Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/pYrRfQ7771qotEILwx5O_TgloM8.roa
File: pYrRfQ7771qotEILwx5O_TgloM8.roa (raw, json)
Hash identifier: s6qyMp0qkgABynl+C2gfpFonKqp9DoPyrs66G82do7c=
Subject key identifier: A5:8A:D1:7D:0E:FB:EF:5A:A8:B4:42:0B:C3:1E:4E:FD:38:25:A0:CF
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 018871553EA505A36D3667EAE61FC0D27AEE
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/pYrRfQ7771qotEILwx5O_TgloM8.roa
Signing time: Wed 31 May 2023 10:23:11 +0000
ROA not before: Wed 31 May 2023 10:23:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21416
IP address blocks: 2a0e:eac0:1106::/48 maxlen: 48
2a0e:eac0:1001::/48 maxlen: 48
2a0e:eac0:1104::/48 maxlen: 48
2a0e:eac0:1107::/48 maxlen: 48
2a0e:eac0:1112::/48 maxlen: 48
2a0e:eac0:1002::/48 maxlen: 48
2a0e:eac0:1115::/48 maxlen: 48
2a0e:eac0:1105::/48 maxlen: 48
2a0e:eac0:1108::/48 maxlen: 48
2a0e:eac0:1000::/48 maxlen: 48
2a0e:eac0:1113::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:55:3e:a5:05:a3:6d:36:67:ea:e6:1f:c0:d2:7a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: May 31 10:23:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a58ad17d0efbef5aa8b4420bc31e4efd3825a0cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6b:af:16:5b:e6:ce:8d:c0:38:8e:60:13:2e:
a5:7a:68:e4:ff:3c:83:22:3a:fd:86:34:60:67:a1:
d7:16:2e:b2:3a:59:73:2c:74:34:1d:98:21:df:1e:
36:d4:69:8b:08:b3:5f:04:33:ae:5e:c3:72:cc:14:
2b:90:30:6e:f4:76:11:40:96:35:a2:0a:06:a7:6a:
46:62:76:69:10:de:6a:6c:61:6e:49:10:c6:ff:93:
0e:5e:5f:bd:43:58:87:76:a6:64:f0:92:ff:6a:3a:
e8:87:67:21:07:a8:9d:52:33:95:25:bd:c7:15:d6:
f7:e3:ae:25:9b:03:d1:92:fe:be:1e:b0:8c:12:db:
6b:83:96:2e:78:62:36:02:5d:f8:0f:99:6b:64:81:
8d:ae:9f:cc:c8:9f:d7:08:29:bc:d9:36:52:e6:63:
3f:48:e1:24:48:25:bc:37:48:27:e1:87:3f:a3:0e:
0f:2e:2f:0c:14:84:28:d8:5a:30:a2:3a:e5:f2:b7:
32:a4:06:83:6a:4d:71:b9:0d:28:df:39:a4:e9:22:
5c:ff:1c:ec:7b:0b:be:f5:d7:93:88:f3:5f:33:53:
ab:08:d6:a9:67:84:cf:d7:7c:2e:15:35:30:0c:d7:
f9:54:6b:80:9b:ba:64:5b:58:df:21:df:9c:d8:d8:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:D1:7D:0E:FB:EF:5A:A8:B4:42:0B:C3:1E:4E:FD:38:25:A0:CF
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/pYrRfQ7771qotEILwx5O_TgloM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:eac0:1000::-2a0e:eac0:1002:ffff:ffff:ffff:ffff:ffff
2a0e:eac0:1104::-2a0e:eac0:1108:ffff:ffff:ffff:ffff:ffff
2a0e:eac0:1112::/47
2a0e:eac0:1115::/48
Signature Algorithm: sha256WithRSAEncryption
7a:ba:05:8d:06:9c:c3:f3:e7:e8:ea:3c:ae:36:c7:c8:e8:07:
e4:13:38:62:3b:28:73:a6:38:d6:71:ac:aa:23:8a:ac:87:75:
b4:e2:72:a1:7d:9d:ec:68:41:3b:9f:d1:e8:71:9c:99:58:c2:
65:dd:96:0c:54:61:8c:b8:40:cb:5c:1e:da:b0:ba:b2:71:98:
a8:1c:c9:19:4d:cb:e7:f1:58:f9:b8:30:ba:13:c8:14:63:f8:
a8:2a:7a:08:d5:0f:e6:07:3b:22:fb:86:3d:a6:9d:dc:fa:2b:
89:7a:43:1b:28:21:b7:4f:e8:fd:1c:1b:08:91:7c:12:29:c4:
a4:31:13:e4:c1:c7:90:54:ed:41:31:21:8c:79:72:62:1c:fb:
28:c8:9e:fb:07:ce:ca:a7:23:44:9a:89:79:2e:92:c8:39:1f:
d5:1c:e8:27:49:bd:f2:fe:e5:8a:4c:d4:90:31:0d:d3:5e:13:
67:8e:20:15:f4:70:73:46:dd:93:fe:74:d8:6c:71:ce:a0:60:
1a:8d:8c:ad:e9:3e:f1:36:d7:6f:72:f8:81:85:db:b1:f3:71:
70:68:49:8f:a3:90:cd:9c:4a:3e:c8:59:aa:8d:46:96:20:bf:
1d:59:81:98:53:49:2c:c5:d8:3e:9e:82:49:42:80:b3:f2:cd:
15:e7:be:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:23 2024 by rpki-client on console-fra.rpki-client.org