Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZhImJnbB6YQmItvwicIYZLzieWQ.roa
File: ZhImJnbB6YQmItvwicIYZLzieWQ.roa (raw, json)
Hash identifier: VovxGHwGD5iNNrMNn2E4EbGZqOToG1kZgSw9i1Ds51c=
Subject key identifier: 66:12:26:26:76:C1:E9:84:26:22:DB:F0:89:C2:18:64:BC:E2:79:64
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191D77CDAE741979654932AB1DB2F9C7948
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZhImJnbB6YQmItvwicIYZLzieWQ.roa
Signing time: Mon 09 Sep 2024 15:52:49 +0000
ROA not before: Mon 09 Sep 2024 15:52:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214243
IP address blocks: 2a0e:97c0:4c1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 02 Oct 2024 17:09:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:7c:da:e7:41:97:96:54:93:2a:b1:db:2f:9c:79:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 9 15:52:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6612262676c1e9842622dbf089c21864bce27964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:15:df:e3:3b:bb:6f:84:98:c5:9d:64:78:29:
f6:6d:d4:a0:cc:48:13:be:5d:cd:3c:e1:9c:1b:e7:
65:4b:3d:45:55:8e:e5:af:55:f7:e0:49:b3:61:91:
df:f1:0a:65:96:3c:80:86:2e:85:8f:93:34:74:27:
a5:22:51:d6:7b:49:ca:e6:4e:14:33:86:56:f7:1a:
53:f9:db:b6:e1:8a:e9:9c:c9:08:cc:fd:60:11:73:
9f:1f:66:d2:46:ec:3d:70:c8:3c:41:87:ca:33:48:
9e:b3:80:11:ae:ab:46:e7:42:d2:b8:2e:4f:64:30:
61:62:46:76:62:de:87:2f:80:0c:d9:42:76:87:6a:
8b:f5:b3:2f:ef:78:7a:cd:07:d2:79:19:58:5b:f3:
80:08:61:cb:11:75:e7:8d:a4:7a:18:35:0c:dd:39:
dd:85:18:6f:d3:12:7a:ff:f8:82:a3:fe:ca:0b:b8:
be:b0:ca:e4:8b:d3:46:13:bf:b8:b8:12:5e:ee:17:
00:c1:6c:25:b5:04:2b:d2:e7:ee:58:54:65:c4:38:
0a:db:26:d6:ce:e7:8b:27:80:c2:c0:0a:52:1c:e1:
2f:17:5c:60:7a:2c:87:16:fc:be:00:7e:0c:00:32:
e3:e6:05:31:0f:a2:af:31:57:5d:94:37:c8:bc:21:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:12:26:26:76:C1:E9:84:26:22:DB:F0:89:C2:18:64:BC:E2:79:64
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/ZhImJnbB6YQmItvwicIYZLzieWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:4c1::/48
Signature Algorithm: sha256WithRSAEncryption
53:9e:46:df:c6:a2:7c:61:b5:e7:03:2a:7c:59:03:e2:4d:c4:
91:f4:6b:81:82:3c:2c:e6:fb:d2:03:49:f9:fa:2f:89:4a:29:
71:6c:d2:0a:1a:c1:86:ba:86:cb:52:89:55:08:43:9b:58:91:
37:d6:b2:fa:56:55:e8:d7:82:fd:50:10:c1:4b:2d:d0:c8:56:
1f:63:7f:be:9c:9d:9d:07:e9:98:cf:3e:e7:2a:e9:5e:30:f3:
09:06:07:62:aa:28:6f:b5:c0:84:cb:78:cd:d6:02:84:70:a5:
a7:a7:5c:fc:22:62:43:d0:28:1c:83:ee:7f:37:ec:f8:ac:94:
39:b1:35:a1:bc:85:06:79:37:42:53:eb:2a:5a:87:65:65:17:
47:45:a3:e7:39:30:7d:e7:bf:18:b1:5c:8a:3d:cb:2e:52:f9:
9a:14:de:4d:20:9b:f5:bf:70:70:2f:6e:14:d3:65:03:f7:b2:
bc:f7:a7:4c:ca:5e:6b:1d:8d:eb:f1:28:09:6b:b9:0d:bb:0f:
b2:64:af:18:7c:a1:e1:49:b9:21:c2:0b:6f:13:5b:e4:25:35:
f1:ef:0e:7e:d1:8d:a0:9b:ee:15:7d:c6:96:24:bc:aa:85:52:
af:f5:bb:23:81:f4:ad:57:b0:a1:5e:72:06:cd:f2:bf:43:fe:
f4:f8:70:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 19:23:17 2024 by rpki-client on console-fra.rpki-client.org