Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/zQI-gK75O7-7bErPAAEFqQBE8DU.roa
File: zQI-gK75O7-7bErPAAEFqQBE8DU.roa (raw, json)
Hash identifier: jzOQMpCigrMivL+uclDzI8mkOhCfmr2wWEpWOZvd7zs=
Subject key identifier: CD:02:3E:80:AE:F9:3B:BF:BB:6C:4A:CF:00:01:05:A9:00:44:F0:35
Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial: 0185703971B75424AA6621C00BFAEDCBDA12
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/zQI-gK75O7-7bErPAAEFqQBE8DU.roa
Signing time: Mon 02 Jan 2023 02:04:50 +0000
ROA not before: Mon 02 Jan 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209859
IP address blocks: 2001:67c:1768::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:71:b7:54:24:aa:66:21:c0:0b:fa:ed:cb:da:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Validity
Not Before: Jan 2 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd023e80aef93bbfbb6c4acf000105a90044f035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:c1:d6:c0:34:65:92:51:93:d0:92:23:5e:97:
bc:a9:bb:57:f2:28:6c:bc:2f:11:0a:48:01:fb:94:
4e:09:3b:15:5f:91:59:81:88:ba:ed:59:7a:b7:94:
88:2c:95:e1:f2:57:0c:71:1a:42:b1:ae:b2:20:6f:
28:30:b7:80:c6:45:bb:c9:21:07:21:89:c7:fe:4f:
a8:74:c6:92:16:49:cb:a6:b8:38:4b:eb:3b:62:cc:
14:f2:9f:1a:3c:18:8e:bd:7f:dc:70:1c:30:68:f9:
6d:42:1d:fb:fa:a3:16:79:fe:c7:1e:2a:20:b1:39:
73:50:67:83:42:1c:85:90:29:a6:c3:50:e2:fa:55:
cd:83:8c:fd:0e:c8:99:3b:86:54:84:4e:a9:60:f8:
9a:eb:7f:36:12:0c:86:09:a3:e6:14:79:35:2c:51:
3f:81:82:ef:13:a7:9b:1a:99:46:54:30:45:70:cf:
c4:8d:da:c9:b3:f1:82:ab:06:f0:30:dd:7c:f6:ed:
2f:8c:75:6a:3c:5b:c6:50:a0:c4:13:8f:a6:f2:40:
66:56:43:9d:30:91:f9:c7:c9:98:d0:a0:1d:72:68:
59:e0:9f:79:76:a6:4f:e9:75:36:15:08:5e:41:9b:
86:35:c0:0b:ef:aa:3c:e2:c5:d6:6d:f9:fc:f8:43:
52:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:02:3E:80:AE:F9:3B:BF:BB:6C:4A:CF:00:01:05:A9:00:44:F0:35
X509v3 Authority Key Identifier:
keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/zQI-gK75O7-7bErPAAEFqQBE8DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1768::/48
Signature Algorithm: sha256WithRSAEncryption
41:af:1b:90:e5:59:e1:93:d8:dd:96:8b:ed:9d:c0:5e:5b:8e:
e1:b0:77:48:fb:09:7f:c3:c8:01:66:92:6a:5a:1d:70:dc:96:
5e:42:96:ed:10:82:b5:1d:40:42:3c:84:5d:16:5f:41:bd:5a:
2e:af:33:d7:3b:d9:d8:bd:9e:ae:50:94:31:7d:65:58:21:0b:
8f:a6:51:98:6c:0a:19:32:ea:7a:ca:4d:5d:66:aa:05:09:ef:
3b:dc:38:a5:c3:2b:71:db:64:95:c1:48:04:88:0a:e2:a4:98:
6a:2e:8d:3c:86:3e:da:90:25:66:ee:ff:33:73:3b:0a:7e:f1:
a5:78:3a:62:2e:6c:52:45:ee:25:ee:cf:0e:94:5c:b0:2c:bf:
f6:3b:42:d1:58:cd:0e:67:83:c4:f0:96:b2:db:c9:10:d5:44:
d3:5b:0b:80:9a:0e:2b:69:8b:95:f3:d5:d0:29:72:af:f0:80:
90:22:6a:f4:33:8b:8a:ba:1c:23:c2:7a:f5:f9:d2:a0:2d:85:
0d:33:9a:e3:ba:92:f2:0a:5a:50:62:61:46:6d:8a:25:f1:b5:
57:ee:87:3e:fe:4c:d6:22:bd:62:aa:5a:49:52:f7:be:42:f6:
39:b1:21:c8:f8:a0:15:91:2b:e9:3f:94:a6:a9:c5:b9:69:c3:
bb:7d:37:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:15 2024 by rpki-client on console-fra.rpki-client.org