi3LlRypkxxAyuMGw3HVhmw.roa
File: ZNrSwi3LlRypkxxAyuMGw3HVhmw.roa (raw, json)
Hash identifier: H1tXLr5UXZQJaD3N2RzfjfczuX18xwgJqfIriM5d+aM=
Subject key identifier: 64:DA:D2:C2:2D:CB:95:1C:A9:93:1C:40:CA:E3:06:C3:71:D5:86:6C
Certificate issuer: /CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Certificate serial: 018CC3B70A1CA440B361428E0523FC685273
Authority key identifier: 9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/ZNrSwi3LlRypkxxAyuMGw3HVhmw.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200305
IP address blocks: 2001:67c:b4c::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:48:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0a:1c:a4:40:b3:61:42:8e:05:23:fc:68:52:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae2534df509c96ecb811bc85d76d62baadf3d29
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64dad2c22dcb951ca9931c40cae306c371d5866c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6f:75:24:08:80:d0:a5:17:de:45:a7:c7:c8:
7a:ff:58:d8:52:30:ac:9a:61:56:12:74:0b:56:e6:
f3:e8:39:9e:3b:56:45:43:1b:af:53:f4:b7:e4:3d:
9f:1b:f4:e1:b3:ca:e8:45:68:4f:45:ae:5f:3b:fa:
15:93:eb:5e:1d:80:4e:e1:2e:f6:00:ae:1e:fe:bb:
d6:7a:77:c7:6d:67:2d:dc:f9:a2:f5:e4:60:d6:f0:
3a:97:48:79:e8:24:bc:35:cb:51:33:32:38:97:b6:
1d:41:9e:64:d5:f9:d3:ba:b0:a8:e6:00:54:2e:22:
ae:d1:89:2b:4a:5a:68:9f:e6:d4:5f:84:18:3a:65:
35:dd:17:22:f0:87:14:43:77:9e:8a:96:bc:3b:2a:
43:c7:c1:93:f8:bf:25:da:d4:d3:1d:32:b0:9e:28:
25:a1:c7:59:2e:1c:1d:6c:bd:93:92:b9:37:df:1d:
3a:91:6d:23:cd:df:f1:c4:a7:df:4f:2c:46:58:d9:
0f:7f:74:f0:fa:3c:19:5b:8d:2d:d9:8c:47:cf:e1:
fa:b1:ab:66:fe:c0:1c:b9:6a:3d:4d:57:9e:3e:2e:
28:91:17:d1:da:bf:9a:ee:3d:2d:0c:cf:22:c2:b1:
2f:d7:89:c1:b7:46:d1:e8:7a:b5:e9:fc:ee:8b:6c:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DA:D2:C2:2D:CB:95:1C:A9:93:1C:40:CA:E3:06:C3:71:D5:86:6C
X509v3 Authority Key Identifier:
keyid:9A:E2:53:4D:F5:09:C9:6E:CB:81:1B:C8:5D:76:D6:2B:AA:DF:3D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muJTTfUJyW7LgRvIXXbWK6rfPSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/ZNrSwi3LlRypkxxAyuMGw3HVhmw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6f5dc2-30cb-4c0c-aa62-8226524e4acf/1/muJTTfUJyW7LgRvIXXbWK6rfPSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:b4c::/48
Signature Algorithm: sha256WithRSAEncryption
98:47:c8:17:24:b5:24:b0:af:ad:60:02:1e:56:06:c3:90:f6:
a3:c1:ec:b1:1d:7e:e7:67:d3:2e:09:a7:9c:4f:09:bd:eb:68:
18:fe:b9:96:50:c9:4f:a3:f9:48:ee:59:7c:c1:bd:13:c3:fe:
6d:b9:5a:d6:58:86:3d:ac:fe:c9:55:64:66:b8:99:c7:e9:81:
f3:13:24:6a:3b:8b:45:3f:25:61:1b:1e:53:28:fe:4d:d4:87:
b2:da:13:7d:fb:a3:98:49:5a:bb:ea:ea:a3:65:0f:6b:fb:ca:
8b:93:d6:cf:fc:c5:71:9f:72:51:b7:a4:6c:d5:f5:e5:a7:1c:
19:1b:05:f1:9c:f6:e3:e7:08:39:fa:e6:be:3e:84:84:c2:31:
4f:2d:cb:93:54:05:93:93:17:76:aa:58:4e:36:22:40:e3:9a:
04:49:4e:d5:27:14:02:24:e5:43:25:6a:c7:e4:4d:3c:3d:97:
63:6d:26:81:bc:7b:a8:ba:04:01:ff:cf:71:57:8a:4b:96:23:
a8:9f:75:1e:dc:52:66:a0:67:45:b3:71:04:bc:41:c2:c5:b6:
fd:52:68:45:09:45:9a:9c:de:9a:e8:b9:5a:1a:06:12:56:32:
37:b7:51:62:b3:51:a4:c2:fb:53:9d:7a:69:bc:e9:58:4a:83:
49:3c:fb:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:12:08 2025 by rpki-client