Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hzEGHefAZlnSNIKm6Uxrbpa_zzo.roa
File: hzEGHefAZlnSNIKm6Uxrbpa_zzo.roa (raw, json)
Hash identifier: 1pN26W3PPv1QZAjEtUdeneCITvI4DVoi8dEf2cWnyNI=
Subject key identifier: 87:31:06:1D:E7:C0:66:59:D2:34:82:A6:E9:4C:6B:6E:96:BF:CF:3A
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 0191C076488964485E96B70B307FCD91AD93
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hzEGHefAZlnSNIKm6Uxrbpa_zzo.roa
Signing time: Thu 05 Sep 2024 04:34:22 +0000
ROA not before: Thu 05 Sep 2024 04:34:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60246
IP address blocks: 2a00:8740:ff00::/48 maxlen: 128
Validation: Failed, certificate revoked on Thu 05 Sep 2024 10:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:76:48:89:64:48:5e:96:b7:0b:30:7f:cd:91:ad:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Sep 5 04:34:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8731061de7c06659d23482a6e94c6b6e96bfcf3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6f:f9:74:43:73:c0:75:34:16:4a:fd:7f:77:
7a:09:9b:ef:0d:15:4f:8c:ed:f8:e8:16:59:7d:20:
ef:33:b2:d7:b2:f8:b3:bf:b1:d2:99:6c:f9:df:c5:
83:c4:85:34:ae:51:7f:de:48:cc:e5:ba:54:e7:07:
3e:85:cc:08:82:8d:0c:78:f4:5a:32:1f:8c:1a:92:
4b:82:23:ed:86:ab:65:50:02:a1:3d:3b:b0:d1:a7:
8f:79:31:03:41:09:70:3e:9a:e2:01:57:05:7b:9b:
0f:d0:63:0c:67:ad:a8:e9:e5:e0:38:ac:8c:39:2d:
a7:a6:e5:9d:e3:90:f6:1e:8d:11:4e:36:d5:29:32:
da:72:91:a2:db:df:83:5a:4c:59:8e:dc:2f:77:df:
60:61:cc:78:70:4d:f9:3e:f8:b0:c7:f7:15:d2:7d:
04:e9:d2:d8:21:57:90:af:11:1e:e4:d1:a2:58:57:
09:b8:fc:f9:e9:43:bf:76:92:34:8a:13:1c:2c:04:
97:8a:68:e9:1e:05:44:20:f5:85:e2:34:a9:7c:12:
3c:cc:92:c6:46:92:51:f2:12:9f:43:a4:37:d1:7f:
30:a5:91:75:de:d8:9d:5d:49:9e:01:4f:8d:64:75:
77:01:38:4b:2a:4b:93:61:da:5e:ef:f0:45:7c:f3:
0b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:06:1D:E7:C0:66:59:D2:34:82:A6:E9:4C:6B:6E:96:BF:CF:3A
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/hzEGHefAZlnSNIKm6Uxrbpa_zzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:8740:ff00::/48
Signature Algorithm: sha256WithRSAEncryption
b0:8f:71:c7:0c:48:7d:48:27:c6:ad:0a:09:74:31:d9:63:0d:
66:9f:4f:fc:d5:f3:9a:dc:ae:22:89:4e:08:60:fe:e0:9b:12:
b7:7a:8a:eb:5e:d6:98:dc:2c:c8:ed:48:c4:f9:ce:03:02:45:
f8:68:5b:53:45:11:dd:eb:cd:ca:55:53:9e:b9:7b:23:73:2d:
96:d1:bf:25:78:6a:24:68:a1:a9:89:3b:f2:80:2c:94:c1:cb:
46:1d:b1:8f:22:ce:e5:0c:40:c0:f4:3c:9f:6a:93:63:aa:ba:
b6:14:a7:d8:6b:4d:75:b5:e8:e9:32:55:c2:05:01:77:cf:6c:
5e:89:9f:8a:7b:8f:ab:91:cf:59:b2:e2:2c:6b:96:70:a8:cb:
fa:b8:ba:51:94:97:5e:89:79:3c:cb:07:05:83:17:5f:6e:17:
11:5f:00:c9:c1:70:10:29:7f:8a:de:92:73:47:38:8d:10:c4:
c6:26:16:db:35:5d:b7:2d:e6:fd:2f:8f:13:22:60:22:b9:46:
22:ce:53:23:73:3f:7d:9b:45:fc:cb:5c:a6:4d:c6:ad:ab:1c:
06:ca:8b:2d:ec:68:b0:41:ed:03:5f:72:ad:2b:51:c3:7a:8a:
e5:c7:21:19:73:1d:b5:96:f7:74:ab:fc:3d:ef:ff:75:58:53:
a8:83:b9:ad
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZHAdkiJZEhelrcLMH/Nka2TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5
M2NiZWEwHhcNMjQwOTA1MDQzNDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzMxMDYxZGU3YzA2NjU5ZDIzNDgyYTZlOTRjNmI2ZTk2YmZjZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym/5dENzwHU0Fkr9f3d6CZvvDRVP
jO346BZZfSDvM7LXsvizv7HSmWz538WDxIU0rlF/3kjM5bpU5wc+hcwIgo0MePRa
Mh+MGpJLgiPthqtlUAKhPTuw0aePeTEDQQlwPpriAVcFe5sP0GMMZ62o6eXgOKyM
OS2npuWd45D2Ho0RTjbVKTLacpGi29+DWkxZjtwvd99gYcx4cE35Pviwx/cV0n0E
6dLYIVeQrxEe5NGiWFcJuPz56UO/dpI0ihMcLASXimjpHgVEIPWF4jSpfBI8zJLG
RpJR8hKfQ6Q30X8wpZF13tidXUmeAU+NZHV3AThLKkuTYdpe7/BFfPMLVwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFIcxBh3nwGZZ0jSCpulMa26Wv886MB8GA1UdIwQY
MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt
ZGJmOWQ0MWYxNzk4LzEvaHpFR0hlZkFabG5TTklLbTZVeHJicGFfenpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4
LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgCHQP8A
MA0GCSqGSIb3DQEBCwUAA4IBAQCwj3HHDEh9SCfGrQoJdDHZYw1mn0/81fOa3K4i
iU4IYP7gmxK3eorrXtaY3CzI7UjE+c4DAkX4aFtTRRHd683KVVOeuXsjcy2W0b8l
eGokaKGpiTvygCyUwctGHbGPIs7lDEDA9DyfapNjqrq2FKfYa011tejpMlXCBQF3
z2xeiZ+Ke4+rkc9ZsuIsa5ZwqMv6uLpRlJdeiXk8ywcFgxdfbhcRXwDJwXAQKX+K
3pJzRziNEMTGJhbbNV23Leb9L48TImAiuUYizlMjcz99m0X8y1ymTcatqxwGyost
7GiwQe0DX3KtK1HDeorlxyEZcx21lvd0q/w97/91WFOog7mt
-----END CERTIFICATE-----
Generated at Thu Sep 5 12:31:35 2024 by rpki-client on console-ams.rpki-client.org