Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Zp3KAal3f6WKmETAbcxlobAMEdY.roa
File: Zp3KAal3f6WKmETAbcxlobAMEdY.roa (raw, json)
Hash identifier: QGJGC0rr7QvcZjqcd5D0ZOqM8urbipuq5WJFGFMjMH8=
Subject key identifier: 66:9D:CA:01:A9:77:7F:A5:8A:98:44:C0:6D:CC:65:A1:B0:0C:11:D6
Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Certificate serial: 018F86FE0293B827E8E980251EB9DA73BE5C
Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Zp3KAal3f6WKmETAbcxlobAMEdY.roa
Signing time: Fri 17 May 2024 14:39:04 +0000
ROA not before: Fri 17 May 2024 14:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3209
IP address blocks: 2a01:800::/24 maxlen: 24
2a01:860::/32 maxlen: 32
2a01:867::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 20 Jun 2024 11:24:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:86:fe:02:93:b8:27:e8:e9:80:25:1e:b9:da:73:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2
Validity
Not Before: May 17 14:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=669dca01a9777fa58a9844c06dcc65a1b00c11d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:9e:32:14:cf:ed:d3:58:54:5c:41:3a:16:
a0:2c:9d:b2:fb:ce:eb:73:75:b0:76:36:23:ed:cc:
7d:4e:4d:01:7c:4a:54:8e:83:35:84:ca:a2:e6:45:
75:d3:51:b7:45:2b:c0:88:7f:a5:4d:06:52:cb:7e:
ab:8a:4d:2b:cd:67:2e:51:85:c5:0a:87:c2:c5:be:
9d:6c:12:15:8c:63:0f:48:24:3d:b0:eb:4e:04:ae:
2e:af:28:38:cc:9d:ca:96:cd:46:95:27:f8:53:a2:
89:26:7b:9e:d0:cb:6a:ea:cc:aa:77:ae:29:35:0f:
a6:4d:54:d7:ed:4f:ce:e6:57:af:57:df:dd:6c:2a:
5b:fd:42:ca:bb:96:10:3f:0d:b1:6f:c5:93:88:dc:
68:62:c7:58:70:6f:2c:3a:d7:c5:2c:64:25:6d:fe:
40:3b:01:82:e2:57:d4:89:9e:37:67:b7:8c:2e:16:
3a:0a:7d:08:82:64:ad:5b:53:66:4a:27:c6:61:dd:
6b:6d:38:cb:81:47:a5:ce:3d:78:33:5d:e1:33:bc:
10:df:4b:4f:08:d4:45:41:a5:a5:00:1a:69:93:a1:
0f:d7:f7:73:5e:4c:40:6f:fc:02:4a:9b:8f:dc:58:
74:d7:cd:d7:a7:63:bd:57:bc:52:10:cf:61:6d:43:
6c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:9D:CA:01:A9:77:7F:A5:8A:98:44:C0:6D:CC:65:A1:B0:0C:11:D6
X509v3 Authority Key Identifier:
keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/Zp3KAal3f6WKmETAbcxlobAMEdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:800::/24
Signature Algorithm: sha256WithRSAEncryption
03:68:b6:a2:f4:b2:3d:2e:81:2e:19:a3:43:e4:d2:94:7f:f4:
15:82:01:63:11:20:84:c3:bb:83:f3:08:62:06:1d:41:7c:f1:
dd:6b:4a:1f:e7:70:01:86:e7:c6:bc:bf:ef:7f:7c:b1:30:18:
d9:c0:08:c9:c4:d4:98:02:94:f6:cc:2e:03:ca:4d:1b:72:90:
b9:3e:7f:7d:61:ad:80:1f:ca:fb:0e:79:fa:57:96:e6:fc:73:
1b:85:27:aa:e8:c2:46:83:76:7f:93:16:8e:41:8e:a0:3f:a1:
ad:f8:2a:ca:14:ca:a3:82:48:8b:07:e1:a1:af:2f:5f:a3:47:
33:3b:29:9a:45:a3:b0:46:bf:d8:11:7e:9b:1e:25:c9:ff:e8:
31:8f:7a:da:dc:ea:c8:58:7c:00:0e:2a:7c:54:e3:9d:af:b9:
db:3c:3f:b9:a8:cf:40:ad:4f:95:8a:c2:fd:62:10:4c:72:94:
82:d3:b8:4f:43:c7:37:96:18:f0:de:ca:2a:5e:65:90:04:5f:
be:b4:b3:9d:6d:9f:0f:1c:71:4a:ba:1f:7f:41:5c:4d:31:52:
8f:97:d3:31:16:e2:18:5a:02:c4:c6:eb:c6:31:69:a0:28:1e:
f8:cf:ef:d7:74:12:b1:b2:15:ad:54:e5:ed:36:20:64:98:c4:
e9:0a:78:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 14:44:46 2024 by rpki-client on console-fra.rpki-client.org