Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/zVa0xrJeyaDpdTXot4KM9JHv0Kg.roa
File: zVa0xrJeyaDpdTXot4KM9JHv0Kg.roa (raw, json)
Hash identifier: zUcJPvgfsplisCUfdhRGdKlvTVlAYdhDe/cx3MYoABw=
Subject key identifier: CD:56:B4:C6:B2:5E:C9:A0:E9:75:35:E8:B7:82:8C:F4:91:EF:D0:A8
Certificate issuer: /CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Certificate serial: 019687D69A8B4681736722DB478995783C5B
Authority key identifier: 26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/zVa0xrJeyaDpdTXot4KM9JHv0Kg.roa
Signing time: Wed 30 Apr 2025 17:55:10 +0000
ROA not before: Wed 30 Apr 2025 17:55:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206873
IP address blocks: 2a0d:cdc7::/32 maxlen: 32
2a0e:7f02::/32 maxlen: 32
2a0e:7f03::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 07 May 2025 17:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:d6:9a:8b:46:81:73:67:22:db:47:89:95:78:3c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260b2bc45477c81d774daa0c28ab44b774ba0920
Validity
Not Before: Apr 30 17:55:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd56b4c6b25ec9a0e97535e8b7828cf491efd0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2a:f0:9d:98:22:50:25:a8:f3:ce:69:e2:ff:
c4:5d:93:35:e6:a8:50:e9:10:a7:bd:3d:74:ae:c2:
be:92:33:05:1c:0c:e7:00:06:a1:e2:eb:ca:c0:45:
56:fc:32:32:8d:e7:c7:0a:82:75:c7:8d:e3:fa:8b:
3b:7a:1e:95:ca:9c:c4:4a:5f:d9:d0:7d:bd:b5:d4:
e9:c1:91:60:b0:bd:5e:6f:54:a5:37:04:f5:f7:40:
12:03:c8:7e:ee:35:f3:7f:1d:83:ff:7f:64:fa:f1:
c8:91:d0:34:56:1e:b7:e2:aa:81:88:7f:9d:dc:9c:
f8:7e:0f:be:54:c1:0d:68:77:f4:24:d1:ee:5c:a8:
6d:26:48:ca:c0:8a:86:e9:73:1d:94:47:6f:59:ee:
a8:1d:6b:60:3b:e6:1d:46:24:76:0b:b3:b1:f8:3e:
03:0e:1a:15:e7:d4:52:fc:6c:58:1d:64:22:69:fa:
03:c0:44:30:07:b4:be:49:62:4e:26:d3:57:bd:a0:
85:a1:18:9f:ff:78:fa:57:f5:de:89:25:21:09:f2:
43:1f:71:7f:82:a2:e0:cf:b8:d3:84:64:b5:e3:ac:
96:c4:33:21:2a:bd:8e:4a:71:1a:c6:c1:14:f0:0f:
b8:f2:6e:71:96:85:a5:0b:4e:4f:67:d5:5e:c1:12:
f0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:56:B4:C6:B2:5E:C9:A0:E9:75:35:E8:B7:82:8C:F4:91:EF:D0:A8
X509v3 Authority Key Identifier:
keyid:26:0B:2B:C4:54:77:C8:1D:77:4D:AA:0C:28:AB:44:B7:74:BA:09:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JgsrxFR3yB13TaoMKKtEt3S6CSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/zVa0xrJeyaDpdTXot4KM9JHv0Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7b1205-3450-4e90-8b14-17e66c1fd3d1/1/JgsrxFR3yB13TaoMKKtEt3S6CSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:cdc7::/32
2a0e:7f02::/31
Signature Algorithm: sha256WithRSAEncryption
c2:61:e2:6d:56:93:f2:78:94:27:fb:c6:5c:97:85:6a:a4:79:
64:2d:26:12:34:28:8d:55:b4:33:5b:1e:94:a5:51:8e:bd:31:
6d:34:24:36:14:14:94:96:bc:cc:18:7b:cc:68:76:3d:1b:38:
79:de:30:19:e5:79:1f:73:33:28:1a:1e:a6:ec:06:17:ca:33:
10:d4:e1:8c:f1:d3:ca:0c:d4:0f:1a:a6:dc:3c:7e:9c:4e:8f:
4b:b6:ab:aa:6f:c8:1d:d3:24:b3:23:c5:1a:20:db:5f:d9:72:
5b:dd:3f:c0:9e:53:04:e7:b5:57:5f:a7:b3:c8:ca:8a:6c:f7:
22:12:17:f9:48:f3:03:d4:b8:14:35:3e:07:45:98:33:e8:15:
59:a8:04:a1:f7:89:ee:5f:5b:a7:55:bb:d3:b4:28:41:b9:db:
82:26:7d:73:b8:8a:5f:1f:e2:99:83:39:14:68:ee:18:f5:a9:
27:c6:23:46:5a:e1:db:b1:94:87:0a:ea:f5:6e:a4:5c:2c:86:
e4:a1:02:c2:9c:71:3c:5f:b7:d7:82:e2:a0:95:0e:71:a2:e8:
01:c9:63:1c:69:45:a1:06:3b:47:02:c3:2e:7c:7a:bb:08:b2:
ed:e7:8e:78:30:7d:a0:6a:33:d3:70:38:cc:15:f2:1c:15:1a:
41:dd:bd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:37:16 2025 by rpki-client