Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZXSzCM-lYLre2IH5RUJ1R_VGK8U.roa
File: ZXSzCM-lYLre2IH5RUJ1R_VGK8U.roa (raw, json)
Hash identifier: DoxGtZAzAHNvdhYNxGbkBJioiyrAEIjfNAy0p8t4YoQ=
Subject key identifier: 65:74:B3:08:CF:A5:60:BA:DE:D8:81:F9:45:42:75:47:F5:46:2B:C5
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2ED2109282C25D5C59667D37A28A76
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZXSzCM-lYLre2IH5RUJ1R_VGK8U.roa
Signing time: Sun 01 Jan 2023 07:14:45 +0000
ROA not before: Sun 01 Jan 2023 07:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209114
IP address blocks: 2a0d:2146:8060::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 04 Apr 2023 13:52:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:d2:10:92:82:c2:5d:5c:59:66:7d:37:a2:8a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6574b308cfa560baded881f945427547f5462bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:3a:c9:60:bd:80:9e:78:bd:3c:99:97:dc:
36:bf:38:89:0d:c1:56:34:85:cb:1d:c8:e3:30:41:
46:73:97:c3:16:86:b1:1f:1b:35:b6:6e:c9:f7:bd:
f6:cd:24:d8:82:0d:ca:42:53:c9:57:ee:a7:57:e9:
fc:0d:99:dd:22:9e:92:c1:2d:ac:2e:f8:1c:a2:82:
5c:c0:c5:f2:d6:8d:1d:19:1c:cb:b9:01:0e:90:28:
13:5b:19:c4:1b:cf:e4:ec:ca:c1:ec:a4:c4:0c:da:
53:a6:34:62:87:eb:ab:9c:ed:bc:72:d7:5d:46:e5:
30:e8:8a:47:9e:ab:9d:91:fe:62:e6:af:2d:d6:f8:
36:db:fa:1f:6c:04:c3:50:24:93:f4:77:cf:a0:7f:
4a:fc:c2:e2:c4:64:3a:e0:61:14:6d:71:95:2d:ea:
e7:fb:a2:0d:a8:0b:8d:f5:46:cc:a7:80:5a:f0:1c:
cf:1b:0c:b0:3d:39:11:df:03:6c:c2:57:86:44:b1:
6c:b3:ca:3f:98:08:c1:99:e8:21:c5:91:bc:18:5a:
64:2e:bb:81:0a:d2:0d:ff:fe:51:a4:60:12:8c:97:
57:f8:9d:23:5a:15:12:b7:ca:7a:34:9c:7d:66:81:
a4:db:bf:48:89:f2:a9:f6:b0:b6:f5:f3:ad:f9:1b:
25:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:B3:08:CF:A5:60:BA:DE:D8:81:F9:45:42:75:47:F5:46:2B:C5
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/ZXSzCM-lYLre2IH5RUJ1R_VGK8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8060::/48
Signature Algorithm: sha256WithRSAEncryption
50:dd:79:d3:b2:6d:47:67:4c:e5:80:de:25:b3:f3:b7:3d:94:
e8:6d:5d:77:e3:cb:be:88:73:d4:49:9d:c5:45:6a:ab:75:a1:
16:c4:51:b3:a7:c6:a1:b3:c7:b4:80:75:81:e6:01:66:88:de:
e1:33:33:37:67:5d:26:75:1d:2a:70:d9:8f:0d:f3:0e:7b:65:
20:9e:0b:bf:25:0f:b1:7b:02:ac:ab:83:b6:0f:7a:fe:d3:a2:
93:38:69:a0:43:75:47:5c:ff:42:20:e1:c9:0b:80:84:cc:04:
78:33:68:b5:0d:70:a4:d9:53:7d:87:b6:85:fb:f0:82:e8:f0:
06:c2:b9:29:90:cf:41:da:8c:d8:7a:12:ff:4f:31:79:88:98:
24:83:6b:e8:26:63:5f:f8:05:f0:13:1d:f1:58:46:25:76:9c:
15:f1:0d:41:c2:ff:64:f2:5e:6c:3f:92:46:7f:8e:b6:16:81:
e4:46:17:f0:3f:d1:17:02:71:b5:58:a6:f2:b8:78:ac:a4:54:
73:2a:4d:37:d9:cf:6c:34:88:38:f4:60:6e:37:dd:2d:30:14:
2b:0d:38:de:65:0e:60:2d:74:1a:ea:12:e0:d5:dd:c0:d5:9a:
cf:98:4b:97:b2:5d:30:24:1d:b4:d5:f9:a6:06:b4:4e:a2:66:
be:2b:76:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org