Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/zCpinLawSY3Otb1ZnEBgpfqPXW4.roa
File: zCpinLawSY3Otb1ZnEBgpfqPXW4.roa (raw, json)
Hash identifier: IejMDeEOvMSA/qCUv+1BlIzAjH5v9GPD2hn+qPYybhk=
Subject key identifier: CC:2A:62:9C:B6:B0:49:8D:CE:B5:BD:59:9C:40:60:A5:FA:8F:5D:6E
Certificate issuer: /CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Certificate serial: 01896FD8D0F46BCB1148C25E76B308569553
Authority key identifier: EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/zCpinLawSY3Otb1ZnEBgpfqPXW4.roa
Signing time: Wed 19 Jul 2023 20:30:27 +0000
ROA not before: Wed 19 Jul 2023 20:30:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52112
IP address blocks: 2a13:9640::/44 maxlen: 44
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:d8:d0:f4:6b:cb:11:48:c2:5e:76:b3:08:56:95:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec79a7b54c8c94d06ca2f685971a2449fb8fcece
Validity
Not Before: Jul 19 20:30:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc2a629cb6b0498dceb5bd599c4060a5fa8f5d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:a2:8d:ac:e3:09:b2:5f:d1:66:e7:84:18:
88:32:28:61:68:22:10:7f:03:67:6f:80:16:da:ce:
75:71:54:90:a4:06:9e:e6:6e:8a:74:27:be:12:db:
60:58:54:6f:24:f6:d2:03:e9:32:14:34:0e:2b:e7:
02:6a:c9:0c:2a:3e:97:1e:52:f4:2f:87:54:1b:32:
60:0b:63:84:48:fb:c1:9c:c0:d3:a2:72:3d:d9:46:
2d:2d:d9:9d:6b:ae:94:e7:d6:0c:1b:69:58:51:fb:
37:4a:ff:c1:23:b5:ed:63:97:88:68:53:bb:8a:b2:
6f:8a:09:36:b1:cf:2f:d9:34:1e:d0:38:b8:49:3c:
f5:4d:30:c2:60:ce:28:9d:e8:1d:b5:9b:6d:69:33:
25:8c:80:c6:97:e3:34:a9:c1:20:dc:c8:c3:65:0e:
fa:4f:67:ea:c7:9f:4f:8e:43:01:68:25:45:5d:20:
87:ff:dd:7a:0f:b4:37:34:a0:87:c2:42:b4:75:f8:
cb:4f:33:d9:5d:06:fd:16:fb:17:7d:70:96:f0:c6:
c8:e0:df:db:51:55:b8:6e:43:1b:8b:3b:7a:34:6e:
72:d7:a3:17:7f:e3:c5:4a:3c:af:55:96:86:ae:05:
8d:d1:a9:b3:bd:94:61:85:51:e6:f1:ea:04:2d:8d:
45:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2A:62:9C:B6:B0:49:8D:CE:B5:BD:59:9C:40:60:A5:FA:8F:5D:6E
X509v3 Authority Key Identifier:
keyid:EC:79:A7:B5:4C:8C:94:D0:6C:A2:F6:85:97:1A:24:49:FB:8F:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HmntUyMlNBsovaFlxokSfuPzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/zCpinLawSY3Otb1ZnEBgpfqPXW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a9bd50-b4a4-4063-8436-4e2a8f84aeed/1/7HmntUyMlNBsovaFlxokSfuPzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9640::/44
Signature Algorithm: sha256WithRSAEncryption
9b:b0:01:84:2c:bf:80:0e:f7:ab:83:f2:ae:0c:2c:a4:bc:d7:
a6:f8:a1:00:b1:14:88:69:86:7b:ee:1c:bb:a1:fb:39:db:b1:
07:b0:59:21:15:2c:20:ab:62:cb:01:43:d9:40:fe:13:fd:9b:
1e:dc:71:0a:33:f7:d1:5f:4b:16:b0:3e:24:02:56:6d:48:72:
15:c6:25:8d:7e:eb:5d:9c:fe:3f:9b:cf:49:e7:64:9d:6d:b8:
ea:55:94:ed:43:49:9a:96:83:36:fa:7f:61:7b:25:26:de:fb:
2f:57:12:f7:8a:86:1d:68:49:1a:46:31:c0:22:05:27:11:dc:
86:5f:ec:9e:20:9b:a9:dd:7a:c6:03:0f:58:61:e4:8a:a8:d2:
0e:fa:d1:8d:fa:5d:18:0b:50:1e:ca:54:33:b4:e6:d8:94:8b:
d3:26:24:7b:d7:a5:05:fd:6b:fe:50:c9:81:71:ff:8f:c9:a7:
00:69:8b:c4:b3:79:87:fd:d8:0d:52:51:c5:a1:73:17:ce:7f:
60:2a:7d:79:38:d0:56:4d:51:11:6e:ee:33:45:91:eb:1b:17:
73:e7:3b:59:a6:50:72:1c:bb:04:c9:6d:1b:93:d6:66:36:0e:
16:4a:38:ff:d1:bb:00:22:3a:b8:e1:42:23:e3:69:2d:14:e2:
5a:bd:ae:d2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYlv2ND0a8sRSMJedrMIVpVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNzlhN2I1NGM4Yzk0ZDA2Y2EyZjY4NTk3MWEyNDQ5ZmI4
ZmNlY2UwHhcNMjMwNzE5MjAzMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzJhNjI5Y2I2YjA0OThkY2ViNWJkNTk5YzQwNjBhNWZhOGY1ZDZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWOijazjCbJf0WbnhBiIMihhaCIQ
fwNnb4AW2s51cVSQpAae5m6KdCe+EttgWFRvJPbSA+kyFDQOK+cCaskMKj6XHlL0
L4dUGzJgC2OESPvBnMDTonI92UYtLdmda66U59YMG2lYUfs3Sv/BI7XtY5eIaFO7
irJvigk2sc8v2TQe0Di4STz1TTDCYM4onegdtZttaTMljIDGl+M0qcEg3MjDZQ76
T2fqx59PjkMBaCVFXSCH/916D7Q3NKCHwkK0dfjLTzPZXQb9FvsXfXCW8MbI4N/b
UVW4bkMbizt6NG5y16MXf+PFSjyvVZaGrgWN0amzvZRhhVHm8eoELY1FnwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMwqYpy2sEmNzrW9WZxAYKX6j11uMB8GA1UdIwQY
MBaAFOx5p7VMjJTQbKL2hZcaJEn7j87OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0htbnRVeU1sTkJzb3ZhRmx4b2tTZnVQenM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9hOWJkNTAtYjRhNC00MDYzLTg0MzYt
NGUyYThmODRhZWVkLzEvekNwaW5MYXdTWTNPdGIxWm5FQmdwZnFQWFc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS9hOWJkNTAtYjRhNC00MDYzLTg0MzYtNGUyYThmODRhZWVk
LzEvN0htbnRVeU1sTkJzb3ZhRmx4b2tTZnVQenM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhOWQAAA
MA0GCSqGSIb3DQEBCwUAA4IBAQCbsAGELL+ADverg/KuDCykvNem+KEAsRSIaYZ7
7hy7ofs527EHsFkhFSwgq2LLAUPZQP4T/Zse3HEKM/fRX0sWsD4kAlZtSHIVxiWN
futdnP4/m89J52SdbbjqVZTtQ0maloM2+n9heyUm3vsvVxL3ioYdaEkaRjHAIgUn
EdyGX+yeIJup3XrGAw9YYeSKqNIO+tGN+l0YC1AeylQztObYlIvTJiR716UF/Wv+
UMmBcf+PyacAaYvEs3mH/dgNUlHFoXMXzn9gKn15ONBWTVERbu4zRZHrGxdz5ztZ
plByHLsEyW0bk9ZmNg4WSjj/0bsAIjq44UIj42ktFOJava7S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:20 2024 by rpki-client on console-ams.rpki-client.org