Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zecQ2NHybguRF_KojFVqntKpT2o.roa
File: zecQ2NHybguRF_KojFVqntKpT2o.roa (raw, json)
Hash identifier: 5T6Daog7mqU0A7nEdRhEhUbghZLhjm1CQZPS8O/f4H4=
Subject key identifier: CD:E7:10:D8:D1:F2:6E:0B:91:17:F2:A8:8C:55:6A:9E:D2:A9:4F:6A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0192B2AC1D2CF3E7E497692F157E264F7DE3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zecQ2NHybguRF_KojFVqntKpT2o.roa
Signing time: Tue 22 Oct 2024 05:21:16 +0000
ROA not before: Tue 22 Oct 2024 05:21:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 2a13:bb40::/29 maxlen: 29
2a14:1100::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 26 Oct 2024 19:35:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b2:ac:1d:2c:f3:e7:e4:97:69:2f:15:7e:26:4f:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Oct 22 05:21:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde710d8d1f26e0b9117f2a88c556a9ed2a94f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:da:dc:36:5c:e9:7d:9f:24:98:9b:bf:20:
50:3c:17:41:b1:d2:9c:9f:77:8c:b4:3f:44:5d:f2:
13:f3:89:f8:19:25:63:ad:55:2e:44:2f:55:1f:4e:
53:6f:0f:cc:f8:99:10:d0:18:82:e6:ab:6e:f0:e8:
6c:07:26:de:e3:d7:33:70:99:62:30:44:66:3f:55:
d2:86:ca:3d:af:d8:5f:e7:6a:ab:e3:02:c8:8f:33:
52:e6:2a:d3:d7:ea:a2:ea:98:20:6f:ad:de:c7:df:
30:15:c4:7e:90:c3:e1:7b:4b:43:5c:d6:90:5a:64:
b5:36:cf:b2:bc:40:be:62:74:65:18:54:cc:9a:42:
6d:39:62:94:03:f5:8e:81:97:45:dd:12:fe:58:9d:
2c:19:b9:62:34:ed:95:f2:e8:27:b5:07:b4:7f:1f:
7f:78:98:68:cb:7e:48:32:ca:ba:c2:9c:f4:4a:6b:
7b:6e:a6:c9:81:32:90:38:37:96:84:2d:39:c9:f7:
99:0e:b6:cd:af:e9:ab:b4:d0:af:79:2e:3b:8a:d3:
46:8a:65:66:c6:fd:8f:f2:89:11:e7:cb:f6:01:29:
53:34:fc:f6:ff:0b:57:7e:29:f0:36:73:f9:4e:e7:
e4:9c:7e:32:60:7c:3b:7e:e4:b1:28:45:65:3e:db:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E7:10:D8:D1:F2:6E:0B:91:17:F2:A8:8C:55:6A:9E:D2:A9:4F:6A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/zecQ2NHybguRF_KojFVqntKpT2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bb40::/29
2a14:1100::/29
Signature Algorithm: sha256WithRSAEncryption
03:df:8f:63:0f:ec:c0:93:31:84:66:86:89:f6:b1:8f:76:6b:
cc:cc:ee:a7:f6:f3:bf:81:1e:68:0a:ce:86:eb:4e:41:53:77:
4f:38:2e:81:95:ba:fc:4c:ea:f5:9f:1a:b7:c2:7b:96:1c:51:
93:47:fe:93:d7:63:85:d2:bc:2d:57:a0:cc:ce:52:31:b1:f9:
39:19:16:b5:0d:70:e4:df:88:a5:d1:d2:ba:6f:29:ab:6b:c2:
dd:79:d2:30:de:d6:8b:04:e1:91:e7:e3:7e:69:2b:9d:13:3e:
c8:27:31:2f:96:4d:5d:f4:e6:c8:03:5e:de:55:b7:e1:5c:4e:
6f:1c:89:85:6c:2a:4f:36:7c:fc:8a:9b:1c:12:d1:b0:12:85:
93:73:2c:ec:47:59:69:4e:d4:66:aa:29:3e:77:6d:2c:2c:b1:
2f:b9:9f:83:bb:16:a2:48:1b:b4:54:13:4c:7e:ce:13:31:10:
b5:9f:45:6a:56:10:23:e9:ae:e6:46:bf:0c:1f:4d:bc:24:99:
87:fa:d1:df:a5:4b:92:3b:24:a1:77:39:1f:9d:e1:ec:37:44:
a2:d0:31:f1:88:bb:e0:e0:d0:97:45:a3:21:d5:68:9a:9f:9b:
62:32:72:98:86:16:2f:16:94:0e:d2:b7:73:71:be:1f:92:16:
68:e5:2c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 20:18:49 2024 by rpki-client on console-fra.rpki-client.org