Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zhqZkiYHUeaC3IYV54PnWh3gN3k.roa
File: zhqZkiYHUeaC3IYV54PnWh3gN3k.roa (raw, json)
Hash identifier: f+dXhGly0zIJa1w/xLw3isjaoHioMzBjkkdZY6jZCOg=
Subject key identifier: CE:1A:99:92:26:07:51:E6:82:DC:86:15:E7:83:E7:5A:1D:E0:37:79
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD3A8823BC3ECDB2B3DEEC74761E9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zhqZkiYHUeaC3IYV54PnWh3gN3k.roa
Signing time: Tue 02 Jan 2024 10:34:30 +0000
ROA not before: Tue 02 Jan 2024 10:34:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a0e:97c1:110::/44 maxlen: 48
Validation: Failed, certificate revoked on Wed 13 Mar 2024 19:53:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:3a:88:23:bc:3e:cd:b2:b3:de:ec:74:76:1e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce1a9992260751e682dc8615e783e75a1de03779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:35:f3:19:92:94:c1:ff:77:01:9e:03:34:
78:af:f0:1f:8e:e3:ef:8c:95:da:6e:10:50:0a:63:
21:e9:ae:52:b0:57:56:51:61:66:c2:fe:c9:29:24:
4c:7a:5a:26:e5:44:dc:ff:19:bf:b2:1c:61:26:85:
87:80:42:11:4a:a4:86:80:e2:cd:05:8e:34:05:fd:
ed:7d:b0:a1:b9:a7:16:f0:ca:75:d2:64:3b:e4:7e:
71:85:15:d9:42:09:ed:b3:5d:5b:1c:1e:c5:8d:d6:
64:84:33:f8:ee:ca:a0:a0:d0:2f:70:a4:f9:4e:ca:
7b:44:d1:78:87:55:d7:17:66:be:b9:23:2c:ff:ea:
c4:88:32:ef:8f:04:7c:4c:94:fb:c0:06:af:fb:1c:
96:bc:5b:62:f6:69:5c:76:70:f9:fd:df:b7:44:ef:
64:3f:46:ec:54:8c:70:62:2b:c0:a0:c9:71:2e:d2:
ac:11:07:95:c7:15:d8:6d:5c:09:f7:c3:be:ae:9e:
37:4c:9a:aa:39:cb:26:6d:2c:f2:f4:7c:05:12:8d:
35:6b:67:7f:4d:a9:25:b1:2f:64:34:0c:a0:79:98:
d6:38:22:59:c4:1f:d0:b6:67:d2:a8:c2:46:7f:bc:
87:21:a0:46:91:30:1c:c7:58:c4:6b:34:5a:e2:e9:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1A:99:92:26:07:51:E6:82:DC:86:15:E7:83:E7:5A:1D:E0:37:79
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/zhqZkiYHUeaC3IYV54PnWh3gN3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a0e:97c1:110::/44
Signature Algorithm: sha256WithRSAEncryption
37:74:1c:ca:be:19:89:0c:03:82:7d:29:01:b2:5e:22:5d:2d:
14:e5:a3:fe:f2:39:4f:d1:a7:c2:82:9f:38:d9:0d:a8:77:51:
ef:27:a7:7d:d5:16:58:a2:7c:e8:9a:d3:ea:45:5f:fd:fb:75:
e7:67:be:c8:f5:11:47:1e:73:a7:26:ba:78:29:15:72:41:25:
a1:39:e3:1e:b3:0f:f2:f2:f1:da:d2:1b:c7:d0:97:a8:f8:72:
6e:b7:61:6b:0d:ba:00:58:14:5e:1d:1b:bb:15:62:5b:9a:25:
81:cc:0f:9e:07:21:bf:c1:bb:69:ec:92:1d:d7:71:18:cd:93:
b0:9d:52:0d:14:10:69:34:a5:44:8f:58:57:39:19:a8:12:0f:
24:1e:23:43:7c:a3:9c:8e:79:62:b2:ca:ba:e5:aa:b9:b8:3c:
96:65:27:4c:6d:a8:2b:b5:26:32:65:2c:df:0c:6f:c9:60:6b:
cc:4d:23:2e:69:82:e8:10:56:a8:2c:50:16:58:b6:9e:91:de:
07:36:e7:39:9f:42:3b:89:82:00:b0:55:a6:55:b2:9c:5e:a4:
00:30:e0:72:50:6c:6b:77:4b:99:57:0a:3a:36:f6:f0:d7:c6:
22:9d:94:3a:d5:9b:5f:85:e8:d5:64:46:e9:40:96:b1:28:d1:
cb:6d:61:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 22:33:06 2024 by rpki-client on console-ams.rpki-client.org