Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/_zXqTl6NJW6gkb4eEizFvqfdwu8.roa
File: _zXqTl6NJW6gkb4eEizFvqfdwu8.roa (raw, json)
Hash identifier: KAAB93QE0cOQFjFljUfgc980srXf+pi9VQk3/7DMd8M=
Subject key identifier: FF:35:EA:4E:5E:8D:25:6E:A0:91:BE:1E:12:2C:C5:BE:A7:DD:C2:EF
Certificate issuer: /CN=67ce179cbe13ddb14012985a067100ef98a55601
Certificate serial: 0186F4C1CD61B0A00D4D5BDD2292F1A5EC71
Authority key identifier: 67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/_zXqTl6NJW6gkb4eEizFvqfdwu8.roa
Signing time: Sat 18 Mar 2023 12:46:27 +0000
ROA not before: Sat 18 Mar 2023 12:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51345
IP address blocks: 2a13:1c40::/29 maxlen: 48
Validation: Failed, certificate revoked on Fri 18 Aug 2023 11:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:f4:c1:cd:61:b0:a0:0d:4d:5b:dd:22:92:f1:a5:ec:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ce179cbe13ddb14012985a067100ef98a55601
Validity
Not Before: Mar 18 12:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff35ea4e5e8d256ea091be1e122cc5bea7ddc2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:5e:08:9d:a1:e7:60:8f:ad:24:d0:4c:49:
91:36:76:71:01:05:e7:9f:62:dd:83:50:9a:5b:0e:
c3:a0:9a:e9:42:a4:e8:dd:f7:6a:7d:18:43:83:e3:
31:f1:89:0d:50:c9:0e:8d:18:b1:13:27:7e:10:55:
0b:1d:0d:42:3b:91:1e:16:f0:18:7e:5c:88:19:8f:
8f:e5:47:76:b4:f7:84:6c:a9:3a:eb:6b:c2:dc:27:
de:97:a3:63:06:7d:90:14:f5:7c:e4:b0:f8:4d:d4:
98:fe:30:5d:a1:9b:19:d2:4d:e2:79:62:5a:8c:86:
4d:3c:9d:14:f9:e3:24:1f:37:92:a4:ee:48:b0:0e:
cd:aa:57:d2:d4:97:ea:58:e0:ae:1a:25:46:f1:38:
ff:a3:f1:1d:58:08:6f:9e:71:db:ea:f5:c9:c9:7e:
c1:3f:dd:91:97:35:88:95:88:9d:2e:28:04:fa:ca:
42:06:9b:62:b0:ef:75:57:70:48:18:d7:39:9e:33:
8c:63:5f:9f:cf:5b:c2:22:13:a1:e6:28:65:63:69:
09:a0:a2:69:78:1e:1d:7d:03:17:3e:63:83:8f:0a:
b2:1a:4d:ae:4c:64:21:7f:d2:ae:2b:06:a9:7b:1d:
b9:b4:2e:a4:8a:29:72:2e:6d:f4:68:87:78:a3:f1:
c6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:35:EA:4E:5E:8D:25:6E:A0:91:BE:1E:12:2C:C5:BE:A7:DD:C2:EF
X509v3 Authority Key Identifier:
keyid:67:CE:17:9C:BE:13:DD:B1:40:12:98:5A:06:71:00:EF:98:A5:56:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z84XnL4T3bFAEphaBnEA75ilVgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/_zXqTl6NJW6gkb4eEizFvqfdwu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5d7192-a719-4cd7-994a-62c01dc69cca/1/Z84XnL4T3bFAEphaBnEA75ilVgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:1c40::/29
Signature Algorithm: sha256WithRSAEncryption
54:6e:7e:42:a6:60:2d:e7:c7:e8:4e:de:43:a8:6e:8f:6d:6d:
9d:cb:74:db:ba:c5:0f:ff:75:09:11:60:e2:15:c4:b0:1c:92:
03:46:d2:d3:18:11:07:95:87:f9:7f:77:72:8b:6f:80:9e:10:
b3:bb:3c:96:b7:91:e1:ed:fe:f8:87:0c:6b:4a:51:92:4b:7b:
81:22:a3:eb:1d:ac:80:22:91:0d:10:6f:2c:9e:23:ff:99:44:
48:19:d4:3a:c0:e4:f4:86:56:e3:9b:9c:6d:7d:52:6e:43:cf:
43:1f:9a:24:ec:15:11:04:22:bc:93:a4:09:a3:a4:80:41:a4:
c8:01:39:02:7c:09:41:a8:55:0e:93:ab:c7:53:7f:56:b7:d2:
de:4b:e6:f2:f6:9a:5f:e3:78:ec:14:3c:98:b9:37:91:79:a1:
79:c9:fe:d2:f4:ef:34:7a:32:13:d3:88:29:93:62:02:7a:6b:
65:4b:34:85:19:e1:e4:5f:b2:df:25:c8:34:71:b1:0a:19:ed:
13:4a:b3:96:4f:71:bd:0c:80:9d:5c:d2:d3:aa:8f:6e:f6:9c:
95:c6:a7:ad:91:75:24:59:29:30:3c:9a:69:49:ed:88:ca:9e:
e3:05:d8:93:6e:cb:bf:96:42:5f:2c:79:d7:61:2b:c9:7d:26:
f3:66:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:09 2024 by rpki-client on console-ams.rpki-client.org