Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zry0t3sd8T5NznfOG3Z-lzbvdk4.roa
File: Zry0t3sd8T5NznfOG3Z-lzbvdk4.roa (raw, json)
Hash identifier: ZGpI4Ghz4odHHcc44Veg73POpnhuugYvuT7z4mHmItE=
Subject key identifier: 66:BC:B4:B7:7B:1D:F1:3E:4D:CE:77:CE:1B:76:7E:97:36:EF:76:4E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018570E77885385F33FE73D535AB413A1AE0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zry0t3sd8T5NznfOG3Z-lzbvdk4.roa
Signing time: Mon 02 Jan 2023 05:14:55 +0000
ROA not before: Mon 02 Jan 2023 05:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31898
IP address blocks: 2a0e:b107:f50::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 10 Jan 2023 08:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:78:85:38:5f:33:fe:73:d5:35:ab:41:3a:1a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 05:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66bcb4b77b1df13e4dce77ce1b767e9736ef764e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2b:25:46:43:e7:cb:e1:08:b2:14:6e:4e:37:
32:6c:f3:90:bb:a1:74:c7:ba:ff:5f:ec:05:d2:db:
c8:b6:dc:4c:24:ef:36:dd:49:32:5b:4b:7d:c0:d1:
4e:26:7d:69:c1:e5:fc:7b:1c:6e:c1:78:4a:04:04:
77:93:81:bb:f9:cf:f4:8e:4c:a2:9b:cd:5c:45:6e:
53:b0:9b:1a:47:14:ae:b2:82:ec:16:bf:04:53:ac:
4c:eb:89:90:99:67:99:f1:70:9e:e9:b8:7b:a4:9c:
7b:5a:e8:63:3c:ff:78:28:01:d3:f5:87:67:27:5b:
4b:d2:a4:2c:85:44:e7:06:60:06:9a:bb:62:b5:37:
70:fa:8c:93:cc:6b:0a:61:3d:be:fc:8f:9e:7b:12:
53:4e:e2:e1:dc:d1:20:5d:49:bf:ab:66:66:c6:8b:
42:ea:5e:c1:8f:97:15:67:59:d9:8f:c3:91:2b:f5:
de:3a:06:01:f2:c3:75:78:52:8c:2f:41:a3:69:fb:
ba:f3:b0:ed:80:8b:6d:7a:1a:65:1c:b0:30:e7:54:
50:59:8c:31:27:eb:ee:3a:83:30:9e:df:1b:12:20:
cf:49:b2:f0:4c:39:61:f8:e5:69:08:e8:68:08:dd:
38:ff:05:03:75:56:b5:a9:25:ad:87:94:4d:76:ab:
46:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:B4:B7:7B:1D:F1:3E:4D:CE:77:CE:1B:76:7E:97:36:EF:76:4E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Zry0t3sd8T5NznfOG3Z-lzbvdk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:f50::/44
Signature Algorithm: sha256WithRSAEncryption
a5:30:9f:82:20:be:dd:fe:c8:ea:ba:7f:c8:79:eb:f6:48:2b:
6f:e4:18:3a:b0:d4:5d:c9:d5:33:87:32:fc:74:19:4a:28:7e:
ee:4d:8b:d3:c5:50:1e:ca:42:00:a0:3e:02:e9:c8:3a:8e:91:
a3:99:3f:9b:af:e0:c3:9d:14:26:6a:43:0c:37:25:c6:5b:1c:
a8:e8:c9:6d:dc:fa:e8:a2:70:8f:9d:48:b4:74:ea:ca:98:b5:
10:1e:c4:25:73:3d:08:f1:4f:1b:65:48:14:38:bf:e1:51:d5:
44:f4:d0:4f:b0:d5:f6:b3:ee:1d:d6:01:ef:45:cb:8d:30:f8:
61:03:e0:dc:d9:dd:88:df:0b:24:cc:b5:59:b7:3a:f8:ac:16:
f5:cd:24:44:34:4b:5e:87:12:c1:ec:b2:c2:bc:c5:34:bb:cf:
dc:80:aa:a2:68:75:99:cf:45:bd:6e:fd:b8:ce:71:b1:54:3d:
12:e8:fe:09:72:a9:5b:b7:1e:1d:cd:87:89:76:05:59:ae:8f:
14:55:eb:7e:58:6c:c8:ec:fd:2d:10:bb:8d:fe:27:91:2e:9d:
7b:e9:96:7d:14:7d:71:c3:18:67:ce:09:ee:b4:d5:77:85:a3:
ea:0b:5a:0e:66:27:5c:77:2f:41:43:b8:69:8c:ce:a0:90:b6:
b0:7f:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:06 2024 by rpki-client on console-ams.rpki-client.org