Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/2iHzK3sSNSPkrLwJYliJXTwVD40.roa
File: 2iHzK3sSNSPkrLwJYliJXTwVD40.roa (raw, json)
Hash identifier: P9XfhpVoPreCmjaiFIYJm2qplHd0KljJQFUfUg48dGg=
Subject key identifier: DA:21:F3:2B:7B:12:35:23:E4:AC:BC:09:62:58:89:5D:3C:15:0F:8D
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01857094FA03202610315695B6BA36116432
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/2iHzK3sSNSPkrLwJYliJXTwVD40.roa
Signing time: Mon 02 Jan 2023 03:44:49 +0000
ROA not before: Mon 02 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211675
IP address blocks: 2a0d:da06::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:fa:03:20:26:10:31:56:95:b6:ba:36:11:64:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=da21f32b7b123523e4acbc096258895d3c150f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3f:4d:20:fc:55:02:31:33:cf:ad:17:b0:35:
42:8e:da:f8:29:43:ba:c8:4c:eb:37:94:3e:8e:a1:
21:54:db:6a:53:f0:91:68:1e:58:07:16:e2:3c:eb:
28:20:29:e7:13:86:a0:46:59:c4:a1:62:50:49:e8:
f5:5a:0e:d8:a8:41:99:8a:c9:49:68:a1:3e:f1:60:
02:cf:d2:e6:57:84:e5:73:ae:d3:3b:f7:61:b7:71:
f9:68:3c:86:94:5a:df:dd:84:01:03:f2:63:b2:ca:
1f:fc:69:37:68:a2:b4:4c:58:b1:48:1c:83:92:20:
83:15:49:17:45:bc:df:47:9e:96:4f:86:4e:78:a8:
53:83:40:56:74:c2:43:7a:1e:aa:98:e2:41:ee:29:
73:62:4e:a1:1f:f2:f1:f8:68:e7:ad:1c:39:be:ac:
c0:1c:35:27:e3:a3:bc:52:77:60:05:46:cb:db:48:
cf:13:f2:d1:77:83:51:44:ce:6b:d2:05:cb:e2:d8:
c7:6e:32:75:5d:5c:5f:34:65:31:4e:47:40:03:be:
24:5c:37:24:54:aa:d8:67:ef:a1:82:f0:41:1e:50:
b6:78:52:7e:f8:18:10:27:60:a1:7d:f7:7b:35:85:
fa:8d:82:e5:65:fe:b5:33:5c:77:35:ae:e4:09:7e:
73:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:21:F3:2B:7B:12:35:23:E4:AC:BC:09:62:58:89:5D:3C:15:0F:8D
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/2iHzK3sSNSPkrLwJYliJXTwVD40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:da06::/32
Signature Algorithm: sha256WithRSAEncryption
11:69:a8:59:de:a0:09:eb:13:56:b6:c4:ac:f9:a6:2c:07:ac:
b0:ba:55:b8:fa:c8:df:72:08:37:d5:f9:55:da:a2:23:30:ce:
20:33:07:47:d8:95:5f:b0:a5:4b:a9:1e:3a:5d:37:98:05:87:
21:5a:da:6b:95:d6:ba:f7:67:c8:89:5f:e9:42:fa:08:bf:60:
af:99:d9:74:25:2b:78:87:4d:53:5e:11:c3:3f:dd:e1:9b:f0:
49:22:31:6b:5c:d3:81:2a:6c:a8:ce:a9:53:a7:42:2f:77:c0:
64:4d:92:98:16:92:0a:98:30:24:04:4d:2b:61:b6:63:3f:f0:
ed:01:81:7b:67:b6:8f:40:8b:84:aa:12:99:4b:45:a6:1a:16:
41:c8:4a:d7:83:d0:d3:a6:05:47:de:54:a0:e6:ad:64:57:a3:
a0:90:e7:50:60:1a:db:69:3a:8b:b0:fe:1c:08:e7:23:c3:80:
ac:15:c8:ba:52:85:11:3e:87:74:6b:34:31:7c:e9:35:7f:ad:
e4:28:5b:92:04:09:b6:28:c5:87:89:42:7f:f4:25:91:cf:59:
83:2d:53:bb:d6:54:fb:88:b0:5c:e7:eb:56:8f:e2:65:0f:11:
52:2e:fe:27:80:fc:aa:ac:1b:df:46:bd:79:56:07:07:78:89:
88:2c:0c:2c
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYVwlPoDICYQMVaVtro2EWQyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZTkyYzM0MWU3Njk0NDNmZGUxZDI3NTY2MDQ0YjRiNjUx
NTkwNjAwHhcNMjMwMTAyMDM0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTIxZjMyYjdiMTIzNTIzZTRhY2JjMDk2MjU4ODk1ZDNjMTUwZjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwT9NIPxVAjEzz60XsDVCjtr4KUO6
yEzrN5Q+jqEhVNtqU/CRaB5YBxbiPOsoICnnE4agRlnEoWJQSej1Wg7YqEGZislJ
aKE+8WACz9LmV4Tlc67TO/dht3H5aDyGlFrf3YQBA/Jjssof/Gk3aKK0TFixSByD
kiCDFUkXRbzfR56WT4ZOeKhTg0BWdMJDeh6qmOJB7ilzYk6hH/Lx+GjnrRw5vqzA
HDUn46O8UndgBUbL20jPE/LRd4NRRM5r0gXL4tjHbjJ1XVxfNGUxTkdAA74kXDck
VKrYZ++hgvBBHlC2eFJ++BgQJ2Chffd7NYX6jYLlZf61M1x3Na7kCX5zewIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFNoh8yt7EjUj5Ky8CWJYiV08FQ+NMB8GA1UdIwQY
MBaAFGbpLDQedpRD/eHSdWYES0tlFZBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYt
YzFkMjk2ZjhmZDA3LzEvMmlIekszc1NOU1Brckx3SllsaUpYVHdWRDQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS84ZjE5NjgtYTc5YS00YTA3LWFjZTYtYzFkMjk2ZjhmZDA3
LzEvWnVrc05CNTJsRVA5NGRKMVpnUkxTMlVWa0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg3aBjAN
BgkqhkiG9w0BAQsFAAOCAQEAEWmoWd6gCesTVrbErPmmLAessLpVuPrI33IIN9X5
VdqiIzDOIDMHR9iVX7ClS6keOl03mAWHIVraa5XWuvdnyIlf6UL6CL9gr5nZdCUr
eIdNU14Rwz/d4ZvwSSIxa1zTgSpsqM6pU6dCL3fAZE2SmBaSCpgwJARNK2G2Yz/w
7QGBe2e2j0CLhKoSmUtFphoWQchK14PQ06YFR95UoOatZFejoJDnUGAa22k6i7D+
HAjnI8OArBXIulKFET6HdGs0MXzpNX+t5ChbkgQJtijFh4lCf/Qlkc9Zgy1Tu9ZU
+4iwXOfrVo/iZQ8RUi7+J4D8qqwb30a9eVYHB3iJiCwMLA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-fra.rpki-client.org