Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/zeJnOiP4tMnKbUXhbPIuIbFEjro.roa
File: zeJnOiP4tMnKbUXhbPIuIbFEjro.roa (raw, json)
Hash identifier: B3vZ1LJvCqN5x+RnuxTtfOfw2xVnadjr1GHoi2KPuPU=
Subject key identifier: CD:E2:67:3A:23:F8:B4:C9:CA:6D:45:E1:6C:F2:2E:21:B1:44:8E:BA
Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Certificate serial: 0195C7B8297E9C6B47AB0B0A805613B741CC
Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/zeJnOiP4tMnKbUXhbPIuIbFEjro.roa
Signing time: Mon 24 Mar 2025 10:34:50 +0000
ROA not before: Mon 24 Mar 2025 10:34:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211615
IP address blocks: 2a12:5840:2410::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 24 Mar 2025 20:04:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c7:b8:29:7e:9c:6b:47:ab:0b:0a:80:56:13:b7:41:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f
Validity
Not Before: Mar 24 10:34:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cde2673a23f8b4c9ca6d45e16cf22e21b1448eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:ff:67:13:00:41:9b:3f:d9:87:3e:5a:47:
46:45:ed:30:7b:e9:e3:1b:d9:ff:35:d9:05:3f:6f:
74:8e:93:2d:4f:1b:35:11:2d:04:29:63:82:99:56:
23:ee:70:b6:fd:7f:08:a6:93:6f:8a:5e:c0:75:a9:
9a:9a:ec:20:da:bf:47:a7:84:e5:2a:d1:a7:21:12:
26:2a:bb:c1:a0:ef:b4:fb:b7:32:97:58:ef:f1:f3:
18:77:a3:56:f0:bc:9f:23:eb:c7:4b:67:7c:2a:92:
78:43:b0:12:ab:33:29:f0:07:6c:95:35:7a:04:d4:
4d:d9:78:b5:64:58:09:64:c6:f8:fa:68:ec:3d:f6:
17:3c:6c:fa:02:a7:c6:e7:25:2b:03:83:ce:92:25:
66:0b:6e:e6:71:a8:90:74:18:56:0f:e3:f4:be:42:
f3:07:e8:a8:fd:3a:69:62:c7:52:93:72:ac:c6:8c:
ca:dd:6f:08:07:4e:7e:8d:f5:97:a7:d4:b4:c0:71:
14:31:55:3e:eb:b5:44:36:50:87:c8:64:d5:36:19:
51:3b:70:4f:ab:7d:54:f0:f9:22:d5:e2:a8:9b:60:
44:7e:43:99:5b:b6:74:2f:a2:3d:7e:04:d8:d7:b8:
1c:70:7e:31:4e:e8:1c:fe:28:23:7c:64:53:0e:73:
40:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E2:67:3A:23:F8:B4:C9:CA:6D:45:E1:6C:F2:2E:21:B1:44:8E:BA
X509v3 Authority Key Identifier:
keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/zeJnOiP4tMnKbUXhbPIuIbFEjro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5840:2410::/44
Signature Algorithm: sha256WithRSAEncryption
5b:32:d6:79:62:54:9d:3a:b1:cc:6a:45:55:7c:aa:e9:14:c7:
16:6c:90:f6:38:04:67:a6:6b:3f:f0:88:f3:74:2e:97:9c:34:
23:64:71:44:1a:e1:40:73:f9:85:e8:22:eb:8e:06:c4:8d:17:
d6:c8:97:df:c8:0d:40:fe:c7:a5:d8:94:0a:8e:e0:8b:1e:b4:
05:e0:1c:f0:1a:80:2f:d6:13:ea:f7:ee:25:f7:81:99:da:d8:
3e:8e:f2:23:1b:e3:73:ea:34:6e:c0:14:52:47:2b:42:95:7a:
0e:35:c1:3e:08:96:9f:60:c0:8c:da:0e:63:fd:5b:3d:cb:9d:
32:56:f8:85:a0:4d:51:3b:29:3a:a4:25:98:77:58:64:33:f9:
29:57:92:46:44:f4:b2:37:60:aa:bc:e2:c2:25:5d:2b:cb:e5:
80:e2:62:9e:ff:ff:84:3c:cd:a7:a7:5b:e7:43:3c:19:db:fd:
da:8f:a1:8c:96:55:35:d5:47:e5:a0:e1:70:ba:82:1e:f6:e4:
d2:ad:4e:b7:dc:c2:41:64:a6:f0:7b:06:ad:30:e5:46:8c:1d:
3b:9d:ab:10:b1:76:c9:32:74:dd:9c:8b:12:5c:46:97:58:72:
c5:c6:01:6c:8b:8e:ac:a2:bb:0d:58:d3:b6:68:69:54:f6:6d:
97:67:d8:60
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZXHuCl+nGtHqwsKgFYTt0HMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1
ZWI1NmYwHhcNMjUwMzI0MTAzNDUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZGUyNjczYTIzZjhiNGM5Y2E2ZDQ1ZTE2Y2YyMmUyMWIxNDQ4ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8X/ZxMAQZs/2Yc+WkdGRe0we+nj
G9n/NdkFP290jpMtTxs1ES0EKWOCmVYj7nC2/X8IppNvil7Adamamuwg2r9Hp4Tl
KtGnIRImKrvBoO+0+7cyl1jv8fMYd6NW8LyfI+vHS2d8KpJ4Q7ASqzMp8AdslTV6
BNRN2Xi1ZFgJZMb4+mjsPfYXPGz6AqfG5yUrA4POkiVmC27mcaiQdBhWD+P0vkLz
B+io/TppYsdSk3KsxozK3W8IB05+jfWXp9S0wHEUMVU+67VENlCHyGTVNhlRO3BP
q31U8Pki1eKom2BEfkOZW7Z0L6I9fgTY17gccH4xTugc/igjfGRTDnNAfQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFM3iZzoj+LTJym1F4WzyLiGxRI66MB8GA1UdIwQY
MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt
MzU2YzRkN2JiNDUyLzEvemVKbk9pUDR0TW5LYlVYaGJQSXVJYkZFanJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy
LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhJYQCQQ
MA0GCSqGSIb3DQEBCwUAA4IBAQBbMtZ5YlSdOrHMakVVfKrpFMcWbJD2OARnpms/
8IjzdC6XnDQjZHFEGuFAc/mF6CLrjgbEjRfWyJffyA1A/sel2JQKjuCLHrQF4Bzw
GoAv1hPq9+4l94GZ2tg+jvIjG+Nz6jRuwBRSRytClXoONcE+CJafYMCM2g5j/Vs9
y50yVviFoE1ROyk6pCWYd1hkM/kpV5JGRPSyN2CqvOLCJV0ry+WA4mKe//+EPM2n
p1vnQzwZ2/3aj6GMllU11UfloOFwuoIe9uTSrU633MJBZKbwewatMOVGjB07nasQ
sXbJMnTdnIsSXEaXWHLFxgFsi46sorsNWNO2aGlU9m2XZ9hg
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:50:51 2025 by rpki-client