Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZaaAIVG0I9pzPUYZFwmzzxAWZo4.roa
File: ZaaAIVG0I9pzPUYZFwmzzxAWZo4.roa (raw, json)
Hash identifier: s9RnQhjlenwhtuVbt8pYcqQVog9IaMMMQuSfAkIGaH8=
Subject key identifier: 65:A6:80:21:51:B4:23:DA:73:3D:46:19:17:09:B3:CF:10:16:66:8E
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D81F07358CDB918BD45FC57DF617551A4
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZaaAIVG0I9pzPUYZFwmzzxAWZo4.roa
Signing time: Wed 07 Feb 2024 05:00:35 +0000
ROA not before: Wed 07 Feb 2024 05:00:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198733
IP address blocks: 2a0f:b241:7b::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 27 Mar 2024 01:36:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:81:f0:73:58:cd:b9:18:bd:45:fc:57:df:61:75:51:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 7 05:00:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65a6802151b423da733d46191709b3cf1016668e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b8:6a:35:2b:d0:88:a5:f4:20:99:b0:09:d1:
86:ca:cd:1b:75:c4:fa:f2:dd:8e:86:ad:7f:aa:a1:
f4:44:de:64:68:e4:b0:19:5e:a4:32:75:ed:5c:88:
f6:7a:ec:f6:d2:a1:f3:c2:ff:04:f0:40:ca:13:9e:
e2:52:97:ea:72:ce:64:51:3a:7e:fc:82:e3:64:db:
f1:b4:57:47:c3:bd:19:65:93:ef:45:0f:2c:33:b5:
81:58:46:f7:07:0c:98:7a:27:1e:14:a9:8b:cc:f0:
a1:3a:d3:3f:22:dc:43:e2:59:1c:e1:e9:a9:1e:4b:
c9:d7:1c:d6:0d:4f:68:64:6f:e8:53:b1:f0:fd:00:
7c:8a:16:9e:e5:6a:e2:e1:5d:8e:ef:1b:8a:c6:ca:
9f:bb:69:63:33:1f:b6:90:3f:98:c7:86:bc:10:a9:
60:7a:04:6c:72:4b:d3:32:0d:5e:46:b5:6d:cb:a9:
79:30:58:61:50:b4:df:46:ff:0f:a2:6d:d1:59:b8:
25:cf:2a:15:fe:d3:e5:98:8f:55:35:1e:a4:f9:bb:
2a:3c:f6:58:fa:7d:17:a4:53:64:f7:e3:62:4f:1f:
8d:cd:d2:65:d5:47:89:6d:f2:93:ca:63:ba:fa:c5:
cd:c0:dd:6c:51:03:81:1c:39:75:3f:6d:b2:d2:a3:
91:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A6:80:21:51:B4:23:DA:73:3D:46:19:17:09:B3:CF:10:16:66:8E
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/ZaaAIVG0I9pzPUYZFwmzzxAWZo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:7b::/48
Signature Algorithm: sha256WithRSAEncryption
79:2f:f4:ad:cc:42:ea:8f:98:55:f4:17:65:d4:e9:0d:b4:27:
9c:da:c0:1a:32:52:d2:da:8a:a2:ba:2b:d3:09:69:69:cb:32:
49:49:59:cc:31:c4:75:ca:fb:f1:11:40:94:2e:60:ac:5c:e2:
4f:be:6d:fb:93:47:03:99:1e:8c:97:6f:d7:54:75:3b:ec:f5:
50:4a:b5:ea:42:9e:3c:68:01:79:7c:34:db:cb:9a:68:69:ac:
3a:4b:de:dc:32:f3:29:e5:5e:ce:de:c4:78:3f:c4:73:22:d8:
25:e3:81:05:72:a0:83:e6:17:ed:7a:8a:c8:24:45:32:c1:52:
95:23:74:b3:0f:be:0b:ce:3c:76:39:ca:82:84:a8:54:5c:b1:
94:7a:e5:b1:ec:97:49:44:b7:2d:e6:c7:e9:1c:2b:ed:ea:34:
ff:e4:a8:79:20:ad:6e:50:2e:69:06:fe:15:28:79:6c:bb:3b:
33:88:55:b0:5f:e3:cb:6f:71:48:b2:9f:91:82:7e:ab:29:6d:
23:27:e5:77:26:1d:93:64:e7:f4:45:af:86:34:d1:99:d9:c0:
4f:49:1f:61:32:f2:35:a6:92:f4:47:a6:9c:9c:4a:56:f6:6c:
df:4f:62:7d:b3:9e:97:a8:9a:15:66:59:0c:30:6b:3f:4c:e1:
dc:80:24:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:09 2024 by rpki-client on console-ams.rpki-client.org