Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zKeUjp-AZ7IFMvfOZ9ux8utycjc.roa
File: zKeUjp-AZ7IFMvfOZ9ux8utycjc.roa (raw, json)
Hash identifier: ur+qa3isfSz5lVvhwSIrDa3pBCERm3B1LTodatDElFw=
Subject key identifier: CC:A7:94:8E:9F:80:67:B2:05:32:F7:CE:67:DB:B1:F2:EB:72:72:37
Certificate issuer: /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial: 018A1DF4D7E145F49E15F3E0FD6FABC66B80
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zKeUjp-AZ7IFMvfOZ9ux8utycjc.roa
Signing time: Tue 22 Aug 2023 15:54:59 +0000
ROA not before: Tue 22 Aug 2023 15:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212271
IP address blocks: 2a05:4140::/29 maxlen: 48
2a05:4143::/32 maxlen: 48
2a05:4140:187::/48 maxlen: 48
2a05:4140:7::/48 maxlen: 48
2a05:4140:400::/40 maxlen: 48
2a05:4140:100::/40 maxlen: 48
2a05:4140:300::/40 maxlen: 40
2a05:4140:10::/48 maxlen: 48
2a05:4140:190::/48 maxlen: 48
2a05:4140:16::/48 maxlen: 48
2a05:4140:4::/48 maxlen: 48
2a05:4144::/32 maxlen: 32
2a05:4140:5::/48 maxlen: 48
2a05:4140:15::/48 maxlen: 48
2a05:4140:8::/48 maxlen: 48
2a05:4140:3::/48 maxlen: 48
2a05:4140:9::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:f4:d7:e1:45:f4:9e:15:f3:e0:fd:6f:ab:c6:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Validity
Not Before: Aug 22 15:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cca7948e9f8067b20532f7ce67dbb1f2eb727237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:a9:b4:5b:91:d3:8a:26:4b:c3:04:06:31:
08:ce:24:1b:6a:05:38:9a:8c:7b:98:c0:48:2a:ab:
0a:0f:6d:d3:9b:2d:40:4c:36:5b:81:22:da:f4:44:
d9:5a:0a:00:e0:4e:8a:65:3a:01:b3:1e:2b:5b:31:
14:54:74:0a:38:dd:d4:8a:28:9e:5b:8e:ff:e6:83:
06:13:68:a6:88:d2:dd:55:9f:14:d9:f9:f7:cb:4a:
24:0a:ed:7b:2c:13:10:83:ef:a7:b7:2b:0c:8f:58:
97:04:10:cd:6d:02:78:53:24:63:c7:64:b8:b0:53:
d9:78:b2:f2:f1:99:52:3a:60:17:c3:7a:f6:03:d4:
71:e7:58:1d:3c:72:bc:84:af:e9:43:1d:c5:d9:7f:
21:f2:56:fe:96:8c:cb:7c:1c:76:fe:ea:f9:93:c2:
74:1d:10:5b:48:a6:11:67:7c:f6:93:78:dd:9f:45:
12:36:76:72:29:24:ac:c1:d8:44:39:c9:69:45:e0:
ae:07:c0:3a:d4:8a:8a:52:9f:14:76:91:37:42:59:
97:29:9d:a3:0a:8a:00:02:18:3d:e4:6d:8a:c1:28:
f6:c7:94:69:46:62:df:e9:34:ee:b1:64:0f:e1:1c:
66:46:66:45:7d:86:ea:f2:a7:8a:4d:c1:e3:af:81:
b5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:A7:94:8E:9F:80:67:B2:05:32:F7:CE:67:DB:B1:F2:EB:72:72:37
X509v3 Authority Key Identifier:
keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/zKeUjp-AZ7IFMvfOZ9ux8utycjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:4140::/29
Signature Algorithm: sha256WithRSAEncryption
05:b5:2c:39:e2:65:4a:bc:e8:4e:70:26:4f:18:ea:b3:f4:f8:
44:9c:99:92:81:a9:0f:21:c8:ae:81:5f:26:d6:3b:b9:63:30:
dd:4a:d2:10:14:33:7d:12:0f:d7:4c:c2:e6:23:52:62:35:29:
db:3e:43:25:9d:6d:4a:0d:e5:b7:06:6f:c9:56:f1:5e:2b:11:
e6:e3:f1:25:1c:a4:58:fb:0c:f2:fc:e5:8a:4c:ce:58:5f:2b:
e6:59:d3:09:7e:e3:52:11:2a:89:ef:ec:ef:1d:08:85:40:58:
a1:64:8d:45:46:bb:84:f5:36:74:35:bd:90:f9:f2:f5:8e:5e:
f7:9b:a8:a2:38:2d:e9:c0:03:fa:9f:49:d9:87:0c:ba:10:de:
33:10:84:09:bf:07:cd:22:af:7b:23:72:97:0c:0e:ea:f0:cb:
6b:94:81:1c:2f:8d:88:80:e3:a8:a7:1c:c8:23:39:b4:64:62:
4b:48:71:21:de:4c:79:d3:fd:04:31:95:52:34:21:6d:71:8f:
fa:9d:c1:56:b3:2c:b6:66:89:92:e4:37:f2:78:58:8c:a4:b1:
5c:84:33:82:5f:48:fc:a8:e7:54:bf:84:2f:36:3f:c2:5d:1f:
9e:0e:83:51:99:98:2a:0b:ae:ca:45:3f:2c:eb:dd:7f:dc:d5:
de:84:21:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 3 18:26:24 2023 by rpki-client on console-fra.rpki-client.org