Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZMIK82S0Rl-4SIgqUJIDYXs4P1o.roa
File: ZMIK82S0Rl-4SIgqUJIDYXs4P1o.roa (raw, json)
Hash identifier: w5qe6tpvU/bDxnIH5j9SgxOYO/A9PPZkAKPhFqZZr6g=
Subject key identifier: 64:C2:0A:F3:64:B4:46:5F:B8:48:88:2A:50:92:03:61:7B:38:3F:5A
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 01970BE08CD7B21207160924788FD912D327
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZMIK82S0Rl-4SIgqUJIDYXs4P1o.roa
Signing time: Mon 26 May 2025 09:15:54 +0000
ROA not before: Mon 26 May 2025 09:15:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
Validation: Failed, certificate revoked on Mon 26 May 2025 10:04:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:0b:e0:8c:d7:b2:12:07:16:09:24:78:8f:d9:12:d3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 26 09:15:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=64c20af364b4465fb848882a509203617b383f5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:8b:93:7b:f9:ae:05:8b:d9:8e:78:34:54:
cc:9e:f1:9d:c2:ac:fc:5b:9d:21:b0:1d:f3:61:ac:
10:77:c6:df:bf:34:c2:23:be:27:23:a2:3f:4a:8a:
07:c1:91:2f:df:0e:1e:a6:db:84:cd:f7:0a:76:b0:
fc:15:56:db:a4:e1:ca:ca:bd:74:68:c5:45:73:40:
91:13:0c:f1:fb:97:42:79:80:be:de:fa:18:3f:ee:
10:b8:00:f9:3d:66:1a:52:91:b2:48:8d:1f:ca:ae:
e3:b4:ec:a7:c8:0f:d6:ea:0d:65:ef:0d:3c:1e:06:
60:d3:a6:e9:de:48:9a:e7:01:7c:2c:b2:ca:db:e5:
16:aa:b8:9f:0b:1c:d2:f7:70:62:11:b0:af:e2:5d:
19:13:f4:7e:b8:fa:45:26:08:16:32:f0:ff:c9:90:
54:ae:04:73:c3:6d:ae:70:fb:a0:41:d9:86:08:17:
fe:91:5e:3d:a6:aa:8b:79:66:f4:02:01:ec:01:ec:
b3:85:11:cf:61:2e:8f:21:3d:4a:25:49:f9:4f:a9:
bb:80:a8:b2:a7:c4:36:9d:45:9e:9e:17:44:b4:02:
33:f7:97:3f:16:8f:84:5c:b2:73:2a:2f:cd:83:da:
29:1d:17:30:e5:b9:b6:1d:aa:a0:bb:87:7b:5f:44:
44:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C2:0A:F3:64:B4:46:5F:B8:48:88:2A:50:92:03:61:7B:38:3F:5A
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/ZMIK82S0Rl-4SIgqUJIDYXs4P1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
Signature Algorithm: sha256WithRSAEncryption
a3:00:22:3d:e8:e9:f9:6f:23:4a:e1:52:70:2d:68:18:a4:57:
30:e1:66:ba:ff:fe:a4:b8:f8:cb:e0:f1:b1:21:3c:b3:3d:82:
3c:f4:c3:93:23:20:96:68:da:98:02:fe:0d:6a:ae:52:6f:a2:
03:14:e5:03:5c:09:dd:16:37:41:61:24:a5:15:49:d9:d4:8b:
4d:ad:4a:3c:15:9d:88:76:f6:0c:fe:52:b5:83:99:62:86:9a:
e8:59:9f:fa:9d:9e:d8:e4:b2:77:1e:b3:14:4e:00:3e:ce:8a:
c5:b9:d7:79:c9:bd:19:db:4f:d2:d1:6b:11:bc:10:c3:34:49:
01:ff:c3:cd:c2:ae:db:af:e7:bb:f0:48:3a:bc:d9:b3:5f:81:
2b:f3:08:9e:3b:27:a2:e6:b2:40:a6:99:ef:a1:e5:08:e7:7c:
61:ea:88:3e:f8:4e:5f:b8:45:5d:dd:a5:bf:cb:fd:71:87:1d:
9d:09:81:40:c0:f0:e6:02:6c:af:d2:24:d2:52:d8:9b:20:7c:
8b:e7:38:7c:5d:aa:c3:c0:75:91:c8:18:9b:07:36:45:44:a2:
d0:30:dd:28:7f:ca:64:b1:a2:6b:b9:c1:f2:9f:23:25:69:6e:
91:3c:cb:f8:3f:ed:73:49:ee:09:5f:90:0d:09:21:2d:af:9b:
c7:b3:ee:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:50:13 2025 by rpki-client