Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/z3_sAszqDhdILwKPYVsar7UZ-DI.roa
File: z3_sAszqDhdILwKPYVsar7UZ-DI.roa (raw, json)
Hash identifier: j0V/phkRtDrWw6hgZNMAoz288iRV7v+9jU4XqTZWcoM=
Subject key identifier: CF:7F:EC:02:CC:EA:0E:17:48:2F:02:8F:61:5B:1A:AF:B5:19:F8:32
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 0185711E89A4660DAFFA01DF8844B81F9C2F
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/z3_sAszqDhdILwKPYVsar7UZ-DI.roa
Signing time: Mon 02 Jan 2023 06:15:04 +0000
ROA not before: Mon 02 Jan 2023 06:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212510
IP address blocks: 2a0c:b641:2c0::/44 maxlen: 48
Validation: Failed, certificate revoked on Fri 01 Dec 2023 13:08:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:89:a4:66:0d:af:fa:01:df:88:44:b8:1f:9c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 2 06:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf7fec02ccea0e17482f028f615b1aafb519f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:70:15:d3:59:d1:f3:ef:ec:cd:28:94:49:
72:33:62:19:13:89:e3:b4:05:2e:8a:ba:29:d0:4e:
5d:fa:b1:c2:e3:bc:d9:8c:52:2e:9e:40:2f:72:97:
8c:76:27:1e:7a:d8:da:23:bf:80:53:1e:a8:dc:cd:
ee:27:8b:11:39:01:07:97:31:df:26:c0:a3:48:d6:
c0:33:d8:1e:57:ce:ef:23:b2:61:f8:c9:95:32:e6:
9e:f7:f4:8d:2a:ec:cf:f5:23:f7:ba:ca:12:97:dc:
55:66:c2:53:d5:1c:8c:94:1b:f7:c8:cf:cd:97:08:
52:3e:bd:d7:b6:0b:f0:51:48:9d:86:63:d8:c5:f2:
83:d0:8d:fc:20:d6:c7:43:c0:36:50:38:96:72:7b:
c9:28:18:61:5e:a6:24:e4:dc:b8:b7:ec:4c:44:4b:
ab:e3:1e:91:96:80:44:6a:8d:d3:1c:84:1a:aa:0e:
c3:fd:39:ae:a4:4c:10:69:02:e6:e2:2d:61:6b:f0:
f2:87:6b:50:63:67:a4:75:59:e4:58:67:b6:7a:12:
3f:fc:70:73:22:13:ac:d1:6a:af:91:72:e7:70:0d:
d2:6a:dd:dd:86:c8:ef:c6:b3:b5:1e:87:46:92:1a:
93:e8:cc:47:22:5f:60:79:94:bd:0f:8e:c0:b0:0f:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7F:EC:02:CC:EA:0E:17:48:2F:02:8F:61:5B:1A:AF:B5:19:F8:32
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/z3_sAszqDhdILwKPYVsar7UZ-DI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:b641:2c0::/44
Signature Algorithm: sha256WithRSAEncryption
88:d0:c9:08:2e:e5:ac:41:b6:3a:3b:69:89:93:79:22:ed:d4:
c6:30:ca:87:75:39:f9:a5:ed:cd:97:d2:ab:0f:17:7d:41:a0:
10:92:53:c4:4a:ed:78:3b:3e:df:37:ed:f9:dd:24:a7:b4:cd:
b3:bc:1d:be:8a:9e:dc:b1:2c:b8:88:52:bb:c6:41:c2:b5:fa:
59:2f:24:d4:f3:cc:12:a5:c4:2b:d3:5c:2b:92:a2:5c:ad:e7:
f5:4e:96:4d:6e:33:a5:13:af:6b:53:f9:4b:ae:02:4a:90:40:
42:23:db:8e:d2:1f:6c:cd:b1:d1:44:f7:c1:c4:b2:fc:26:0f:
76:cb:32:11:24:d7:b9:bd:19:f5:b5:72:ea:fa:13:a9:28:bf:
73:a8:a2:9e:b2:d5:88:3b:a6:cd:80:82:30:8a:10:84:c9:13:
82:db:ed:c2:5a:0c:44:e5:aa:44:f7:db:77:58:af:c6:80:9b:
5c:91:b6:c1:d9:bb:63:54:55:99:c1:90:e0:71:75:45:56:f8:
36:a7:6c:3b:cf:07:86:03:3e:ab:de:87:16:c7:93:1f:6e:84:
5b:de:00:f1:5b:62:79:1a:ea:9b:12:f7:d0:46:a1:08:dd:0e:
b2:a2:9b:40:db:63:7a:d2:eb:f0:88:2b:31:71:75:58:6b:24:
0a:e3:10:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:16 2024 by rpki-client on console-fra.rpki-client.org