Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ZFD5SaTjZNUlAUoUjNjCTtXZpLE.roa
File: ZFD5SaTjZNUlAUoUjNjCTtXZpLE.roa (raw, json)
Hash identifier: qklGiaGeiDDesz1aMglZ8dqWwsCk3ObdDECuLBaxGuM=
Subject key identifier: 64:50:F9:49:A4:E3:64:D5:25:01:4A:14:8C:D8:C2:4E:D5:D9:A4:B1
Certificate issuer: /CN=73c69d04583500c5ef81136831237593e0bb86ce
Certificate serial: 01856C41776003A481D6E38A7674479C067F
Authority key identifier: 73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ZFD5SaTjZNUlAUoUjNjCTtXZpLE.roa
Signing time: Sun 01 Jan 2023 07:35:07 +0000
ROA not before: Sun 01 Jan 2023 07:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213262
IP address blocks: 2a0d:2580::/48 maxlen: 48
2a0d:2580::/40 maxlen: 48
2a0d:2580:1000::/36 maxlen: 48
2a0d:2580:a000::/37 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:41:77:60:03:a4:81:d6:e3:8a:76:74:47:9c:06:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c69d04583500c5ef81136831237593e0bb86ce
Validity
Not Before: Jan 1 07:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6450f949a4e364d525014a148cd8c24ed5d9a4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:72:1c:61:34:a4:49:b0:28:99:dd:ea:c0:fe:
8c:2f:d1:99:94:6d:3a:91:29:c4:b1:80:0e:ad:4f:
6d:52:71:a0:28:fb:fc:53:1f:f8:e6:43:e8:d5:74:
be:4d:d5:31:21:84:25:b8:ba:39:3f:7c:2f:b8:ac:
08:59:d4:fb:02:80:02:e2:bf:c7:70:1c:0f:cc:9d:
a9:2f:df:61:ca:1f:3e:f4:05:1a:30:09:b3:2c:fc:
35:59:9f:2d:14:d3:76:e5:54:69:0c:50:8c:b3:4a:
50:1d:c6:1c:0c:0e:1b:9c:00:bd:af:b1:0f:12:de:
77:bc:e4:af:b8:3f:6e:68:3a:d1:b1:b2:e9:07:bb:
c5:ba:fd:82:60:33:9f:fc:c4:90:2f:24:9a:1f:d3:
79:1f:ee:28:ee:25:4d:d3:10:dd:67:19:dc:79:8e:
95:9e:24:6e:52:4e:e5:47:3c:d4:8c:cc:c4:40:7c:
3b:34:86:18:88:05:80:d8:0c:01:be:02:d2:ef:24:
65:3d:f2:d2:7e:ab:c8:d4:d2:0b:58:7c:19:b3:a9:
39:a2:1e:a6:76:42:b0:15:05:4b:4a:d5:b3:d9:99:
fb:eb:79:13:bd:87:61:d8:e7:62:85:76:86:02:3e:
14:ef:bc:60:b6:02:a4:ca:b1:ac:d0:0c:f5:96:94:
78:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:F9:49:A4:E3:64:D5:25:01:4A:14:8C:D8:C2:4E:D5:D9:A4:B1
X509v3 Authority Key Identifier:
keyid:73:C6:9D:04:58:35:00:C5:EF:81:13:68:31:23:75:93:E0:BB:86:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8adBFg1AMXvgRNoMSN1k-C7hs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/ZFD5SaTjZNUlAUoUjNjCTtXZpLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/6f6ce2-e6ee-4e2a-905d-f9cb0a7b206c/1/c8adBFg1AMXvgRNoMSN1k-C7hs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2580::/40
2a0d:2580:1000::/36
2a0d:2580:a000::/37
Signature Algorithm: sha256WithRSAEncryption
9b:66:eb:60:65:5f:bb:74:c6:91:1a:90:f0:bf:49:ee:74:6b:
a7:d0:8c:a4:d3:63:5a:fd:78:3e:91:a0:35:d2:cb:13:ff:ab:
19:49:6b:45:06:e9:8d:d6:dd:8c:ff:d4:1c:c3:81:8c:b0:7f:
c2:0f:59:47:2d:ed:3e:1f:37:1f:8c:cd:fb:6b:dd:fd:43:39:
00:1c:32:92:dd:94:bc:f9:dc:51:1f:3e:8e:69:9f:a0:b9:f8:
86:7f:00:66:d2:63:46:60:ac:5d:b5:27:f3:fe:8e:b1:d9:c3:
f6:2b:c7:11:ec:4b:be:3b:95:9f:e0:43:56:90:0c:e4:d7:0e:
40:05:b3:2f:f2:a9:0a:ed:94:f5:a5:48:69:1c:10:8b:ed:c8:
93:a6:2c:46:84:02:b1:5e:d8:00:4a:3f:74:c3:aa:dc:4c:ee:
44:8e:5a:62:4c:06:7c:11:fa:b6:0d:e0:25:35:03:be:0a:49:
b9:a4:52:b0:4b:5a:b8:70:81:8d:26:3e:bc:d1:fe:d5:a6:c6:
a8:5e:11:c4:12:b6:5e:aa:af:c0:73:65:3c:bb:a0:b9:6b:bd:
31:05:bb:39:6d:58:a7:40:cf:02:4e:52:97:fd:1d:ec:19:ff:
5b:b8:2d:e4:b5:03:de:f8:01:15:58:f5:9c:c2:36:ff:78:1a:
d3:3a:c7:cc
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVsQXdgA6SB1uOKdnRHnAZ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczYzY5ZDA0NTgzNTAwYzVlZjgxMTM2ODMxMjM3NTkzZTBi
Yjg2Y2UwHhcNMjMwMTAxMDczNTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDUwZjk0OWE0ZTM2NGQ1MjUwMTRhMTQ4Y2Q4YzI0ZWQ1ZDlhNGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXIcYTSkSbAomd3qwP6ML9GZlG06
kSnEsYAOrU9tUnGgKPv8Ux/45kPo1XS+TdUxIYQluLo5P3wvuKwIWdT7AoAC4r/H
cBwPzJ2pL99hyh8+9AUaMAmzLPw1WZ8tFNN25VRpDFCMs0pQHcYcDA4bnAC9r7EP
Et53vOSvuD9uaDrRsbLpB7vFuv2CYDOf/MSQLySaH9N5H+4o7iVN0xDdZxnceY6V
niRuUk7lRzzUjMzEQHw7NIYYiAWA2AwBvgLS7yRlPfLSfqvI1NILWHwZs6k5oh6m
dkKwFQVLStWz2Zn763kTvYdh2OdihXaGAj4U77xgtgKkyrGs0Az1lpR4EQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGRQ+Umk42TVJQFKFIzYwk7V2aSxMB8GA1UdIwQY
MBaAFHPGnQRYNQDF74ETaDEjdZPgu4bOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQt
ZjljYjBhN2IyMDZjLzEvWkZENVNhVGpaTlVsQVVvVWpOakNUdFhacExFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC82ZjZjZTItZTZlZS00ZTJhLTkwNWQtZjljYjBhN2IyMDZj
LzEvYzhhZEJGZzFBTVh2Z1JOb01TTjFrLUM3aHM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAAjAYAwYAKg0lgAAD
BgQqDSWAEAMGAyoNJYCgMA0GCSqGSIb3DQEBCwUAA4IBAQCbZutgZV+7dMaRGpDw
v0nudGun0Iyk02Na/Xg+kaA10ssT/6sZSWtFBumN1t2M/9Qcw4GMsH/CD1lHLe0+
HzcfjM37a939QzkAHDKS3ZS8+dxRHz6OaZ+gufiGfwBm0mNGYKxdtSfz/o6x2cP2
K8cR7Eu+O5Wf4ENWkAzk1w5ABbMv8qkK7ZT1pUhpHBCL7ciTpixGhAKxXtgASj90
w6rcTO5EjlpiTAZ8Efq2DeAlNQO+Ckm5pFKwS1q4cIGNJj680f7VpsaoXhHEErZe
qq/Ac2U8u6C5a70xBbs5bVinQM8CTlKX/R3sGf9buC3ktQPe+AEVWPWcwjb/eBrT
OsfM
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:20 2024 by rpki-client on console-fra.rpki-client.org