Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/zOZCAhuJndelt_95SopkWG9hIZM.roa
File: zOZCAhuJndelt_95SopkWG9hIZM.roa (raw, json)
Hash identifier: znRttpAa644tfn4f2qMZlqJbUKwRa1FgP5YJMV1kwvc=
Subject key identifier: CC:E6:42:02:1B:89:9D:D7:A5:B7:FF:79:4A:8A:64:58:6F:61:21:93
Certificate issuer: /CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Certificate serial: 018CC86F184F566954C171C435441282F9D9
Authority key identifier: DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/zOZCAhuJndelt_95SopkWG9hIZM.roa
Signing time: Tue 02 Jan 2024 04:29:33 +0000
ROA not before: Tue 02 Jan 2024 04:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12189
IP address blocks: 2a02:5320:100::/40 maxlen: 40
2a02:5320:300::/40 maxlen: 40
2a02:5320:500::/40 maxlen: 40
2a02:5320:700::/40 maxlen: 40
2a02:5320:900::/40 maxlen: 40
2a02:5320:b00::/40 maxlen: 40
2a02:5320:d00::/40 maxlen: 40
2a02:5320:f00::/40 maxlen: 40
Validation: Failed, certificate revoked on Wed 01 Jan 2025 23:48:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:18:4f:56:69:54:c1:71:c4:35:44:12:82:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbb9bc2de36cf23b689f3c72e80abcfe482026c1
Validity
Not Before: Jan 2 04:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cce642021b899dd7a5b7ff794a8a64586f612193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e5:4c:b6:21:12:e1:2e:94:9f:db:b8:59:89:
25:a4:2a:57:1e:b4:95:d7:e5:9b:6a:90:66:e9:bc:
1a:b9:11:69:7d:ee:9c:fa:1e:5a:cd:7b:19:82:f5:
9b:44:e9:e8:34:64:b5:2d:2e:27:bf:37:73:5f:67:
60:d4:68:ea:a6:46:73:bb:c4:91:39:05:42:80:fa:
6d:1f:e5:66:7b:d8:99:40:fe:07:ff:0a:6f:0e:d1:
c2:27:92:93:be:14:be:0b:6d:4a:c1:92:7b:27:fd:
11:e7:93:26:d7:3d:cc:6b:81:87:81:94:ee:63:5f:
69:51:7a:ba:57:18:c4:f3:b8:83:eb:e2:53:f2:c3:
a9:8f:fd:cb:ce:40:13:fb:20:c7:8b:b9:b4:6f:5b:
4e:9b:5b:51:f3:af:7b:1a:78:d4:13:bd:f1:33:67:
01:85:07:98:c2:53:9f:ad:bb:f2:be:be:ed:c2:86:
f2:9f:99:06:b6:03:d5:34:a9:21:55:d8:d6:8e:3b:
c0:c0:fb:4f:7a:bf:f2:56:14:93:8a:da:33:b3:70:
0a:3c:f8:7f:e8:8b:75:bc:17:2f:fd:de:77:8a:53:
be:91:73:74:62:96:4e:8f:d6:95:9a:b5:11:41:06:
47:2c:6a:f7:a9:c7:47:64:ff:9d:42:fb:37:ad:06:
09:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:42:02:1B:89:9D:D7:A5:B7:FF:79:4A:8A:64:58:6F:61:21:93
X509v3 Authority Key Identifier:
keyid:DB:B9:BC:2D:E3:6C:F2:3B:68:9F:3C:72:E8:0A:BC:FE:48:20:26:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27m8LeNs8jtonzxy6Aq8_kggJsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/zOZCAhuJndelt_95SopkWG9hIZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/ebc2e4-402f-47c1-9b28-14f21ae21ed3/1/27m8LeNs8jtonzxy6Aq8_kggJsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:5320:100::/40
2a02:5320:300::/40
2a02:5320:500::/40
2a02:5320:700::/40
2a02:5320:900::/40
2a02:5320:b00::/40
2a02:5320:d00::/40
2a02:5320:f00::/40
Signature Algorithm: sha256WithRSAEncryption
74:92:c9:d0:0c:32:f7:76:4b:d2:43:73:ab:51:b1:14:e9:12:
d9:0a:9c:6c:8a:33:df:01:10:8b:38:cf:d1:16:f4:aa:47:3a:
46:82:c1:ac:b3:6c:26:90:5a:e4:03:7d:d3:e8:c7:14:f8:33:
e4:b8:c3:18:0b:2b:e8:1a:c4:63:15:03:38:80:cd:06:11:a0:
6e:4f:a8:cc:1d:eb:a0:35:b8:8c:14:98:db:15:73:87:93:08:
17:26:0e:7c:c4:9b:9a:8f:fb:2f:62:6a:da:bf:a2:97:5b:44:
74:16:79:37:47:ac:bc:bd:6c:46:a2:6a:63:4e:24:43:43:32:
ec:13:07:eb:aa:c2:b8:82:5a:af:1c:31:fc:bc:ff:0b:01:00:
5c:35:40:a8:a5:ca:cd:3b:2f:3b:f5:69:d1:19:4b:b4:10:aa:
94:66:41:9c:b7:6a:c5:ba:8d:12:09:11:bd:62:2d:92:3e:44:
79:6a:69:08:f5:0d:3a:eb:d3:50:f4:71:f5:f2:10:6d:9a:ad:
7d:4f:c4:b1:55:f4:9c:45:5b:7b:f5:5d:91:3c:eb:0d:4c:14:
d1:1f:04:1c:23:80:b3:08:ab:99:ce:22:0b:b3:a0:63:d9:4c:
25:2d:be:f9:d5:1f:8e:dd:f8:be:81:24:1c:fd:78:df:d6:b8:
a6:f5:63:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:33 2025 by rpki-client