Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ZGtMbiOPD0lifcs7RT2NE08Ldrs.roa
File: ZGtMbiOPD0lifcs7RT2NE08Ldrs.roa (raw, json)
Hash identifier: kr8YxFUSsX1sfOTpSrrcJiEvBZOn8biqdX/RUzYjYdM=
Subject key identifier: 64:6B:4C:6E:23:8F:0F:49:62:7D:CB:3B:45:3D:8D:13:4F:0B:76:BB
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E7BB29C9D322B29FF21809585BB44
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ZGtMbiOPD0lifcs7RT2NE08Ldrs.roa
Signing time: Mon 02 Jan 2023 06:15:01 +0000
ROA not before: Mon 02 Jan 2023 06:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210800
IP address blocks: 2a0c:b641:430::/44 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:7b:b2:9c:9d:32:2b:29:ff:21:80:95:85:bb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=646b4c6e238f0f49627dcb3b453d8d134f0b76bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d0:6c:27:e9:04:c1:d8:19:e7:5f:40:cb:6b:
a2:be:5c:58:4b:c6:84:fd:44:99:d3:3f:08:26:71:
46:81:f7:24:db:38:1d:8a:ba:81:28:01:6b:4a:6c:
da:fe:41:34:33:b4:af:e5:0b:43:6f:37:ef:ad:57:
fc:67:2f:fd:85:58:44:2e:c0:a0:a9:97:8a:3b:94:
f4:61:fa:d0:89:cc:e2:b5:4b:5b:64:95:db:35:6b:
2d:67:60:e1:e8:5d:90:be:88:a2:b1:a0:b3:d2:5c:
1f:d2:6a:eb:fc:be:1e:40:1b:47:dc:ee:b1:f7:dd:
8f:6a:9b:a3:ea:be:36:4d:17:d2:19:c2:74:0f:c2:
d5:7b:3d:fd:23:39:42:6b:1b:c7:17:7f:a1:a3:8c:
d9:a6:df:51:38:f1:8f:33:8a:90:20:de:36:b5:be:
15:51:b8:98:72:70:fb:ab:c1:ec:0b:32:a0:b4:8a:
d4:0e:e7:29:73:42:16:75:36:21:9c:44:75:4b:0b:
fa:2d:90:25:1d:21:42:24:9b:f0:63:24:98:3b:51:
11:dc:f0:15:96:a5:ac:59:07:eb:cf:f0:8d:21:c8:
14:eb:48:6d:55:3c:74:af:31:fc:6f:16:7a:e2:15:
d4:82:f4:6e:9f:ac:eb:51:78:69:a4:de:c1:e3:2e:
29:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6B:4C:6E:23:8F:0F:49:62:7D:CB:3B:45:3D:8D:13:4F:0B:76:BB
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/ZGtMbiOPD0lifcs7RT2NE08Ldrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:430::/44
Signature Algorithm: sha256WithRSAEncryption
7b:f3:f0:35:21:8f:15:dd:76:fd:a1:4c:6e:eb:f8:8a:9b:69:
35:3f:b5:a0:d5:7b:5e:dd:9e:57:56:73:5d:7f:03:0e:0e:6e:
bb:7c:f9:c4:bc:7a:9b:55:d2:12:a7:5b:46:4b:ee:fb:a2:7d:
7c:a2:1b:09:ec:55:3e:2a:d0:03:95:a4:d3:3b:8a:8a:1c:bf:
d2:0c:24:af:d2:3b:7b:b5:3e:00:81:89:d2:d8:70:c6:91:84:
92:82:f8:24:5c:67:f1:3d:d1:73:ab:2f:92:86:be:35:12:6d:
a8:5e:9f:26:a3:d0:90:1b:c0:7f:39:3d:24:11:47:c1:b0:fb:
13:32:e5:63:8c:e3:55:35:db:bc:58:36:f0:e6:df:07:a0:3b:
ff:14:4f:f7:57:b1:68:74:60:16:a2:c0:3b:90:8e:a1:70:f5:
41:8d:a2:35:67:15:b3:b7:f6:a2:c7:69:55:c0:5b:f6:c9:e6:
78:11:ad:be:c5:bb:9e:e2:2d:3f:e0:c0:70:8b:31:04:8b:d7:
a2:05:74:74:4b:2f:0b:3f:f4:44:09:15:82:6c:4f:a8:98:ff:
e6:5c:66:6b:d3:40:e8:b3:a7:98:8a:af:c6:7d:7f:e1:a7:c4:
a1:4b:0d:58:30:b0:2e:66:5b:a1:5c:e8:e4:cf:4b:13:56:f4:
62:34:64:15
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYVxHnuynJ0yKyn/IYCVhbtEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1OTc2ODAxMzYzZDM3NTc4NjE1MmU0ZDA2MWU3NWM4YmVi
MzUwNTgwHhcNMjMwMTAyMDYxNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDZiNGM2ZTIzOGYwZjQ5NjI3ZGNiM2I0NTNkOGQxMzRmMGI3NmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9BsJ+kEwdgZ519Ay2uivlxYS8aE
/USZ0z8IJnFGgfck2zgdirqBKAFrSmza/kE0M7Sv5QtDbzfvrVf8Zy/9hVhELsCg
qZeKO5T0YfrQiczitUtbZJXbNWstZ2Dh6F2QvoiisaCz0lwf0mrr/L4eQBtH3O6x
992Papuj6r42TRfSGcJ0D8LVez39IzlCaxvHF3+ho4zZpt9ROPGPM4qQIN42tb4V
UbiYcnD7q8HsCzKgtIrUDucpc0IWdTYhnER1Swv6LZAlHSFCJJvwYySYO1ER3PAV
lqWsWQfrz/CNIcgU60htVTx0rzH8bxZ64hXUgvRun6zrUXhppN7B4y4pjwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGRrTG4jjw9JYn3LO0U9jRNPC3a7MB8GA1UdIwQY
MBaAFAWXaAE2PTdXhhUuTQYedci+s1BYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2Et
NWVjOGM4ZWQ2MGZkLzEvWkd0TWJpT1BEMGxpZmNzN1JUMk5FMDhMZHJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yYmFhZGMtMmI3YS00ZWMwLTk1Y2EtNWVjOGM4ZWQ2MGZk
LzEvQlpkb0FUWTlOMWVHRlM1TkJoNTF5TDZ6VUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgy2QQQw
MA0GCSqGSIb3DQEBCwUAA4IBAQB78/A1IY8V3Xb9oUxu6/iKm2k1P7Wg1Xte3Z5X
VnNdfwMODm67fPnEvHqbVdISp1tGS+77on18ohsJ7FU+KtADlaTTO4qKHL/SDCSv
0jt7tT4AgYnS2HDGkYSSgvgkXGfxPdFzqy+Shr41Em2oXp8mo9CQG8B/OT0kEUfB
sPsTMuVjjONVNdu8WDbw5t8HoDv/FE/3V7FodGAWosA7kI6hcPVBjaI1ZxWzt/ai
x2lVwFv2yeZ4Ea2+xbue4i0/4MBwizEEi9eiBXR0Sy8LP/RECRWCbE+omP/mXGZr
00Dos6eYiq/GfX/hp8ShSw1YMLAuZluhXOjkz0sTVvRiNGQV
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:01 2024 by rpki-client on console-ams.rpki-client.org