Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NZGO__2e-RPWE81qf7fwVfobecY.roa
File: NZGO__2e-RPWE81qf7fwVfobecY.roa (raw, json)
Hash identifier: Z9V0SZTfU+2sKHUkD0PKzAEM60wqM1EgTMG9iApP7UA=
Subject key identifier: 35:91:8E:FF:FD:9E:F9:13:D6:13:CD:6A:7F:B7:F0:55:FA:1B:79:C6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01969F225CDABF9ACCEEE738DA85F32E7959
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NZGO__2e-RPWE81qf7fwVfobecY.roa
Signing time: Mon 05 May 2025 06:29:11 +0000
ROA not before: Mon 05 May 2025 06:29:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215137
IP address blocks: 85.202.203.0/24 maxlen: 24
2a0e:97c1::/40 maxlen: 48
2a10:2f00:167::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 14 May 2025 18:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:22:5c:da:bf:9a:cc:ee:e7:38:da:85:f3:2e:79:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 5 06:29:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=35918efffd9ef913d613cd6a7fb7f055fa1b79c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:58:8e:43:58:2b:b3:8b:72:04:b2:2f:21:30:
a4:1e:6a:96:35:e8:53:c1:b5:fd:86:06:cc:22:ce:
15:dd:22:f7:4e:22:29:bf:73:97:31:97:de:51:90:
98:3e:f2:47:5c:7d:91:30:b6:03:2d:b6:71:2a:10:
56:df:3e:2c:72:82:b0:64:61:9a:07:8e:9a:b4:a8:
8c:3e:7d:e7:05:b0:bd:d8:ed:e8:6a:a4:e0:6d:5c:
12:d8:6f:0e:90:48:88:64:a0:9e:0d:3e:50:f2:8f:
65:c8:d6:33:25:0c:79:49:1f:84:fa:84:cf:05:1a:
b9:06:1f:7c:66:d7:33:a9:f5:9e:f4:17:32:ae:45:
4e:87:9c:36:8b:b8:2d:6d:a3:c0:22:e2:92:f3:90:
bc:ad:d3:71:77:68:e0:45:2f:55:a8:68:ed:ad:ab:
ad:d4:e7:8a:da:20:f5:3a:d3:10:b0:d2:67:ca:a5:
57:5b:d6:e0:ee:6c:14:8a:8d:57:7d:d6:db:4e:df:
64:ff:30:3b:d3:1a:81:a1:3d:d9:b5:73:31:35:b0:
b8:82:d8:06:ae:1d:6f:90:c4:11:29:ff:6b:76:57:
b3:02:86:6e:ef:5b:45:cd:b1:da:a4:52:fc:46:bc:
f7:e7:c5:29:7b:c8:67:ea:08:c9:14:84:29:24:99:
1d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:91:8E:FF:FD:9E:F9:13:D6:13:CD:6A:7F:B7:F0:55:FA:1B:79:C6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/NZGO__2e-RPWE81qf7fwVfobecY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
IPv6:
2a0e:97c1::/40
2a10:2f00:167::/48
Signature Algorithm: sha256WithRSAEncryption
af:7a:ad:fe:95:55:9b:10:f4:de:61:7c:65:c9:24:77:6c:41:
1c:14:fa:cc:6b:99:3d:f9:c4:aa:44:cb:f5:4b:3c:98:26:55:
22:6b:cf:86:3b:ba:e2:95:b0:b8:11:cc:ce:7c:22:60:ff:c4:
82:d0:34:b5:08:c3:95:55:34:f4:1a:17:33:5b:2b:5d:4f:97:
b2:52:76:18:3f:1b:19:ce:91:ca:47:d3:89:6e:58:cd:7d:b4:
2b:01:d7:43:49:cc:d8:65:40:49:05:32:c6:30:41:c7:58:ee:
7b:10:51:a8:d1:42:f8:ad:9b:ab:2d:17:ce:89:aa:a9:1f:f8:
55:a6:14:75:11:cf:1d:4d:30:9c:3f:3b:57:38:b3:82:b6:a9:
67:f4:56:7d:b6:f4:b4:ff:69:c7:ed:41:40:ee:71:a2:99:32:
47:e0:98:65:48:ee:09:b2:74:39:00:ff:cc:d0:68:54:d7:e7:
7b:19:71:5b:b6:15:b1:b5:6a:68:69:9a:c9:6b:ef:b5:6d:cf:
5e:e9:53:42:4a:df:55:65:23:e1:0e:98:02:25:8b:44:29:a4:
60:e3:14:4c:70:22:40:cd:3e:a0:17:8c:20:8f:40:00:49:25:
fa:a7:4c:f9:37:7b:99:0c:b3:38:4b:26:a0:cc:21:94:0a:d8:
20:2d:7f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 13:42:10 2025 by rpki-client