Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zeeTE6PAK1fZTShozhsdkX9tfS8.roa
File: zeeTE6PAK1fZTShozhsdkX9tfS8.roa (raw, json)
Hash identifier: 98VZ35Th+FeEivZfdLG5imJdIQr0UJafLQWHDgqr3MA=
Subject key identifier: CD:E7:93:13:A3:C0:2B:57:D9:4D:28:68:CE:1B:1D:91:7F:6D:7D:2F
Certificate issuer: /CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Certificate serial: 018D7FB79E5B12228F2B3FA1DE8BA4435E8D
Authority key identifier: 6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zeeTE6PAK1fZTShozhsdkX9tfS8.roa
Signing time: Tue 06 Feb 2024 18:39:16 +0000
ROA not before: Tue 06 Feb 2024 18:39:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 2a0f:b241:13d::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 07 Feb 2024 04:55:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7f:b7:9e:5b:12:22:8f:2b:3f:a1:de:8b:a4:43:5e:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e87104a4db4c46371a7f8b6a441fc30ecdfe20f
Validity
Not Before: Feb 6 18:39:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde79313a3c02b57d94d2868ce1b1d917f6d7d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:18:d8:4b:4b:d9:f1:6a:63:bd:73:61:44:
26:9c:63:e7:63:28:42:88:b8:f3:38:04:7f:a7:33:
ad:42:0b:f4:36:6d:8c:fe:ab:ab:bb:09:65:ed:22:
9a:7d:4c:df:70:23:a8:47:5c:74:08:3a:be:5e:6c:
e6:65:e4:9a:4a:92:9f:2c:88:a7:cc:7d:10:d5:e7:
e3:bf:1f:bb:31:3e:03:81:bc:a4:5b:6c:b9:f3:03:
e8:17:e0:9d:2b:67:59:0a:08:ca:83:c8:a2:4e:5d:
f3:44:6f:60:35:9c:d7:15:8c:02:4d:eb:2f:76:50:
c4:a0:0a:bd:b0:6c:4d:94:23:03:97:19:05:20:e1:
80:ef:fd:21:22:3c:8f:c1:df:2e:11:d5:af:43:5a:
54:60:72:c2:12:23:df:9a:c4:90:15:71:f9:68:43:
a5:56:64:2e:d5:7b:4e:4e:b8:4f:a1:4e:1c:bb:59:
71:5f:48:1d:cd:5d:50:37:83:0b:2f:52:72:07:eb:
9c:0a:c1:81:92:29:5f:60:f9:e6:77:58:3e:f6:3b:
17:dd:e6:24:fa:1f:10:7d:3d:5b:7b:df:97:35:14:
f4:83:e0:23:14:d8:ad:8e:5f:90:ed:c2:81:cc:20:
08:0c:14:54:31:7d:77:8a:ed:1f:5e:38:b6:c8:12:
d8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:93:13:A3:C0:2B:57:D9:4D:28:68:CE:1B:1D:91:7F:6D:7D:2F
X509v3 Authority Key Identifier:
keyid:6E:87:10:4A:4D:B4:C4:63:71:A7:F8:B6:A4:41:FC:30:EC:DF:E2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bocQSk20xGNxp_i2pEH8MOzf4g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/zeeTE6PAK1fZTShozhsdkX9tfS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b87ec0-f75a-4bbe-b067-b717980e4ad6/1/bocQSk20xGNxp_i2pEH8MOzf4g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:b241:13d::/48
Signature Algorithm: sha256WithRSAEncryption
72:83:88:c2:43:95:00:4d:57:8e:cb:29:16:80:f4:44:ad:3b:
df:4c:c9:7b:45:99:01:b7:44:7f:c6:3b:91:9e:b1:26:90:f1:
fa:02:b1:20:8e:5a:af:b0:4a:6a:eb:ab:19:ea:ce:ac:e7:eb:
09:36:21:15:2b:21:0c:ad:dc:a2:0b:8d:00:4d:91:08:4b:f6:
d7:07:49:c1:30:5d:b7:dc:8a:74:9c:db:93:05:9a:44:f0:fa:
2c:63:89:db:a4:d9:66:4d:59:3c:52:da:74:9a:ca:a7:cf:aa:
20:6e:db:f5:67:8e:79:91:e3:50:cc:cc:0a:a6:c7:fd:00:2c:
9f:2c:86:11:18:7e:65:42:a2:bd:43:1f:01:cb:b5:ff:46:1b:
f5:d6:db:a6:3d:79:3e:e5:ff:45:a9:01:5c:a9:16:ad:07:f4:
72:3f:cc:35:8c:be:38:9d:29:9b:2b:ad:85:98:29:67:f6:c4:
42:d5:89:d0:dd:e1:ed:b6:02:89:75:65:6b:11:9b:ee:fa:6e:
74:a5:32:ac:85:dd:6c:c4:a3:6f:e7:90:df:ee:f5:0e:7f:a9:
d8:ee:50:af:e3:ed:62:2a:7f:0a:1e:77:ee:05:bb:60:6e:5a:
82:bf:1c:88:a1:f2:ef:94:26:70:01:ed:ac:78:f2:8a:e2:9b:
df:8a:ba:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:14 2024 by rpki-client on console-fra.rpki-client.org