Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ZAHd2Y2S-UiKtTIyS101lv851w4.roa
File: ZAHd2Y2S-UiKtTIyS101lv851w4.roa (raw, json)
Hash identifier: v8RcmljiBz4xvRs5WAFw+rO1D9aOQBVp+XIDb0f6JS0=
Subject key identifier: 64:01:DD:D9:8D:92:F9:48:8A:B5:32:32:4B:5D:35:96:FF:39:D7:0E
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C3FD7F1BC61372FBFFD4BF6A434FF
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ZAHd2Y2S-UiKtTIyS101lv851w4.roa
Signing time: Mon 02 Jan 2023 07:05:00 +0000
ROA not before: Mon 02 Jan 2023 07:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42360
IP address blocks: 2a00:11c0:77::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 09 Feb 2023 09:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:3f:d7:f1:bc:61:37:2f:bf:fd:4b:f6:a4:34:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6401ddd98d92f9488ab532324b5d3596ff39d70e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7e:ee:50:17:b2:a1:49:bf:12:65:8d:97:3f:
ac:b7:c1:33:f2:25:cc:33:51:24:b3:eb:11:05:8c:
02:b8:4f:1c:cf:2f:1c:81:63:a0:4a:14:bd:53:57:
ce:b9:14:b3:4a:13:02:2e:44:c1:c9:93:d2:73:f8:
28:64:84:0b:60:bb:3b:13:ad:ae:09:bc:aa:69:76:
4f:30:11:b2:b4:5d:2c:1c:2d:ec:73:17:b4:93:a5:
08:b4:c2:3f:6a:cb:7c:fb:8d:84:a6:de:2b:70:ee:
69:cc:7c:81:97:70:81:15:b3:fb:4b:df:e5:58:99:
1a:6e:dd:25:e8:b5:4e:c4:f5:92:81:e8:64:dd:5d:
d6:6f:25:c9:82:4c:ec:96:bd:d8:54:b8:16:07:fb:
93:e0:7e:13:a5:98:4d:03:6b:8e:7a:96:9e:99:76:
03:0d:6d:7d:4b:60:ea:88:18:71:ed:71:04:25:0b:
f6:6a:42:51:b0:dd:2f:78:c0:99:05:b8:3c:fe:b9:
70:58:78:27:af:f5:51:a4:96:76:79:ff:72:69:9e:
df:4c:91:10:2e:c3:5c:87:13:39:26:1e:9f:8a:9f:
68:65:7f:f7:03:74:91:f2:c3:e9:cd:c7:5e:38:a9:
ce:96:62:bd:09:95:ef:1b:01:39:9d:fe:8b:33:34:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:DD:D9:8D:92:F9:48:8A:B5:32:32:4B:5D:35:96:FF:39:D7:0E
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/ZAHd2Y2S-UiKtTIyS101lv851w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:11c0:77::/48
Signature Algorithm: sha256WithRSAEncryption
69:7c:c7:6b:04:ad:2b:e0:69:82:09:f9:dc:99:25:bc:95:47:
ce:1e:e8:0c:d4:99:c8:03:2d:43:39:c3:32:e6:8e:15:a5:2d:
8b:a4:fb:cd:df:cb:31:18:f6:ae:76:06:96:5f:e0:58:c8:31:
9c:e2:b4:17:ce:16:13:bf:28:22:b6:03:44:32:b5:a0:6c:77:
d4:53:a8:3c:d7:18:e8:71:b3:62:bc:12:6e:48:53:01:99:75:
1d:a0:67:e4:a8:25:64:5d:00:57:ee:ee:cf:58:ab:2e:ea:65:
e8:98:4d:96:19:44:8a:77:c5:77:b5:90:e0:d1:6d:66:88:bc:
0f:40:d3:ba:d7:23:05:55:fe:ba:40:9d:11:1d:fe:ab:c2:97:
01:3b:9f:dc:15:99:ef:d4:ea:bc:dc:aa:99:52:d0:a0:47:ca:
e8:d7:c4:dc:64:53:7b:37:03:bd:bb:c0:6c:9a:11:f1:42:89:
42:a6:74:e6:a8:cd:50:fb:6f:d0:fb:04:57:b9:51:41:fc:34:
d6:68:98:48:1b:f5:3e:18:be:03:d0:8b:30:c8:50:b8:20:28:
62:e0:52:f3:19:e1:86:29:08:cf:b3:ec:e8:89:bb:c9:ef:a6:
5f:5a:f5:2a:2f:09:9c:68:01:a4:7e:90:d2:1d:ab:ce:86:fa:
fe:ae:56:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org