Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/8tID_ZriG1F924qcMW0_1nurOig.roa
File: 8tID_ZriG1F924qcMW0_1nurOig.roa (raw, json)
Hash identifier: cckVS2Ftla1NfC4JcTtQofrgoWklDzEBs3R31JwOdHo=
Subject key identifier: F2:D2:03:FD:9A:E2:1B:51:7D:DB:8A:9C:31:6D:3F:D6:7B:AB:3A:28
Certificate issuer: /CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Certificate serial: 0193C0DAA00F44C4BAECDAF679F81748D45B
Authority key identifier: DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/8tID_ZriG1F924qcMW0_1nurOig.roa
Signing time: Fri 13 Dec 2024 16:29:33 +0000
ROA not before: Fri 13 Dec 2024 16:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 553
IP address blocks: 141.18.0.0/16 maxlen: 16
Validation: Failed, certificate revoked on Wed 01 Jan 2025 21:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:c0:da:a0:0f:44:c4:ba:ec:da:f6:79:f8:17:48:d4:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daae2de54da28c73f19b3e04ef9574e99057f1a2
Validity
Not Before: Dec 13 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2d203fd9ae21b517ddb8a9c316d3fd67bab3a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9b:8f:21:28:0a:9a:3a:42:13:39:d3:a2:ea:
4a:f3:ea:92:35:40:3a:bb:10:b6:08:42:ab:df:89:
15:9e:00:7a:37:48:b8:1b:8d:02:a8:7b:a4:be:20:
ea:9e:e3:17:55:45:ef:d5:72:0d:7c:37:fe:c5:ec:
a4:bc:76:3d:3a:15:3d:d6:80:e5:b7:c1:c8:7f:8d:
58:cd:44:e3:9d:2a:c4:cb:b8:bf:3a:b8:2e:b4:64:
f0:bd:85:47:26:b8:44:b7:ef:6b:de:3b:78:0b:fb:
7c:70:8a:0c:4e:f4:48:b0:9c:ea:c0:ba:3c:25:db:
09:7e:cf:ec:0f:99:0f:34:13:ac:8d:34:b2:77:75:
9b:56:5f:ca:18:5f:5b:3a:50:a1:36:cb:3d:71:a3:
e7:51:2f:5e:af:32:bf:a8:91:fb:c8:ce:09:58:e7:
a1:0c:10:86:9a:6f:93:c6:58:17:11:a0:f3:c7:c9:
dd:24:0b:20:5c:81:dd:39:81:5e:c4:98:32:59:09:
9c:68:23:95:8b:52:14:a7:f5:e3:31:37:fc:20:b1:
6c:f4:9e:1f:e6:6a:a5:43:60:f8:22:66:eb:23:05:
00:62:00:3e:14:c0:40:f2:1f:76:08:6b:33:e4:f6:
48:6a:f3:dc:09:c7:e7:56:de:24:ac:e9:b4:22:35:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D2:03:FD:9A:E2:1B:51:7D:DB:8A:9C:31:6D:3F:D6:7B:AB:3A:28
X509v3 Authority Key Identifier:
keyid:DA:AE:2D:E5:4D:A2:8C:73:F1:9B:3E:04:EF:95:74:E9:90:57:F1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q4t5U2ijHPxmz4E75V06ZBX8aI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/8tID_ZriG1F924qcMW0_1nurOig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e3aeb7-ca10-4326-8b1c-6008e60cd30b/1/2q4t5U2ijHPxmz4E75V06ZBX8aI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
03:99:06:65:9e:37:6d:61:8a:03:7e:4c:f5:b7:b9:07:de:51:
1c:5d:4e:00:f9:bb:72:90:72:78:4a:fd:a0:19:b3:17:c9:64:
0b:2e:2c:1a:14:fe:ba:46:92:49:ed:fd:54:82:a1:9a:f6:f2:
e7:ca:79:0b:0f:7e:e4:21:5f:e7:39:b8:a5:a4:33:50:d9:7d:
87:b1:79:e6:e6:46:90:e5:e4:f4:3d:47:ca:f4:e7:f6:fb:7f:
ce:5c:53:a3:c0:89:95:c5:58:bc:fa:06:8d:fe:52:5f:a6:fa:
52:78:cc:94:c9:15:9d:16:24:36:99:b0:3b:f1:00:3f:65:e0:
27:36:70:11:c7:62:26:00:df:84:4d:bb:51:57:1b:a4:d5:63:
6e:bb:cf:d1:3e:f9:6a:9a:22:5f:23:ff:b9:0f:b8:84:af:4c:
5c:af:d2:2c:46:57:3d:68:7d:e2:ed:9a:52:d2:49:7b:34:b9:
0a:14:ec:83:86:ec:10:01:9a:db:0e:e0:e2:de:cb:13:f8:e6:
88:3c:af:09:bf:1c:ee:97:f5:85:35:85:8e:35:93:d0:a5:3f:
99:20:f5:53:53:e0:15:02:5b:99:3b:1f:db:fb:5a:09:e2:27:
33:14:0e:dc:64:f6:e1:17:d0:e0:2d:b1:8f:1a:f1:72:f1:4b:
56:8f:27:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:21:52 2025 by rpki-client