Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZGVq3_LTZ2DL85IBF7Xxf3qHpi4.roa
File: ZGVq3_LTZ2DL85IBF7Xxf3qHpi4.roa (raw, json)
Hash identifier: 9kxEKyneC8J8eN/XMRv2lPpA7Q9EB4SDIHJu2uBkHx8=
Subject key identifier: 64:65:6A:DF:F2:D3:67:60:CB:F3:92:01:17:B5:F1:7F:7A:87:A6:2E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01935A76B9B991A4A1853EF3C447631019B3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZGVq3_LTZ2DL85IBF7Xxf3qHpi4.roa
Signing time: Sat 23 Nov 2024 19:19:10 +0000
ROA not before: Sat 23 Nov 2024 19:19:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214223
IP address blocks: 2a06:de01:90::/44 maxlen: 48
2a10:ccc0:160::/44 maxlen: 48
Validation: Failed, certificate revoked on Mon 16 Dec 2024 17:28:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:76:b9:b9:91:a4:a1:85:3e:f3:c4:47:63:10:19:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 23 19:19:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64656adff2d36760cbf3920117b5f17f7a87a62e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:81:f9:56:65:df:9a:95:3f:31:55:18:91:4b:
dc:60:c8:f0:68:ce:cd:b4:f8:82:00:5e:00:9f:d0:
6f:59:52:c2:05:54:84:75:2d:5c:00:fd:f1:13:1f:
05:c9:38:ca:ed:b7:1e:85:a1:40:21:1c:26:f1:13:
b2:f0:f2:00:d3:c5:1f:10:03:07:a9:6b:9a:5b:ba:
91:ef:1e:f7:03:d8:41:aa:ec:84:b3:f1:a8:e8:7a:
5f:38:11:6c:5b:ac:8f:c0:e9:cf:1f:2e:1f:94:b5:
03:cb:bc:a9:24:e0:e3:f3:52:06:64:b5:12:45:d1:
25:91:73:4a:d1:da:41:06:98:5d:dd:c6:cd:6d:39:
4f:1b:fb:70:42:a6:50:29:7f:44:3c:32:46:4f:e5:
1f:d9:d4:e7:ca:a8:18:76:51:6c:dc:79:ba:76:28:
0e:07:64:43:ca:69:a9:48:77:91:29:ae:e1:d5:df:
61:fa:6c:bd:0e:56:2b:94:2f:cc:2a:41:a4:eb:f8:
71:01:f6:a1:1a:22:fa:4e:6e:5b:b9:c9:85:94:7f:
bf:72:01:cb:f6:03:df:00:f7:4b:53:53:62:74:d2:
26:4b:ff:5d:f5:61:0a:27:1b:80:66:63:19:f6:b5:
2c:0e:13:42:36:7f:f9:11:eb:79:7a:a8:a0:d3:98:
4a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:65:6A:DF:F2:D3:67:60:CB:F3:92:01:17:B5:F1:7F:7A:87:A6:2E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZGVq3_LTZ2DL85IBF7Xxf3qHpi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de01:90::/44
2a10:ccc0:160::/44
Signature Algorithm: sha256WithRSAEncryption
64:1f:7f:69:15:1f:64:43:e4:86:c6:7e:38:a6:a5:fb:cc:02:
1a:7a:cc:5e:91:52:60:8a:2e:81:b7:f3:b9:0d:ab:a2:0d:5f:
76:83:4d:9d:d9:f6:86:7b:c9:d5:ff:f1:c7:fe:74:92:a5:b2:
68:5f:7d:74:d2:92:dc:ab:36:86:f2:ff:26:2e:66:7c:42:6f:
41:2f:b7:d0:4c:c5:7a:ba:51:b4:20:22:2e:84:9e:e1:78:40:
4d:ce:0f:e1:ef:9d:76:5e:90:4a:2a:ef:f4:52:87:55:de:48:
7e:e6:1f:52:67:3a:f3:52:5a:2a:de:46:b3:85:62:af:82:99:
5f:5a:04:70:2f:fb:7e:cd:66:94:65:08:41:6a:d1:29:1a:ed:
96:02:fd:c3:b5:d3:23:69:48:c1:28:ed:7a:0e:77:0b:98:d4:
6d:2a:f9:11:29:40:1f:f7:54:6d:32:c8:d4:07:d0:d2:e8:82:
f3:0e:fe:eb:5c:b7:fa:ed:b7:51:78:fa:9f:a3:68:e1:8a:93:
8d:bd:91:90:79:8f:4c:e4:11:5a:a5:a6:f6:02:86:3d:58:1c:
13:5d:bc:18:91:30:b3:30:ff:91:fd:60:f7:29:60:01:f9:eb:
83:23:14:d3:1c:d2:05:fd:a6:f8:e2:50:c7:35:03:34:14:8f:
6c:48:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 16 19:52:16 2024 by rpki-client on console-fra.rpki-client.org