Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ZzUE5pyZJt97fqSief-jCEVbDUg.roa
File: ZzUE5pyZJt97fqSief-jCEVbDUg.roa (raw, json)
Hash identifier: zW8goESHs4OZ2+AdPpUII2Bv3rsOBfAKOzDJKcjOMaI=
Subject key identifier: 67:35:04:E6:9C:99:26:DF:7B:7E:A4:A2:79:FF:A3:08:45:5B:0D:48
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018B91877AEB38D6A54B619A919E7AA50229
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ZzUE5pyZJt97fqSief-jCEVbDUg.roa
Signing time: Thu 02 Nov 2023 19:34:16 +0000
ROA not before: Thu 02 Nov 2023 19:34:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400818
IP address blocks: 2a05:b0c7:1800::/48 maxlen: 48
2a05:b0c7:1800::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:87:7a:eb:38:d6:a5:4b:61:9a:91:9e:7a:a5:02:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Nov 2 19:34:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=673504e69c9926df7b7ea4a279ffa308455b0d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:99:d6:26:ca:2e:07:bf:3a:2e:d0:56:1c:fb:
97:3c:99:27:05:d5:6d:09:c3:94:dd:37:88:49:d6:
e7:6c:cb:94:32:c7:84:20:28:3a:00:4c:97:fc:ae:
f9:46:47:db:1c:e0:6a:cb:93:57:fe:83:39:09:05:
08:5f:97:5d:74:8e:8e:f4:ea:b5:f0:ac:7d:cf:cf:
e2:20:71:2b:10:01:a3:23:0d:0b:ec:e3:59:62:be:
49:2f:7f:4b:ee:a9:e3:03:6b:67:8c:cc:9e:1d:73:
08:c9:70:93:6c:0f:bf:d4:71:61:5d:f1:1a:09:78:
7a:9b:64:bc:9f:1b:32:b7:19:87:4c:30:fb:20:0d:
28:3e:e9:aa:a9:08:83:74:a6:23:f8:95:43:94:d1:
31:cf:3d:12:f8:c1:4e:ad:fd:de:b2:b6:48:da:88:
54:80:3c:a1:5d:fc:72:4b:c5:23:af:60:e2:82:9c:
98:0a:c6:5a:be:96:c9:ca:6d:4d:66:97:05:c2:ff:
6d:5a:3e:a3:b6:be:3b:83:e6:fb:56:7a:65:09:1c:
83:b4:27:cb:c5:58:45:40:81:1f:a1:3d:b3:94:b4:
6f:52:77:74:a4:43:9b:99:01:e2:a7:a5:61:20:58:
f9:42:01:bf:b1:2b:ad:4f:53:fd:0c:51:86:1a:09:
02:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:35:04:E6:9C:99:26:DF:7B:7E:A4:A2:79:FF:A3:08:45:5B:0D:48
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/ZzUE5pyZJt97fqSief-jCEVbDUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c7:1800::/44
Signature Algorithm: sha256WithRSAEncryption
07:ca:16:ec:3f:97:57:0f:fa:e4:50:8f:93:d7:bd:66:6e:d5:
96:3e:b3:74:56:08:60:fe:ff:e2:72:f3:58:dd:09:1e:01:05:
74:59:13:4f:ab:a1:cf:ef:4c:11:02:87:e0:3e:4e:5f:21:2f:
40:7f:49:52:64:f9:87:85:a7:34:f3:24:da:96:4b:3d:38:48:
76:47:5d:49:fa:65:8c:11:ea:d4:16:34:7f:f7:17:a5:0a:05:
07:7e:19:56:01:f8:8c:b9:f7:c0:af:84:0f:ae:65:c3:c2:5a:
b1:6b:21:a8:04:1e:46:e9:a7:e0:3a:ae:44:e4:d5:15:be:c7:
18:42:41:59:8f:75:db:4a:60:19:0c:2b:a2:55:e6:0c:4e:b0:
c1:2d:d3:05:bb:47:29:b2:a5:cb:4d:98:58:53:32:ac:f8:a2:
96:80:81:2d:bf:a3:ca:81:25:74:94:89:89:57:b4:cf:7a:72:
89:b8:35:e3:e4:d8:2e:81:40:35:ec:14:6d:5a:82:f3:41:e8:
46:d3:12:b5:a2:49:51:9a:7f:c1:c1:9b:fe:ca:4f:21:6d:7f:
1e:2c:32:e8:ef:fd:b0:97:18:2a:e3:11:9e:43:c1:a5:b0:07:
98:58:8f:4f:9e:02:1c:1b:e6:6e:47:bc:7a:6e:fd:8b:ca:23:
b6:85:18:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:21 2024 by rpki-client on console-fra.rpki-client.org