Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/ZmxQQLRpyY0D9Cfh3dYt8x-22rc.roa
File: ZmxQQLRpyY0D9Cfh3dYt8x-22rc.roa (raw, json)
Hash identifier: 7g76Jr1/hVeTqfIkRtqE1dcPLyqlO3lCr/m9O820CGk=
Subject key identifier: 66:6C:50:40:B4:69:C9:8D:03:F4:27:E1:DD:D6:2D:F3:1F:B6:DA:B7
Certificate issuer: /CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Certificate serial: 018A07E46CC8E2667D937EB7890E04CF39B8
Authority key identifier: 88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/ZmxQQLRpyY0D9Cfh3dYt8x-22rc.roa
Signing time: Fri 18 Aug 2023 09:05:25 +0000
ROA not before: Fri 18 Aug 2023 09:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197619
IP address blocks: 2a05:f300::/29 maxlen: 29
Validation: Failed, certificate revoked on Fri 18 Aug 2023 09:07:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:07:e4:6c:c8:e2:66:7d:93:7e:b7:89:0e:04:cf:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b213bf1627548efdfb1b2e2645baaf1d983aa0
Validity
Not Before: Aug 18 09:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=666c5040b469c98d03f427e1ddd62df31fb6dab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:2b:3f:5a:47:3d:77:53:34:f8:b3:3e:45:
4f:25:58:38:55:85:61:69:e7:80:bd:cc:b2:b8:cb:
97:09:d2:06:29:57:a0:f4:71:86:5e:85:02:85:3b:
dc:06:eb:51:46:c4:e1:02:04:4d:a5:a8:34:8b:64:
b2:37:94:c9:a3:13:ad:70:e0:bb:b9:5e:fd:6c:ef:
26:2f:8c:3a:a2:6c:18:c3:fa:e5:45:4b:97:39:be:
23:9a:93:b1:08:44:f0:87:94:0c:f1:bb:d2:3d:18:
8c:aa:50:56:4a:88:b1:3f:5c:ef:40:cf:a5:84:c6:
34:3b:b0:3c:5b:39:44:98:9a:f4:a9:cf:0c:aa:33:
83:89:2e:bf:dc:9f:79:11:89:48:d8:64:72:a3:ed:
3f:b5:7f:8b:28:dc:5d:36:88:85:0c:1e:d8:87:ad:
aa:99:52:88:db:e5:7f:50:f9:5d:ad:ad:1b:d9:7e:
85:1a:99:56:79:05:be:19:a9:25:73:1e:25:a0:82:
e7:53:05:46:1d:da:a3:54:d9:04:c9:6e:89:8d:c3:
41:97:01:34:1e:db:b5:6b:4b:c2:95:26:80:0f:ba:
24:96:96:eb:a2:c8:3a:bb:73:4c:82:eb:6f:fc:57:
1f:5b:cc:bb:26:a4:17:64:7c:8d:c8:d5:44:28:39:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:6C:50:40:B4:69:C9:8D:03:F4:27:E1:DD:D6:2D:F3:1F:B6:DA:B7
X509v3 Authority Key Identifier:
keyid:88:B2:13:BF:16:27:54:8E:FD:FB:1B:2E:26:45:BA:AF:1D:98:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLITvxYnVI79-xsuJkW6rx2YOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/ZmxQQLRpyY0D9Cfh3dYt8x-22rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3c0269-c194-4e6d-abce-72735e118d51/1/iLITvxYnVI79-xsuJkW6rx2YOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:f300::/29
Signature Algorithm: sha256WithRSAEncryption
76:72:b1:09:7d:68:f3:dc:67:60:63:34:75:fd:22:95:23:a1:
ea:2d:8f:f3:27:95:6e:f5:42:63:30:f5:88:4e:75:71:d3:e6:
6c:ff:70:0e:b3:ff:eb:6c:76:7c:73:19:75:0c:67:19:b2:44:
86:53:83:91:20:a2:ec:61:50:86:c1:05:be:b4:9c:3e:94:61:
23:0f:d5:5c:85:51:85:c1:45:24:7a:1a:0f:23:31:44:81:8a:
68:70:c3:41:fa:92:a8:d4:dc:14:17:b0:b0:f9:e3:c6:8e:ed:
98:14:76:8e:53:e6:a8:56:a0:33:9b:84:72:9e:b1:bf:ee:f0:
6a:91:97:26:5d:5b:db:17:b0:d5:e3:52:32:d4:cc:5f:ba:36:
1b:92:87:d8:bc:02:ae:00:69:a0:ea:b2:bb:73:dd:6c:e8:68:
fd:60:9c:91:26:7a:31:62:5b:74:80:88:70:3a:13:d3:56:5d:
0c:5f:b9:c4:aa:b0:b9:59:25:a9:80:77:41:8e:e6:a0:a0:a4:
3c:ab:ad:5a:cf:21:0f:53:56:da:03:19:b2:26:fa:1d:08:da:
9a:5c:1a:d7:34:a3:90:ff:d9:84:d6:e4:fc:7f:34:b9:03:84:
ec:f2:ce:4c:e8:2d:37:d6:6a:29:1d:21:8e:3d:6e:22:61:1a:
51:59:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:01 2024 by rpki-client on console-fra.rpki-client.org