Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zd6764kc_-qbZIj-GjkmAnSftSw.roa
File: zd6764kc_-qbZIj-GjkmAnSftSw.roa (raw, json)
Hash identifier: il9oyUnNsJ3Anp4pX3b9Q1fFEYfp/rjIH1rlAEgDPkY=
Subject key identifier: CD:DE:BB:EB:89:1C:FF:EA:9B:64:88:FE:1A:39:26:02:74:9F:B5:2C
Certificate issuer: /CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Certificate serial: 018F0C43006EF98E263A0F9425D5DC77387F
Authority key identifier: CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zd6764kc_-qbZIj-GjkmAnSftSw.roa
Signing time: Tue 23 Apr 2024 18:41:08 +0000
ROA not before: Tue 23 Apr 2024 18:41:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a12:cc04::/32 maxlen: 32
2a12:cc06::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 28 May 2024 16:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:43:00:6e:f9:8e:26:3a:0f:94:25:d5:dc:77:38:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cddbefba8fe3c1f668c8444384fe4a3a9f4d87f1
Validity
Not Before: Apr 23 18:41:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cddebbeb891cffea9b6488fe1a392602749fb52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:c7:b3:39:0b:38:a3:f2:8e:be:22:63:a5:
fb:a8:20:5f:43:b3:98:b8:99:74:6f:7d:80:90:07:
ff:30:d7:a6:56:2e:b2:53:b6:2b:37:74:2b:e7:a1:
b0:24:b2:58:c6:d0:77:c3:97:1c:79:ca:b4:b1:b2:
28:0c:72:44:4d:59:f5:f0:f9:d5:a6:f2:29:26:f9:
ca:b8:ae:90:8b:77:5f:bd:21:9d:ca:86:e7:b6:2a:
f5:04:7d:be:75:7c:30:f3:75:a4:f5:91:0f:17:5e:
af:3c:5b:5d:11:81:50:23:34:7c:d4:01:03:0d:d3:
59:c8:24:ee:b4:1c:c5:13:c7:a6:f7:c7:b4:09:35:
a9:7f:22:0e:fe:a7:89:c8:e8:7c:00:0e:fe:fb:0d:
81:fb:58:c1:37:24:df:2c:14:21:42:40:0a:19:f6:
05:8b:2a:9f:5f:08:62:a7:3c:e3:ad:78:96:d6:15:
c3:72:55:ca:da:10:7b:1e:9b:85:d4:fb:c9:4d:60:
58:d1:ae:aa:d3:3e:d0:65:5b:eb:cd:96:b2:6b:3d:
56:a1:1f:0e:d6:30:25:48:53:81:62:73:b3:ae:66:
0f:d8:ee:7f:10:bf:23:da:6b:5f:3c:cc:8f:c2:cf:
46:d6:38:e3:9e:de:f0:f1:ac:17:00:9d:ed:e0:0c:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DE:BB:EB:89:1C:FF:EA:9B:64:88:FE:1A:39:26:02:74:9F:B5:2C
X509v3 Authority Key Identifier:
keyid:CD:DB:EF:BA:8F:E3:C1:F6:68:C8:44:43:84:FE:4A:3A:9F:4D:87:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdvvuo_jwfZoyERDhP5KOp9Nh_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zd6764kc_-qbZIj-GjkmAnSftSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/4e52f1-13b2-45df-8a43-1a39e6a6de93/1/zdvvuo_jwfZoyERDhP5KOp9Nh_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:cc04::/32
2a12:cc06::/32
Signature Algorithm: sha256WithRSAEncryption
52:03:31:b1:4f:92:a1:f6:cd:b6:2c:dc:e8:13:dc:64:34:86:
a0:ce:9c:7a:47:6f:24:4d:05:f9:a6:55:cb:84:a6:9e:28:ea:
be:07:74:09:05:50:7b:37:dd:c3:ac:48:58:0f:95:10:59:35:
7d:24:b2:0f:fd:4b:71:8e:7c:9f:37:f2:47:dc:0e:a1:fc:d2:
96:92:85:f2:3e:7a:da:31:86:86:22:81:a7:38:39:a0:ef:9d:
b2:c5:d3:60:b9:d5:7f:95:0f:43:2d:f5:9a:af:9b:6c:66:59:
11:40:3e:27:a8:47:8d:f6:0e:60:9c:d8:f9:29:24:1b:4c:f0:
8e:fc:d2:df:ef:8d:2a:9f:83:26:63:f5:42:08:86:8b:e4:a6:
79:28:d4:d8:95:51:2f:79:b2:75:7f:9c:9d:f3:da:13:17:2a:
63:e4:bc:c4:02:c4:c5:03:c9:77:41:cb:87:00:21:97:08:88:
14:ae:7f:14:ea:2e:bc:5a:e1:8a:3e:2f:c2:00:42:3d:03:1d:
1b:6f:45:97:39:a1:77:33:61:48:62:f6:75:ef:07:ae:4f:a2:
65:7b:98:b6:5e:0b:a7:57:5b:3f:e9:23:31:8c:30:7e:84:54:
a6:89:83:f6:2e:f3:3b:32:31:1e:3f:e4:72:4d:eb:0b:04:61:
2b:a6:57:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 19:13:11 2024 by rpki-client on console-fra.rpki-client.org