Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/ZM24KWhaIMOVIB1Gs12A8pMyZrM.roa
File: ZM24KWhaIMOVIB1Gs12A8pMyZrM.roa (raw, json)
Hash identifier: +SC1Xcr/d/4D/Ojzub9N6lBsLM+tZgpudpAKhlysoJ4=
Subject key identifier: 64:CD:B8:29:68:5A:20:C3:95:20:1D:46:B3:5D:80:F2:93:32:66:B3
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018C8C200703AE2B8C3DF42BADDE5DF7383F
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/ZM24KWhaIMOVIB1Gs12A8pMyZrM.roa
Signing time: Thu 21 Dec 2023 11:25:58 +0000
ROA not before: Thu 21 Dec 2023 11:25:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 215828
IP address blocks: 2a0e:8f02:f061::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:20:07:03:ae:2b:8c:3d:f4:2b:ad:de:5d:f7:38:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Dec 21 11:25:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64cdb829685a20c395201d46b35d80f2933266b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3d:2d:d8:04:c0:1e:ce:3c:98:0c:cc:dd:98:
79:2f:ec:30:01:40:c7:50:b9:ab:2c:75:31:61:38:
fd:1d:f8:b4:a4:d0:0c:7c:8f:f6:36:80:fb:16:c8:
28:f9:b3:6d:6d:27:ae:25:8f:c2:08:e9:81:e7:43:
8a:15:bd:94:d8:aa:78:83:0d:41:df:8c:f2:e7:27:
c4:af:9b:a2:8d:0a:02:69:7d:6d:9b:03:f8:87:5f:
71:77:7a:fd:72:e3:00:6c:80:09:57:fa:2f:23:19:
f8:72:f4:d8:e5:6b:31:3b:1b:20:df:1d:d3:3e:c3:
06:1e:74:f2:02:40:92:d1:d1:5e:09:b4:b7:cb:76:
34:20:42:a5:15:e4:da:0f:d5:59:ce:ed:5d:2a:e0:
44:09:6d:e5:d5:4d:75:a5:81:bf:96:34:42:e8:d9:
3c:d3:2f:a8:a7:0c:7e:af:21:84:b4:ba:65:8c:6c:
b1:81:78:a9:e6:ba:8f:6f:1c:c3:8e:56:fa:bd:9a:
bd:7d:3d:10:30:9b:78:89:39:92:2d:54:2e:b1:f9:
f1:77:20:be:c7:06:82:19:dc:dc:3c:64:9a:f3:c8:
be:28:a9:7f:e0:8c:eb:dd:11:f4:14:8c:d3:61:c1:
50:47:25:fd:fd:56:3a:83:2d:b7:78:3a:1a:e0:b8:
7f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CD:B8:29:68:5A:20:C3:95:20:1D:46:B3:5D:80:F2:93:32:66:B3
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/ZM24KWhaIMOVIB1Gs12A8pMyZrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f061::/48
Signature Algorithm: sha256WithRSAEncryption
4b:d2:13:64:e7:b4:b6:66:65:4f:74:9f:63:19:3f:67:f9:d1:
5d:1a:e9:51:9e:64:67:e5:1c:7e:14:16:5b:72:28:72:79:9e:
d4:6a:0d:3f:b3:ad:df:2e:33:d9:38:37:6d:19:f9:9b:7f:f7:
ba:dc:24:a7:d6:2f:89:75:4d:19:f8:f1:08:fe:f2:ca:69:26:
89:cd:28:c9:a9:f3:1a:45:9f:67:74:c3:fe:63:73:5c:01:f2:
3b:e0:80:47:8d:ae:cf:af:c3:d4:42:d8:9b:8c:b8:85:ca:bc:
09:92:c5:1f:a7:a1:01:cb:fa:01:07:cf:d5:8f:18:35:bf:12:
73:0e:03:9f:87:ed:a9:98:7b:27:98:e6:e2:a4:44:cd:39:54:
0e:80:f6:6f:7a:ac:6f:5f:9d:47:83:74:ad:f4:7c:79:a1:16:
8e:dd:46:0a:1c:91:7e:00:d3:8a:7b:c8:61:85:c5:f0:bf:d6:
d3:76:05:fc:00:4a:24:90:35:c2:56:3c:c2:a5:cc:b5:52:28:
64:6c:e2:0f:f1:c0:14:78:10:94:62:7d:f8:9e:be:b8:34:72:
01:ee:a1:72:22:f4:5c:3e:e8:3c:3e:f3:d6:84:5c:c5:01:3a:
72:44:f5:c0:14:54:47:2a:60:2a:bf:1f:bb:99:72:f2:2d:52:
32:4f:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:41 2024 by rpki-client on console-fra.rpki-client.org