Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/ZDFQzufUJ7mVbch41zWD6sS1OkM.roa
File: ZDFQzufUJ7mVbch41zWD6sS1OkM.roa (raw, json)
Hash identifier: lL+zCZ0LS1UbKBKdoQ8Lzswv3ifIDYw+5lwMkKwxT24=
Subject key identifier: 64:31:50:CE:E7:D4:27:B9:95:6D:C8:78:D7:35:83:EA:C4:B5:3A:43
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 0190798B1D942375746F15409891DE198BF6
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/ZDFQzufUJ7mVbch41zWD6sS1OkM.roa
Signing time: Wed 03 Jul 2024 17:01:18 +0000
ROA not before: Wed 03 Jul 2024 17:01:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63293
IP address blocks: 2a03:2887:ff02::/48 maxlen: 48
2a03:2887:ff03::/48 maxlen: 48
2a03:2887:ff04::/48 maxlen: 48
2a03:2887:ff05::/48 maxlen: 48
2a03:2887:ff06::/48 maxlen: 48
2a03:2887:ff18::/48 maxlen: 48
2a03:2887:ff19::/48 maxlen: 48
2a03:2887:ff1b::/48 maxlen: 48
2a03:2887:ff1c::/48 maxlen: 48
2a03:2887:ff1d::/48 maxlen: 48
2a03:2887:ff1e::/48 maxlen: 48
2a03:2887:ff1f::/48 maxlen: 48
2a03:2887:ff21::/48 maxlen: 48
2a03:2887:ff23::/48 maxlen: 48
2a03:2887:ff24::/48 maxlen: 48
2a03:2887:ff25::/48 maxlen: 48
2a03:2887:ff27::/48 maxlen: 48
2a03:2887:ff28::/48 maxlen: 48
2a03:2887:ff29::/48 maxlen: 48
2a03:2887:ff2a::/48 maxlen: 48
2a03:2887:ff2b::/48 maxlen: 48
2a03:2887:ff2e::/48 maxlen: 48
2a03:2887:ff2f::/48 maxlen: 48
2a03:2887:ff30::/48 maxlen: 48
2a03:2887:ff33::/48 maxlen: 48
2a03:2887:ff35::/48 maxlen: 48
2a03:2887:ff36::/48 maxlen: 48
2a03:2887:ff37::/48 maxlen: 48
2a03:2887:ff38::/48 maxlen: 48
2a03:2887:ff39::/48 maxlen: 48
2a03:2887:ff3a::/48 maxlen: 48
2a03:2887:ff3b::/48 maxlen: 48
2a03:2887:ff3f::/48 maxlen: 48
2a03:2887:ff40::/48 maxlen: 48
2a03:2887:ff41::/48 maxlen: 48
2a03:2887:ff42::/48 maxlen: 48
2a03:2887:ff43::/48 maxlen: 48
2a03:2887:ff44::/48 maxlen: 48
2a03:2887:ff45::/48 maxlen: 48
2a03:2887:ff48::/48 maxlen: 48
2a03:2887:ff49::/48 maxlen: 48
2a03:2887:ff4a::/48 maxlen: 48
2a03:2887:ff4b::/48 maxlen: 48
2a03:2887:ff4d::/48 maxlen: 48
2a03:2887:ff4e::/48 maxlen: 48
2a03:2887:ff4f::/48 maxlen: 48
2a03:2887:ff51::/48 maxlen: 48
2a03:2887:ff52::/48 maxlen: 48
2a03:2887:ff53::/48 maxlen: 48
2a03:2887:ff54::/48 maxlen: 48
2a03:2887:ff55::/48 maxlen: 48
2a03:2887:ff56::/48 maxlen: 48
2a03:2887:ff57::/48 maxlen: 48
2a03:2887:ff58::/48 maxlen: 48
2a03:2887:ff59::/48 maxlen: 48
2a03:2887:ff60::/48 maxlen: 48
2a03:2887:ff61::/48 maxlen: 48
2a03:2887:ff62::/48 maxlen: 48
2a03:2887:ff63::/48 maxlen: 48
2a03:2887:ff64::/48 maxlen: 48
2a03:2887:ff65::/48 maxlen: 48
2a03:2887:ff66::/48 maxlen: 48
2a03:2887:ff67::/48 maxlen: 48
2a03:2887:ff68::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:8b:1d:94:23:75:74:6f:15:40:98:91:de:19:8b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jul 3 17:01:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=643150cee7d427b9956dc878d73583eac4b53a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:cd:f8:f3:10:da:6c:7e:ae:de:1e:d1:c8:94:
e2:4e:0d:3d:cc:76:05:54:2e:41:bb:b4:23:e8:1d:
ac:9d:2e:0e:93:c2:64:54:5d:40:ea:5b:d7:9f:ae:
b8:17:e2:32:58:f9:6d:c7:4a:27:52:29:04:04:b5:
7f:36:aa:75:de:ad:9a:7d:6d:51:97:37:d4:a5:c7:
aa:e4:4f:61:b9:e0:31:83:31:1c:b7:86:f0:f4:2f:
dd:8d:12:b9:37:e8:52:a3:e6:49:fa:63:15:3d:01:
cf:c3:09:e5:01:b0:5d:c0:fd:7e:44:93:a6:7a:48:
b9:04:fb:b4:27:ec:2a:02:95:73:f6:c1:e6:37:1a:
c3:ba:74:04:4d:37:83:dc:99:ed:a2:85:b9:b4:55:
87:e8:75:cb:d7:a6:78:3b:82:eb:1b:c7:e6:7c:e8:
9a:7a:f0:d7:68:fe:fc:70:f3:0a:a5:db:5d:65:28:
fb:eb:0f:26:a7:cd:f5:b4:6b:b3:fe:e7:18:d0:19:
98:dd:82:2e:50:7f:85:9c:44:34:92:8e:01:bf:97:
b4:b2:f9:4d:a0:4a:f1:23:87:54:00:7e:b7:89:91:
2c:51:e2:b2:55:cb:b4:36:f4:b1:cf:d7:32:43:6b:
55:50:9c:96:39:2c:07:01:34:aa:4c:63:a9:61:23:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:50:CE:E7:D4:27:B9:95:6D:C8:78:D7:35:83:EA:C4:B5:3A:43
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/ZDFQzufUJ7mVbch41zWD6sS1OkM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:2887:ff02::-2a03:2887:ff06:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff18::/47
2a03:2887:ff1b::-2a03:2887:ff1f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff21::/48
2a03:2887:ff23::-2a03:2887:ff25:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff27::-2a03:2887:ff2b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff2e::-2a03:2887:ff30:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff33::/48
2a03:2887:ff35::-2a03:2887:ff3b:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff3f::-2a03:2887:ff45:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff48::/46
2a03:2887:ff4d::-2a03:2887:ff4f:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff51::-2a03:2887:ff59:ffff:ffff:ffff:ffff:ffff
2a03:2887:ff60::-2a03:2887:ff68:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:20:ea:00:c1:27:26:a1:fa:03:b9:da:f2:8c:9c:a8:8a:b9:
bf:bc:16:e7:a9:e4:cc:36:71:e3:de:4a:41:54:8b:a7:5c:f2:
e2:09:b0:75:26:cb:ea:84:4a:7e:a2:da:99:30:5c:96:24:9a:
1c:3c:ec:d0:a5:9b:61:ff:c9:1d:83:c6:07:e5:81:89:80:4d:
28:40:2b:74:c8:e4:d5:af:15:2b:80:fb:4b:1c:bc:90:94:f4:
92:a9:a6:ee:08:82:59:a5:b0:28:3c:1f:c9:a7:df:eb:4a:9c:
b1:78:bb:05:32:28:6d:46:2c:73:6b:86:85:aa:ea:33:33:8b:
69:e3:45:87:ef:fc:82:26:ec:9b:c6:35:80:cb:05:77:38:14:
44:f5:4c:4a:91:ae:80:a5:55:d5:d2:ef:c0:b0:92:3e:f8:04:
0f:d9:dd:22:53:4d:ae:ea:49:c9:c9:d7:b9:e8:6b:71:81:af:
90:86:26:b9:88:46:6e:fb:24:6f:11:17:22:38:5d:59:98:99:
29:b0:f1:10:da:5b:66:75:22:35:14:ef:c9:86:25:c5:19:33:
87:e5:76:e0:6e:a4:51:29:7a:f7:70:d6:34:4f:ac:1c:e8:18:
ec:e8:16:02:fc:dd:bc:b8:9b:27:a4:3c:18:2e:8f:61:80:b7:
81:78:c3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:38:01 2024 by rpki-client on console-ams.rpki-client.org