Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Zs7jmvu2Rw3XDTnqUd1YVe6tIPI.roa
File: Zs7jmvu2Rw3XDTnqUd1YVe6tIPI.roa (raw, json)
Hash identifier: QIIj+zV5tJzLcorqXTDekcKw37aYo293EKZ9YjabMww=
Subject key identifier: 66:CE:E3:9A:FB:B6:47:0D:D7:0D:39:EA:51:DD:58:55:EE:AD:20:F2
Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial: 0193B9DF5926BEB0D9F7CFACCE060A8E86D8
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Zs7jmvu2Rw3XDTnqUd1YVe6tIPI.roa
Signing time: Thu 12 Dec 2024 07:57:22 +0000
ROA not before: Thu 12 Dec 2024 07:57:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197035
IP address blocks: 2a02:2000:3c5::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 19:48:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b9:df:59:26:be:b0:d9:f7:cf:ac:ce:06:0a:8e:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
Validity
Not Before: Dec 12 07:57:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66cee39afbb6470dd70d39ea51dd5855eead20f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b7:0d:b8:43:6e:f4:ae:65:97:53:a0:3c:6c:
0d:79:16:7f:33:24:23:df:33:54:c9:31:24:0d:78:
32:14:a7:20:5a:22:aa:c4:8f:75:6b:39:fb:56:34:
36:f0:0d:04:f9:9e:a7:13:11:6e:e4:be:6e:f3:45:
cc:db:f6:64:f8:8b:ab:52:1b:2b:a7:62:17:60:f9:
2a:69:12:ba:14:d4:05:d6:7d:6d:7b:98:18:5e:b3:
7b:8b:8f:54:19:c4:b6:95:29:04:cc:8b:4f:b3:29:
14:c7:9c:3b:23:7f:96:0b:cb:97:34:bd:d2:d4:36:
77:db:5c:f0:5f:8c:2a:08:ba:3f:20:7d:58:8f:cc:
a8:00:d4:c4:b9:9a:7b:9d:27:ad:eb:c4:ca:70:09:
99:73:d3:e8:b6:11:45:99:b7:d5:9c:c7:cf:af:c9:
33:7f:74:0b:91:bd:f2:0c:2e:cb:41:3e:73:a6:0a:
b6:31:65:29:41:60:5c:87:f3:f7:9a:f9:67:20:60:
01:51:81:1e:39:f0:a2:0d:34:f1:c6:ff:e1:41:b4:
02:fa:0f:39:23:71:af:82:be:e3:92:a3:65:5e:c2:
ba:99:fa:01:5f:81:b5:41:63:c3:a9:87:97:11:e2:
67:cd:74:cb:41:13:ab:2f:6f:d2:06:f3:98:3f:bd:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:E3:9A:FB:B6:47:0D:D7:0D:39:EA:51:DD:58:55:EE:AD:20:F2
X509v3 Authority Key Identifier:
keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/Zs7jmvu2Rw3XDTnqUd1YVe6tIPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2000:3c5::/48
Signature Algorithm: sha256WithRSAEncryption
88:c1:8c:30:ee:f1:61:5e:57:7d:2a:42:52:17:f9:ec:c4:0e:
f2:ef:86:c8:20:89:e2:88:91:3f:fa:04:f8:28:b8:71:d8:62:
99:d6:eb:2a:bf:b6:d9:c9:e9:9d:e3:c1:4e:53:25:99:69:4d:
d3:c2:67:a5:54:32:83:a9:26:a1:54:85:dc:63:74:e9:ce:a1:
b2:b4:69:b6:97:7a:ea:21:6f:2c:d9:0c:ed:75:40:a2:2c:c6:
9e:13:90:0e:71:db:f5:23:66:00:c6:90:d0:54:3b:dc:a0:79:
a0:1d:ce:2c:0d:0b:a2:31:4c:ee:93:ff:00:83:4b:97:2a:55:
b8:14:52:a6:27:f1:b2:32:15:06:f5:d3:11:da:ac:1a:24:81:
80:fe:93:df:02:9a:2b:3f:9c:b0:e4:71:c6:db:80:70:70:3e:
43:91:25:b7:31:2e:17:b3:9d:f4:98:c6:de:b8:71:aa:1b:12:
19:80:ce:e6:c6:24:76:33:72:e7:b9:7a:02:c1:01:36:96:ee:
92:ea:4b:70:d5:f0:ac:b4:a9:41:39:5b:aa:b6:31:c9:65:bb:
12:8c:4c:61:60:60:7c:77:10:f9:b3:e5:aa:e4:70:9c:16:ed:
a9:74:1e:b2:b7:ce:d1:b5:bf:70:a4:64:8f:a4:7a:26:12:46:
5c:ce:48:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 07:36:58 2025 by rpki-client