Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/PZZTspWAGQEbd_rADZ6yqdHCSjc.roa
File: PZZTspWAGQEbd_rADZ6yqdHCSjc.roa (raw, json)
Hash identifier: +PfrYvJ9U0zEncG8592yYRIDI8bVFChI35EvgIFC424=
Subject key identifier: 3D:96:53:B2:95:80:19:01:1B:77:FA:C0:0D:9E:B2:A9:D1:C2:4A:37
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 0187E12443CD38D1C875CB4984A8E2103D37
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/PZZTspWAGQEbd_rADZ6yqdHCSjc.roa
Signing time: Wed 03 May 2023 10:24:22 +0000
ROA not before: Wed 03 May 2023 10:24:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207142
IP address blocks: 2a13:b486::/32 maxlen: 48
2a13:b483::/32 maxlen: 48
2a13:b484::/31 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e1:24:43:cd:38:d1:c8:75:cb:49:84:a8:e2:10:3d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: May 3 10:24:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d9653b2958019011b77fac00d9eb2a9d1c24a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dc:89:40:d6:f3:35:0d:b6:dd:bf:b8:13:3e:
05:9e:44:0a:46:0a:d3:18:58:fc:29:37:7e:bc:45:
6c:78:85:f5:60:eb:50:a3:4a:f3:25:e8:27:2d:9d:
8b:14:ff:d7:97:73:dd:22:9b:08:e8:52:12:c3:92:
98:c9:a9:fb:6c:b1:5d:ce:62:13:f7:cf:bd:68:44:
c6:0c:5a:84:d5:0a:73:71:8a:00:6c:dc:ad:5b:01:
a4:60:15:ed:81:f1:37:e2:5b:29:29:fd:11:73:85:
2a:15:7b:b2:5b:9f:16:d3:e4:5d:f5:5a:14:ad:c0:
f7:81:0d:3a:5a:a8:d9:7d:bb:57:c2:8e:f8:e4:0b:
2a:3e:f4:78:ec:2f:f9:b5:1d:de:a4:67:e4:b8:d5:
40:fd:19:9a:d2:be:4c:59:34:c9:df:38:f8:fb:cf:
db:f0:d3:fe:35:52:08:1b:68:14:4a:ec:07:2c:44:
30:b8:a8:b7:29:25:c1:8f:95:9c:45:56:1e:f8:87:
9a:5e:5f:5c:32:90:82:3f:da:69:bc:e7:71:85:dd:
5c:6b:fb:65:5b:b2:57:1f:5b:30:49:68:09:d9:ed:
09:bb:a6:6f:a2:76:fd:60:df:c3:3f:2b:62:61:0d:
eb:70:58:bc:fb:be:bb:a3:ba:c2:69:7b:37:36:27:
cd:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:96:53:B2:95:80:19:01:1B:77:FA:C0:0D:9E:B2:A9:D1:C2:4A:37
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/PZZTspWAGQEbd_rADZ6yqdHCSjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b483::-2a13:b486:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
18:be:6f:36:1f:89:a8:df:8f:fb:2f:0a:b0:64:bc:91:08:84:
c9:b5:3b:90:88:dd:d1:1d:df:b7:66:93:0c:ed:6d:df:52:21:
ae:c7:79:1a:f5:d8:79:27:42:25:2a:d7:8f:57:ac:c3:4c:a4:
3b:9b:c0:10:fe:4e:50:e1:b6:ca:9f:c0:27:53:ce:70:2b:1f:
14:92:c1:21:18:e1:3c:71:6c:be:d8:7d:1d:b4:2b:03:7c:4d:
46:49:64:48:72:33:5c:18:98:05:ea:54:c0:c0:70:c9:31:5d:
88:9e:e3:82:23:58:63:c6:18:4d:c2:4a:fb:3a:ef:74:38:b9:
53:05:9d:19:4e:28:ee:ca:fe:88:c1:86:24:84:f0:e8:6a:6f:
34:38:19:01:b1:d1:2d:b3:4e:95:25:40:fe:ad:fb:58:0d:ac:
2d:7f:17:ae:58:ab:1b:88:c2:c8:e4:fb:82:c3:ae:88:54:fa:
2e:03:4e:2f:c9:5e:19:70:82:b8:8f:53:e5:40:70:e8:2f:7b:
8f:9a:99:17:12:d7:fd:49:c8:cc:58:17:aa:bf:65:12:e6:ff:
7d:f1:af:92:6b:e3:48:18:22:c1:c2:3a:de:48:c6:c7:1c:ec:
31:5a:7d:32:cf:4d:2f:2a:42:cd:86:13:56:2c:d3:e9:e9:f7:
4f:c1:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:54 2024 by rpki-client on console-ams.rpki-client.org