Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ZbeHcsa0-f1TmuKzRr4AGUYF5z8.roa
File: ZbeHcsa0-f1TmuKzRr4AGUYF5z8.roa (raw, json)
Hash identifier: Fo68hMXGiZ5QZ+sOfwT6ISBorMnTGc8Su7EL0CYA73s=
Subject key identifier: 65:B7:87:72:C6:B4:F9:FD:53:9A:E2:B3:46:BE:00:19:46:05:E7:3F
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01856D5CE54C9B1CFC6FE3D41FBB0DB9B398
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ZbeHcsa0-f1TmuKzRr4AGUYF5z8.roa
Signing time: Sun 01 Jan 2023 12:44:42 +0000
ROA not before: Sun 01 Jan 2023 12:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206804
IP address blocks: 2a03:efc0:2100::/40 maxlen: 40
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:e5:4c:9b:1c:fc:6f:e3:d4:1f:bb:0d:b9:b3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jan 1 12:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65b78772c6b4f9fd539ae2b346be00194605e73f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:3a:60:99:12:c3:00:3d:f0:7b:80:e1:cf:
2e:3d:e0:11:ef:df:48:c4:ba:19:36:01:a8:a8:91:
1f:2c:e4:d1:10:7c:62:0d:f8:1c:1b:b0:5a:b0:9f:
80:99:64:96:6f:0b:62:60:59:f3:ea:76:b9:a4:1f:
65:fb:fe:31:a2:ea:4f:30:3b:82:de:98:e5:4b:68:
05:dd:c7:2a:5f:79:67:41:72:21:cf:e3:96:7b:cf:
d8:bb:7f:ad:e3:3f:ae:4f:94:f4:68:9e:36:d1:37:
36:da:3e:c2:36:00:71:07:a7:e3:b3:25:7e:5b:9e:
fa:73:ec:88:ff:9c:e4:00:c1:b3:a1:f1:12:20:ac:
66:d7:2a:fa:47:09:0a:f6:08:11:7c:fc:87:36:59:
88:1d:87:4b:7f:fe:17:bc:82:b4:e4:c0:b5:35:bb:
a1:07:fa:8c:a5:f4:71:35:16:04:7f:49:01:4c:c7:
96:8e:d5:08:33:e1:9a:76:a0:4e:e6:25:a0:dd:e9:
b3:ad:1c:ce:75:ad:6d:17:88:e2:0d:e4:c0:b2:9d:
14:64:42:f7:be:ac:20:fe:c2:eb:98:15:30:95:10:
47:58:59:4a:c7:b6:aa:7d:d6:d4:50:a7:a9:36:fb:
91:54:20:5d:35:b7:cd:e0:12:9b:82:c1:b9:55:76:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B7:87:72:C6:B4:F9:FD:53:9A:E2:B3:46:BE:00:19:46:05:E7:3F
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/ZbeHcsa0-f1TmuKzRr4AGUYF5z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:efc0:2100::/40
Signature Algorithm: sha256WithRSAEncryption
06:2a:b1:88:44:cc:b6:34:e1:ed:61:a0:88:f2:87:cb:03:8a:
41:17:2a:94:93:4c:6e:18:f4:46:db:21:77:1a:75:a5:d5:15:
12:37:d4:9b:80:77:64:57:14:5c:9f:88:26:10:c2:bb:56:2f:
32:5b:63:15:33:dc:8e:87:90:48:e2:60:7e:14:f4:87:84:fc:
ca:28:c5:9d:c0:8b:c6:c6:68:bb:ec:11:30:0a:b3:01:d3:a5:
28:24:d4:5e:6b:c8:46:2f:57:43:15:03:66:d5:92:1e:c1:c5:
9f:9d:be:18:f4:ba:3d:02:a2:26:6e:91:c1:7c:fe:9f:55:b1:
d1:15:16:7a:7c:14:e5:61:f1:b2:99:4e:ac:00:65:32:67:37:
f0:fc:a5:5b:c8:32:be:29:ab:81:9b:f2:53:81:6c:ae:7e:39:
fb:b8:d7:af:a7:b6:e6:83:35:b3:97:5e:f6:29:3d:a4:2e:3f:
17:31:76:59:8e:0a:89:66:d9:93:52:8c:f1:2a:09:20:dc:1f:
ee:3a:34:d9:95:67:e6:e7:35:9d:52:1d:a4:22:af:36:8b:05:
38:b8:13:57:fb:dc:5b:f9:57:61:1c:a9:f5:4d:01:b8:22:87:
a3:42:df:d1:4b:68:ae:7a:11:cc:09:a5:05:10:81:44:7e:66:
10:fb:e5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:30 2024 by rpki-client on console-fra.rpki-client.org