Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Zhu1_WEXNKts5QtGomCfyKIqfx4.roa
File: Zhu1_WEXNKts5QtGomCfyKIqfx4.roa (raw, json)
Hash identifier: YlRh476iNQk6X80u59BAwPfS0HrsWoHGkzrOznNOfsM=
Subject key identifier: 66:1B:B5:FD:61:17:34:AB:6C:E5:0B:46:A2:60:9F:C8:A2:2A:7F:1E
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 0186D4CC704D08FC5D93B50D1AC6C169060B
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Zhu1_WEXNKts5QtGomCfyKIqfx4.roa
Signing time: Sun 12 Mar 2023 07:50:13 +0000
ROA not before: Sun 12 Mar 2023 07:50:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199518
IP address blocks: 2a0a:280:2300::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:d4:cc:70:4d:08:fc:5d:93:b5:0d:1a:c6:c1:69:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Mar 12 07:50:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=661bb5fd611734ab6ce50b46a2609fc8a22a7f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b0:38:ed:86:e5:46:98:fa:33:66:e7:d1:ea:
86:d5:8d:72:c2:b7:83:b5:9b:e3:b3:a4:0b:be:2f:
1f:90:7c:de:8d:a3:82:78:79:8b:16:52:7b:4d:7d:
b5:8a:65:cb:db:f4:2a:be:c5:77:11:17:5d:14:31:
de:cc:10:f5:b3:3b:93:10:37:b9:a8:1f:8e:57:bd:
03:b0:9b:ec:93:59:31:31:38:aa:61:0c:9d:c6:68:
e3:40:0f:c2:60:a2:1c:d9:6a:62:32:2b:8c:91:26:
9f:5a:dc:32:a9:1d:74:72:96:82:40:d2:07:a5:3a:
d4:60:16:d0:b6:41:ee:62:b0:26:98:ea:67:ee:37:
46:67:46:36:3f:49:ad:36:b1:88:e8:7b:79:e2:82:
96:24:f1:38:3b:1a:07:d2:02:d3:69:82:10:d6:5d:
78:c7:c9:f0:6f:38:37:73:8e:3f:a3:71:44:94:c6:
c3:c9:a7:f6:8b:a6:69:7c:93:31:18:8c:a5:d9:68:
53:e1:34:66:58:cd:b7:b7:ba:62:c9:10:09:3d:08:
62:8d:71:b7:6e:6f:cf:e9:36:81:fa:c1:29:49:46:
43:fc:e7:98:f1:8a:15:97:04:49:fc:d0:00:69:c6:
d0:af:77:10:21:0f:81:6e:35:8a:57:29:01:72:28:
db:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1B:B5:FD:61:17:34:AB:6C:E5:0B:46:A2:60:9F:C8:A2:2A:7F:1E
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/Zhu1_WEXNKts5QtGomCfyKIqfx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:2300::/40
Signature Algorithm: sha256WithRSAEncryption
64:93:cc:e6:f2:7a:e8:d5:57:f8:e5:80:d7:55:d1:3d:ab:16:
da:18:38:ba:10:1b:ff:23:86:e2:a8:d5:a0:d6:84:e6:f5:95:
ac:15:b5:0b:4f:69:3e:7e:25:50:b1:bf:c8:95:70:66:a9:f6:
e6:6d:59:ec:a8:73:b8:31:99:b8:0e:16:f5:a7:ca:24:84:3b:
7a:69:73:aa:c3:d5:ef:9a:2b:30:7c:be:d0:2c:03:e9:bd:69:
02:cf:63:7e:d8:ca:19:87:ad:95:3c:0e:72:6d:34:63:5d:69:
1e:ba:50:0d:7f:28:ee:3b:6e:7d:54:34:97:84:8d:aa:13:d7:
f2:aa:bf:21:cc:e8:bf:99:18:95:2b:08:44:95:71:b9:ca:60:
9b:26:8f:99:b9:27:1c:27:2c:13:0b:14:17:11:8d:3e:c7:37:
6d:a6:f3:42:47:f3:82:f3:13:dd:e5:02:e3:d5:72:c4:ab:7c:
7c:69:ae:43:b3:2e:bf:31:f5:d3:1a:9c:c9:ec:05:b9:ce:5a:
21:5b:4f:07:37:d4:eb:93:5f:34:10:f8:fe:54:b1:1d:6f:37:
e9:71:e7:b8:05:09:06:eb:71:04:fb:fa:62:3d:aa:56:f8:01:
2a:f8:78:6d:fb:ab:2e:bd:52:65:bd:ef:7b:7e:ae:8c:0c:a2:
14:5e:bd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:21 2024 by rpki-client on console-fra.rpki-client.org