Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/zeztx__AV9qrtJ_yPCkfXQ5SwEs.roa
File: zeztx__AV9qrtJ_yPCkfXQ5SwEs.roa (raw, json)
Hash identifier: gCtieVFJMSIl1Utyhl5OjpLfdEHDGkQP3wPsMreu8n0=
Subject key identifier: CD:EC:ED:C7:FF:C0:57:DA:AB:B4:9F:F2:3C:29:1F:5D:0E:52:C0:4B
Certificate issuer: /CN=ea0f5b221f6af32098f3064d68251b617892ac92
Certificate serial: 018571955988DA61247CCA9980ED00E524A3
Authority key identifier: EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/zeztx__AV9qrtJ_yPCkfXQ5SwEs.roa
Signing time: Mon 02 Jan 2023 08:24:51 +0000
ROA not before: Mon 02 Jan 2023 08:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 2a03:1e84:1900::/56 maxlen: 56
2a03:1e80:303:200::/56 maxlen: 56
2a03:1e84:9261::/48 maxlen: 48
2a03:1e84:9260::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:59:88:da:61:24:7c:ca:99:80:ed:00:e5:24:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea0f5b221f6af32098f3064d68251b617892ac92
Validity
Not Before: Jan 2 08:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdecedc7ffc057daabb49ff23c291f5d0e52c04b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:aa:17:4d:2e:cd:3f:86:e4:ad:81:e4:4a:ca:
f3:97:a0:fc:3c:81:0e:66:dd:89:72:ab:76:23:d8:
52:7e:aa:2d:07:4f:ad:28:5f:81:64:ce:09:93:d2:
18:93:a3:17:e6:dc:c5:a5:ca:63:76:e5:91:9f:93:
48:e8:0e:26:38:f0:46:f9:17:8a:05:1a:1d:d6:20:
30:4d:81:07:ab:e4:6c:ab:88:83:b6:d5:74:c9:cc:
64:9a:e3:a1:93:e4:df:e8:24:d8:e1:7e:f0:6f:e4:
21:6d:2e:95:48:3e:68:23:54:a3:14:2f:2a:f3:76:
09:06:79:ec:4f:b6:6a:3e:25:a8:85:08:6b:ed:78:
6d:99:40:7b:94:17:cb:18:ef:48:35:7f:d8:44:35:
85:65:5e:fe:b9:15:73:ac:3f:8a:20:5a:87:32:c5:
55:75:b0:9d:79:8c:66:ab:d6:dd:0e:3a:7f:58:c2:
70:ef:73:d4:97:7b:28:3e:d0:e4:b7:a1:fd:69:88:
d6:9c:46:c4:b2:5f:4e:7a:db:86:84:a0:3e:93:99:
dc:bd:58:4d:45:62:8c:da:54:56:a8:19:af:83:b0:
a9:4b:c5:97:3b:6f:da:8e:87:4e:60:54:b1:00:94:
3d:8c:21:f3:30:9f:2c:ef:a0:4e:51:f6:ac:48:2c:
bc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:EC:ED:C7:FF:C0:57:DA:AB:B4:9F:F2:3C:29:1F:5D:0E:52:C0:4B
X509v3 Authority Key Identifier:
keyid:EA:0F:5B:22:1F:6A:F3:20:98:F3:06:4D:68:25:1B:61:78:92:AC:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6g9bIh9q8yCY8wZNaCUbYXiSrJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/zeztx__AV9qrtJ_yPCkfXQ5SwEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e853ab-f470-4928-bc68-57e90c56a0e2/1/6g9bIh9q8yCY8wZNaCUbYXiSrJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:1e80:303:200::/56
2a03:1e84:1900::/56
2a03:1e84:9260::/47
Signature Algorithm: sha256WithRSAEncryption
2b:36:03:20:a7:d1:5b:ab:41:ab:db:dd:6c:93:84:6f:e9:23:
cc:8a:a3:0f:28:90:c7:c8:0d:f5:00:ae:75:13:83:bb:c3:51:
25:53:3d:c1:a3:dd:31:b7:3a:60:73:b1:a3:b1:29:2f:fc:21:
65:fa:69:88:dc:48:ff:a9:06:2b:ce:bd:0c:2d:1d:96:63:6d:
57:ba:4c:58:be:03:57:0b:71:e7:84:f3:de:97:9a:6b:cd:d9:
b6:eb:d9:b6:b4:71:d4:8d:75:75:a1:1d:ae:10:df:33:2e:bd:
c3:80:48:99:58:85:6f:02:2d:73:a6:07:08:81:75:71:f5:09:
35:66:d6:7b:45:98:4b:4b:ad:d6:5f:30:4d:a5:2f:21:f9:25:
10:8b:7d:fb:e9:9e:38:db:0f:3c:bc:fb:e3:d7:f8:36:3d:04:
da:05:cf:4b:94:58:41:4b:63:f6:7f:54:d8:c4:c7:91:0e:33:
ed:f1:d0:47:02:02:6d:ac:c5:d2:2e:56:8e:98:da:bb:8b:5d:
a8:0a:dc:8b:2b:e2:ef:29:e4:10:c7:95:46:80:a9:93:79:cf:
ed:8b:50:97:d2:31:aa:95:ac:54:a6:2b:04:a1:bb:f2:6c:4c:
ed:9f:6a:2b:b9:f1:ee:df:90:d9:b6:d9:fd:ef:bd:67:62:11:
0d:6c:a6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 12:19:37 2023 by rpki-client on console-fra.rpki-client.org