Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZmQoAKPQQu2YdwHd5A9rLo6qJrI.roa
File: ZmQoAKPQQu2YdwHd5A9rLo6qJrI.roa (raw, json)
Hash identifier: LGRSQORvsNCTV/jgmuClROGHrKuvwbbpi/QfdqHJOR8=
Subject key identifier: 66:64:28:00:A3:D0:42:ED:98:77:01:DD:E4:0F:6B:2E:8E:AA:26:B2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019538AC2D53AFFFB4FD552DAC2BE647CC4A
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZmQoAKPQQu2YdwHd5A9rLo6qJrI.roa
Signing time: Mon 24 Feb 2025 15:56:02 +0000
ROA not before: Mon 24 Feb 2025 15:56:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214734
IP address blocks: 2a0f:1440::/29 maxlen: 29
2a12:4ac0::/29 maxlen: 29
Validation: Failed, certificate revoked on Thu 27 Feb 2025 08:14:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:38:ac:2d:53:af:ff:b4:fd:55:2d:ac:2b:e6:47:cc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Feb 24 15:56:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66642800a3d042ed987701dde40f6b2e8eaa26b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:eb:5d:85:bd:ac:4d:6b:80:31:2c:ec:01:c5:
e1:e1:6b:b8:c6:8e:06:65:38:99:47:d9:58:52:1b:
30:ea:38:00:39:03:62:8f:1f:68:e0:4c:89:ca:15:
d7:e9:3d:f9:16:9b:b8:1d:16:c9:84:91:e8:f0:e9:
82:d7:bc:5c:ec:76:0c:68:fd:ac:02:53:2f:5f:27:
94:40:95:4b:ea:e1:d7:13:59:15:c7:a5:7a:1e:ed:
9e:10:b1:08:ce:38:cc:4b:81:e6:21:95:6a:c1:15:
a3:7a:6f:33:db:46:fe:fc:7c:91:f6:cb:b9:4d:3d:
d6:65:12:f0:12:3f:9d:07:f6:79:2c:6d:a0:fc:11:
31:b3:fa:08:aa:90:ce:fc:5e:8d:72:93:c5:35:ca:
c2:8a:49:c0:06:49:eb:66:f7:56:17:15:d5:76:4b:
8b:e1:6a:9d:a9:17:50:50:04:40:60:c4:53:b9:fa:
d0:e2:fa:d4:8d:c0:86:d4:a2:af:1f:75:52:65:f1:
d3:91:5a:bf:1c:7e:d2:d4:b7:68:82:0b:53:4c:c0:
1e:dc:10:a6:8b:68:0e:7d:a4:c4:43:a4:26:c0:7e:
5c:3c:aa:91:25:9a:8c:89:10:2f:27:63:a8:89:9c:
49:16:8a:2c:5d:bc:56:a9:d6:51:19:32:3c:18:49:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:64:28:00:A3:D0:42:ED:98:77:01:DD:E4:0F:6B:2E:8E:AA:26:B2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/ZmQoAKPQQu2YdwHd5A9rLo6qJrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:1440::/29
2a12:4ac0::/29
Signature Algorithm: sha256WithRSAEncryption
95:30:9b:19:81:97:7e:fb:02:0b:8a:9d:68:e1:6a:d7:d6:b4:
fc:ac:ef:d5:cb:71:55:73:3c:23:a8:06:c6:17:fd:ba:fc:c5:
0d:95:eb:25:ff:0a:af:b2:b5:66:de:69:0b:54:9e:44:22:84:
de:79:a7:8c:0d:81:79:2e:a0:e1:46:88:9e:f8:fe:b4:66:24:
c5:20:b0:81:58:72:0e:2f:2c:d7:a9:5e:84:0c:19:dc:b4:0e:
10:11:da:62:54:5d:45:4e:8f:5a:cf:99:7b:bf:82:48:05:19:
f9:e4:c8:49:45:90:f0:8f:a5:e2:de:e2:1d:78:f0:8a:4b:ad:
ea:86:12:82:8a:f9:8f:a2:57:1a:39:1d:36:d1:15:f2:04:93:
d5:ec:53:3a:4a:7e:37:2e:09:e7:23:96:43:b5:3b:79:1b:1e:
2b:5a:0e:e5:1c:1c:ef:fe:31:ee:b3:2b:cf:98:d7:61:16:fc:
46:6e:38:b8:4c:ea:fd:16:86:e1:bc:14:c4:1d:31:e3:d3:14:
62:a1:76:67:3d:4c:be:5c:4c:ec:ec:37:c7:60:df:bd:53:3f:
25:ba:97:b9:86:fc:71:14:a5:5e:8e:76:64:fd:0f:29:4b:4e:
32:a4:6a:91:04:db:c8:2b:af:17:15:6b:78:64:c4:d9:ac:00:
2e:98:b2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:16:02 2025 by rpki-client