Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ZzJvnekJBmrNo2hN835EqGTlEGs.roa
File: ZzJvnekJBmrNo2hN835EqGTlEGs.roa (raw, json)
Hash identifier: 2A9KTNJDcPt0GnbP7FZvp8b/mBuLelgNzNykEv+4i2s=
Subject key identifier: 67:32:6F:9D:E9:09:06:6A:CD:A3:68:4D:F3:7E:44:A8:64:E5:10:6B
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018AD5531850986BA9E7A125EB3DE9C68F0E
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ZzJvnekJBmrNo2hN835EqGTlEGs.roa
Signing time: Wed 27 Sep 2023 06:28:27 +0000
ROA not before: Wed 27 Sep 2023 06:28:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 2a0e:d786::/32 maxlen: 32
2a0e:d785::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:53:18:50:98:6b:a9:e7:a1:25:eb:3d:e9:c6:8f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 27 06:28:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67326f9de909066acda3684df37e44a864e5106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8e:11:46:f2:eb:1a:14:0c:1a:b9:65:3d:f4:
7e:0e:3e:08:86:3c:9d:97:4a:3c:57:29:80:1f:c8:
0a:9b:28:15:49:b9:c3:54:44:d8:9d:5e:98:7e:04:
16:e9:51:05:4f:d4:f8:bc:c8:29:73:27:4d:c1:a3:
6a:aa:99:16:aa:fa:b5:d0:5b:ce:54:ed:be:81:f2:
a4:ff:3a:55:e2:b3:82:68:d0:d4:b6:87:cf:93:27:
d7:77:d4:78:69:cf:d9:6a:ba:bf:fd:34:e8:33:14:
6b:9f:cf:57:51:57:37:dc:5f:cc:4f:7c:a2:b4:ba:
c6:c5:aa:2b:de:b9:51:72:71:6e:ee:b4:fc:92:a0:
b2:6b:e2:ab:f5:a6:6f:15:e5:53:f5:94:bf:82:e6:
1d:f2:e5:d1:dd:08:60:bf:8a:28:c3:68:15:5e:e1:
32:c4:62:3e:0c:d5:ff:f8:15:d4:28:56:c2:a0:95:
dc:cd:25:2b:35:44:1a:3a:ca:c2:86:eb:30:a2:d1:
61:0c:aa:22:04:82:56:26:11:87:4d:52:cc:87:23:
3e:f3:3d:74:6c:cf:c0:92:ed:cd:db:99:a8:f2:e9:
7d:0b:39:aa:da:3c:af:39:c5:60:60:3e:09:86:4a:
d3:6f:4e:2a:ca:4e:bb:fd:00:b1:c5:58:73:ff:20:
91:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:32:6F:9D:E9:09:06:6A:CD:A3:68:4D:F3:7E:44:A8:64:E5:10:6B
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ZzJvnekJBmrNo2hN835EqGTlEGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d785::-2a0e:d786:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
4c:25:79:9f:e1:1b:48:76:ea:cd:23:01:f7:d0:66:47:56:7d:
92:8a:e2:c9:a5:fc:14:42:c8:eb:55:24:08:4c:36:1d:48:aa:
76:bf:35:a7:33:81:4d:62:b7:aa:dd:3e:d8:fd:21:af:7f:6f:
ce:03:02:40:7a:e3:87:87:fc:5c:bf:d6:8d:bd:47:ad:e7:fa:
5c:13:84:04:d8:78:e0:1b:20:95:1e:80:16:ed:f5:7c:48:9b:
b3:9c:e6:3f:bc:69:f2:6a:e4:fc:ee:d0:f9:10:bd:d6:a7:86:
a2:75:b8:da:d5:c7:da:c1:d5:3b:b8:79:61:f6:d6:3d:92:54:
f7:7c:d5:10:d3:36:d0:63:61:9a:5c:f5:45:88:08:e2:66:d5:
a0:a1:25:d5:67:3e:6c:15:93:06:cd:cd:04:f0:52:a7:ae:e9:
35:a4:d2:df:76:1a:b8:28:27:7f:d7:80:48:78:b6:57:dd:ff:
17:6a:c0:80:10:68:ed:03:45:95:9e:92:86:7e:26:a0:79:f3:
4a:2b:b6:a5:57:a8:4a:72:6c:93:a0:28:d2:0e:11:e2:38:7a:
b7:99:ec:3b:84:a8:b9:f5:0d:9b:6e:63:12:03:c0:f9:cd:b4:
74:54:44:db:d5:ba:ca:be:6e:b0:2a:6b:98:06:0e:3d:b7:10:
04:ac:b5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:24 2024 by rpki-client on console-ams.rpki-client.org