Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZLr_gt0zCIM2og-kS49EvNkNPBc.roa
File: ZLr_gt0zCIM2og-kS49EvNkNPBc.roa (raw, json)
Hash identifier: zvDlWOpVprlP7dwo91R9/figsF8BlAoLle9dcJKo+P8=
Subject key identifier: 64:BA:FF:82:DD:33:08:83:36:A2:0F:A4:4B:8F:44:BC:D9:0D:3C:17
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DF81F2B3299A7B7395C30A643B96ECA9C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZLr_gt0zCIM2og-kS49EvNkNPBc.roa
Signing time: Fri 01 Mar 2024 03:46:48 +0000
ROA not before: Fri 01 Mar 2024 03:46:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53667
IP address blocks: 2a06:de05:6000::/38 maxlen: 48
2a10:ccc2:9c00::/38 maxlen: 48
Validation: Failed, certificate revoked on Sun 31 Mar 2024 00:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f8:1f:2b:32:99:a7:b7:39:5c:30:a6:43:b9:6e:ca:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 1 03:46:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64baff82dd33088336a20fa44b8f44bcd90d3c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:df:ef:7b:68:de:0e:75:dc:d6:d0:0c:ed:22:
fe:f4:ae:e3:d9:12:51:0b:35:64:04:81:b3:97:50:
42:a6:d6:e1:79:fd:71:7f:20:35:9d:2f:17:50:f0:
58:db:e4:2c:11:ee:a3:54:39:12:71:94:15:4b:30:
71:98:f7:05:36:cb:f4:b5:90:46:3c:30:86:21:85:
23:b1:5a:25:b6:42:e1:66:17:da:91:bf:fa:94:e2:
c8:39:ba:15:96:14:cf:aa:7a:58:a4:15:f7:13:b4:
f8:7d:6d:8c:7e:eb:a2:fc:9e:a5:a0:37:b9:af:92:
2e:08:eb:29:e4:a2:46:36:24:6b:5b:5c:80:3e:97:
7a:12:d8:24:66:a7:87:a5:c8:c8:6d:65:26:ed:fc:
ab:1f:4a:1d:c4:9c:ab:dd:f6:27:fe:ff:e8:48:a9:
99:1e:60:c3:bd:a7:c2:cb:ca:23:4c:2b:23:38:fb:
d3:fa:d0:fa:c2:19:83:bd:aa:23:af:6f:63:7e:5c:
2b:b0:3a:f0:79:f5:47:c6:23:cb:30:ab:8e:03:70:
87:a8:36:a2:e8:65:a8:30:da:be:4d:af:58:67:c4:
a1:f5:fc:61:27:8c:f4:b5:a3:f1:eb:75:6e:b2:f3:
a1:a9:c4:c5:3a:78:85:c3:cf:d7:f1:e7:16:67:29:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BA:FF:82:DD:33:08:83:36:A2:0F:A4:4B:8F:44:BC:D9:0D:3C:17
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZLr_gt0zCIM2og-kS49EvNkNPBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de05:6000::/38
2a10:ccc2:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
7a:b3:af:56:95:91:d8:a9:6a:cd:5a:72:e7:67:4a:72:18:6d:
18:2c:61:bd:39:cc:6d:de:4a:a5:6f:cd:51:df:dd:09:f7:30:
bf:ae:5d:7b:26:30:35:d0:26:e4:f2:a0:94:39:af:69:43:fa:
92:84:7f:f3:f9:7f:81:32:80:40:c7:cf:88:cb:a5:3d:ea:66:
e0:3e:b1:2f:f9:82:3b:37:05:04:d8:75:db:ff:8d:b7:4e:b2:
05:b8:d5:24:4e:85:1e:a9:5f:d6:73:2c:c9:5c:b5:fd:9a:d7:
d0:e2:8c:a8:98:7c:96:12:55:8d:f8:02:c9:d4:c2:b5:2b:63:
c3:c2:d4:38:53:f8:d7:fc:e1:ca:a0:19:25:a5:7b:9b:c6:71:
92:c5:70:2f:7c:38:40:ab:1a:0a:bd:b2:27:ea:69:15:52:73:
1d:20:28:6b:5b:04:09:44:82:e5:27:c5:50:e9:e7:3b:36:d0:
0c:24:38:c3:8f:83:ed:83:37:bd:da:8e:c8:8e:0f:0f:30:4c:
80:0e:85:17:b4:93:5e:95:7b:3a:7f:27:2d:ce:5d:a5:77:ec:
3c:5d:bf:13:a8:01:3c:be:a4:08:ec:f8:75:63:86:bb:25:9b:
8a:ce:09:e6:90:6f:ea:73:af:d1:c6:53:b2:5a:91:fd:da:ff:
bf:0b:f6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 31 00:47:48 2024 by rpki-client on console-ams.rpki-client.org