Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZLPA1lMgPdZgN377bktv5NJIO5o.roa
File: ZLPA1lMgPdZgN377bktv5NJIO5o.roa (raw, json)
Hash identifier: cPobBoUXxmRV/84cQPs4IKCS1+w4vHG4kh6EgZWv+tg=
Subject key identifier: 64:B3:C0:D6:53:20:3D:D6:60:37:7E:FB:6E:4B:6F:E4:D2:48:3B:9A
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2EC8D3A4BB9424E1904709E072085D
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZLPA1lMgPdZgN377bktv5NJIO5o.roa
Signing time: Sun 01 Jan 2023 07:14:43 +0000
ROA not before: Sun 01 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a0d:2146:848a::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:c8:d3:a4:bb:94:24:e1:90:47:09:e0:72:08:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64b3c0d653203dd660377efb6e4b6fe4d2483b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:6c:b9:1f:66:8e:d6:69:bd:74:cf:a2:c7:da:
96:5b:62:41:d2:c7:42:6e:f4:33:24:ae:81:71:b3:
e0:4d:b5:ec:fa:53:ec:e9:23:c9:b7:e1:06:6a:ec:
30:62:9c:70:5e:5d:ca:42:97:92:24:46:bd:c1:bd:
29:9c:5d:2d:86:7e:e4:5c:96:25:13:0f:f5:26:9a:
41:25:e9:43:03:eb:a7:35:36:20:89:13:43:9c:c6:
3a:eb:87:b4:2b:fc:f0:13:3e:5a:27:3c:18:01:f9:
6f:2c:6d:ef:3e:2a:cb:20:a1:6c:82:28:7b:9f:bc:
76:11:c3:8f:ed:c5:28:7f:db:1b:e2:fb:38:47:1d:
4e:42:bb:dc:18:e4:eb:b0:7d:59:38:ae:91:15:fa:
a9:76:b6:0d:c5:16:51:25:cb:c2:30:e3:74:23:72:
27:cb:d9:42:8f:71:b9:b9:04:36:94:1d:e0:44:55:
71:16:82:5c:0e:ee:43:a1:ac:5d:c6:fa:fb:f3:d4:
5f:2d:14:5d:3d:92:48:29:9d:f5:cc:f0:3b:f3:aa:
98:cb:bf:83:3f:4d:54:9a:b2:96:ba:2c:4d:1a:f0:
60:d3:ee:d6:3f:da:7e:60:d3:61:90:60:e2:0a:87:
3e:ce:57:a6:b4:67:f0:be:fe:09:41:c0:61:e3:51:
41:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B3:C0:D6:53:20:3D:D6:60:37:7E:FB:6E:4B:6F:E4:D2:48:3B:9A
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZLPA1lMgPdZgN377bktv5NJIO5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:848a::/48
Signature Algorithm: sha256WithRSAEncryption
a3:31:36:aa:01:fb:c6:e5:69:32:02:31:9f:cb:65:31:00:17:
ad:aa:cf:02:af:a2:4c:20:f0:11:c6:e7:c5:73:e1:7c:46:d9:
cb:b5:e6:67:64:b2:e2:72:f2:19:ba:4d:9b:ce:83:7d:18:77:
78:56:47:3e:dd:c6:a4:2f:fc:93:50:af:25:7d:26:60:86:9b:
b7:db:f6:89:24:e5:28:14:89:77:81:24:ad:38:17:f2:da:9b:
66:4a:2e:df:6e:22:ba:66:ee:cd:e5:d3:39:29:0d:32:4c:dc:
4d:0a:cc:64:0c:71:ab:07:99:52:b3:29:e5:89:86:32:9a:33:
80:bf:8d:dc:f7:a6:18:28:c2:6f:08:e7:6e:64:8b:a3:37:60:
26:b6:b7:20:9f:ec:03:07:a0:dc:74:a6:c4:dd:1a:d9:6a:f0:
bf:6b:a6:e8:39:71:4f:aa:61:5e:33:a4:cf:ce:90:82:47:84:
d0:20:68:e8:12:85:f6:19:bb:da:19:ba:09:72:ce:b5:3e:d1:
1b:0f:61:4a:e6:81:d1:d5:ec:73:b5:2c:4d:4c:86:0c:aa:a7:
b5:7a:49:ab:47:44:19:c1:3f:90:51:99:8e:a3:24:9f:51:88:
e2:1a:6a:fd:bf:bc:bd:58:8d:e3:1f:73:15:2e:fa:7b:06:31:
73:bb:b8:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org