Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zv4Gz2X39ToPbpqRuQV74uFfPAw.roa
File: Zv4Gz2X39ToPbpqRuQV74uFfPAw.roa (raw, json)
Hash identifier: U36ZwRBYNb7aYFVvsLpAr+NPu729NZPuxa46phKFQxU=
Subject key identifier: 66:FE:06:CF:65:F7:F5:3A:0F:6E:9A:91:B9:05:7B:E2:E1:5F:3C:0C
Certificate issuer: /CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Certificate serial: 019709434C8DDA97974FEADEC006F97CF596
Authority key identifier: 7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zv4Gz2X39ToPbpqRuQV74uFfPAw.roa
Signing time: Sun 25 May 2025 21:04:54 +0000
ROA not before: Sun 25 May 2025 21:04:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 2001:67c:64:ffff:0:196:ed5d:8c28/128 maxlen: 128
2001:67c:64:ffff:0:197:942:798c/128 maxlen: 128
Validation: Failed, certificate revoked on Sun 25 May 2025 21:11:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:09:43:4c:8d:da:97:97:4f:ea:de:c0:06:f9:7c:f5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7acd817f25893e7f88b3f3affa9152c66d6b6702
Validity
Not Before: May 25 21:04:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66fe06cf65f7f53a0f6e9a91b9057be2e15f3c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:62:41:25:f5:e9:c3:30:1a:c0:63:74:a8:2a:
30:2d:29:8e:bd:74:d4:c0:af:14:99:fc:f3:d8:6d:
33:1d:07:ad:60:72:b0:a2:79:94:fd:42:2b:e5:62:
e6:6f:9c:21:34:45:59:ba:7e:f2:eb:52:cf:ef:3e:
83:3b:97:39:46:59:04:8c:e6:7b:6c:21:c5:db:c4:
18:a7:1c:00:09:0c:cd:f3:58:d6:ef:77:2f:50:ea:
57:ce:19:05:a4:2a:95:f0:44:c3:bf:69:fc:ab:27:
c1:ea:3e:b3:fe:e3:b6:63:12:65:d0:87:81:62:93:
dc:2c:cd:04:1c:80:d3:18:d2:2b:ec:56:87:49:87:
3a:fd:08:17:34:c8:71:08:99:48:5a:e9:f9:e1:3d:
fe:10:d0:1b:64:c4:3e:14:51:d0:13:74:31:3b:7d:
1d:2b:e9:14:f2:d2:28:5a:0f:4a:78:08:0c:bd:5d:
de:52:15:44:7d:7f:df:2b:5d:be:af:9b:9c:c8:87:
57:9c:7c:5e:c0:e2:db:50:cb:1a:88:e2:71:1a:14:
54:03:3c:bc:ba:a6:0e:c2:c6:a9:09:12:f1:c0:03:
b8:0f:97:2d:0f:03:1d:c3:08:e5:44:a4:5e:09:1d:
8e:a3:ec:af:44:e6:ee:04:ec:7e:af:12:49:0f:7c:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FE:06:CF:65:F7:F5:3A:0F:6E:9A:91:B9:05:7B:E2:E1:5F:3C:0C
X509v3 Authority Key Identifier:
keyid:7A:CD:81:7F:25:89:3E:7F:88:B3:F3:AF:FA:91:52:C6:6D:6B:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es2BfyWJPn-Is_Ov-pFSxm1rZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/Zv4Gz2X39ToPbpqRuQV74uFfPAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/c56a1e-326d-4c67-a0b2-90eb95109d89/1/es2BfyWJPn-Is_Ov-pFSxm1rZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:64:ffff:0:196:ed5d:8c28/128
2001:67c:64:ffff:0:197:942:798c/128
Signature Algorithm: sha256WithRSAEncryption
3d:3d:c9:ed:83:33:83:97:57:d1:07:62:00:d7:84:dd:19:81:
e5:c6:aa:58:b0:cc:06:95:19:ee:23:6a:2e:55:8d:0a:31:41:
ae:24:42:a5:7f:ed:fb:a8:fd:8b:0a:b9:65:f7:89:e2:5e:2d:
44:6f:9e:d3:dd:ae:de:51:bd:b7:3d:85:c7:2c:b8:2a:6d:21:
bb:00:6f:5e:ae:20:39:d6:34:67:2c:7f:57:47:4b:c8:77:9d:
59:8c:e6:fe:6b:70:37:90:72:57:fc:ac:06:17:79:a4:f7:58:
74:2a:aa:c0:4a:e0:8e:74:21:5c:1d:5b:cf:89:6d:8d:40:0d:
74:99:8a:b0:a5:f1:d2:a5:14:44:6b:fa:7c:50:9a:f2:70:20:
5c:f7:ea:b7:8c:2d:fe:e6:30:59:28:0c:d3:50:25:50:07:f1:
9f:ef:ee:93:4d:82:8a:d0:15:fb:99:75:c2:d8:48:b2:96:71:
11:17:2b:c1:a0:12:7a:f7:a5:87:12:01:10:6e:2e:65:1e:8a:
b5:f8:bd:70:5b:76:ac:f8:1e:82:86:72:85:bd:74:72:ef:b9:
9f:9b:02:45:8c:b1:be:26:e1:a7:40:7d:57:a3:3d:f7:bd:5e:
5c:54:70:21:bb:42:ab:f4:b1:0c:67:83:c0:a5:a7:67:53:79:
44:68:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:44:07 2025 by rpki-client