Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zRvDu8xcDoVzPDpHt4AxNsE0HcY.roa
File: zRvDu8xcDoVzPDpHt4AxNsE0HcY.roa (raw, json)
Hash identifier: wxwuE74Oog5Qpp4gjZ/Q7K5rhKG6kXYrKCucz6Umm3A=
Subject key identifier: CD:1B:C3:BB:CC:5C:0E:85:73:3C:3A:47:B7:80:31:36:C1:34:1D:C6
Certificate issuer: /CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Certificate serial: 01856B258192AA6BB0542AB30B01343E2B7E
Authority key identifier: CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zRvDu8xcDoVzPDpHt4AxNsE0HcY.roa
Signing time: Sun 01 Jan 2023 02:24:58 +0000
ROA not before: Sun 01 Jan 2023 02:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211557
IP address blocks: 2a12:1dc7:ffff::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:25:81:92:aa:6b:b0:54:2a:b3:0b:01:34:3e:2b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf10ad912ef942aacb4d10add39903c6e9fbb03a
Validity
Not Before: Jan 1 02:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd1bc3bbcc5c0e85733c3a47b7803136c1341dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:94:a2:9e:d7:5a:2e:40:50:64:a4:31:61:
29:5e:5f:39:85:58:9b:2f:93:51:ad:ed:9a:5a:b7:
8b:89:7d:73:29:2b:7a:4a:8e:02:85:7a:0c:9d:37:
21:18:85:e5:04:d7:66:7b:c5:9e:a3:ab:ef:01:1d:
d6:52:9a:da:71:cd:f9:94:08:5c:57:e2:59:5e:c5:
22:5e:94:f7:92:9e:1f:ff:f5:18:fe:33:d4:f6:ad:
fd:be:74:1f:6c:cc:a1:7a:a3:80:b6:d1:a9:5d:5b:
cf:08:8e:02:aa:71:a1:f0:11:ff:41:2a:7f:c2:84:
60:03:e0:76:05:fe:df:9f:0c:d8:57:18:21:4c:4d:
35:f4:a7:b3:21:42:bd:32:09:f9:e9:81:44:6a:b8:
9b:9c:4f:a5:39:5d:be:d7:10:85:68:db:05:62:10:
99:de:70:cd:14:9e:93:02:85:a3:5e:20:6a:c3:00:
6b:2d:06:02:3d:4e:07:33:13:e2:67:a0:45:03:81:
9d:52:5f:e7:50:02:08:7c:a5:c4:49:45:eb:15:7c:
2a:a5:08:f4:0c:cb:a3:c7:bd:fc:36:42:41:fc:d9:
e0:36:12:72:c2:bb:ab:00:07:b8:92:40:a4:c3:9c:
01:c9:56:81:57:65:1c:0b:ed:4f:e9:fb:e9:0e:e2:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1B:C3:BB:CC:5C:0E:85:73:3C:3A:47:B7:80:31:36:C1:34:1D:C6
X509v3 Authority Key Identifier:
keyid:CF:10:AD:91:2E:F9:42:AA:CB:4D:10:AD:D3:99:03:C6:E9:FB:B0:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxCtkS75QqrLTRCt05kDxun7sDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zRvDu8xcDoVzPDpHt4AxNsE0HcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/161b52-24f2-4535-8382-e7fe9c47660f/1/zxCtkS75QqrLTRCt05kDxun7sDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:1dc7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
78:2d:8e:19:ab:a9:7e:30:c2:21:2a:70:99:1f:e9:61:c1:3e:
e7:f7:51:9c:f7:73:47:aa:6c:89:e6:e9:44:09:95:e3:d2:b0:
bf:4e:46:de:64:05:b8:3e:e2:ec:4c:d3:15:a3:b3:3d:63:bf:
42:3e:93:8d:ad:3b:63:6a:db:56:a6:dd:a0:57:33:03:25:ad:
b3:4b:24:c8:5b:90:fd:e7:24:d6:38:87:de:1b:01:b1:11:89:
23:27:e2:a8:17:ee:ec:aa:a7:61:12:eb:14:2a:f0:03:fc:ed:
97:cc:70:d1:e2:ea:9f:06:5b:f4:82:a3:e7:5a:bf:06:3f:c6:
88:c3:7b:89:47:13:63:fb:fa:f5:c3:52:0d:d0:da:05:70:58:
07:4b:d2:41:41:3b:a1:6c:e9:b9:c8:9e:b4:65:5d:76:bd:bb:
44:3e:43:49:c3:92:21:73:56:5e:de:80:44:9e:ec:29:83:62:
65:b6:ba:42:ba:fe:c7:5c:6c:e7:0a:b6:2d:71:db:48:fc:08:
ae:7d:96:bf:21:4f:68:4b:51:6e:4b:7d:ca:2f:85:79:1b:4d:
f0:1f:cd:b5:16:b8:90:a9:05:5d:d2:72:f4:6a:9c:1c:47:97:
98:c4:2b:55:17:96:12:95:53:be:7b:5b:de:27:d5:7d:c1:e6:
e2:da:db:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:17 2024 by rpki-client on console-fra.rpki-client.org