Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/zmoaXElWtmje02hok4Y4FeiypO0.roa
File: zmoaXElWtmje02hok4Y4FeiypO0.roa (raw, json)
Hash identifier: ThOrAdt2HrWzOZ3WL54JxMnBLKAwbGpCclDXz5dFi88=
Subject key identifier: CE:6A:1A:5C:49:56:B6:68:DE:D3:68:68:93:86:38:15:E8:B2:A4:ED
Certificate issuer: /CN=dc94bb69453f139a60029e22db0fb3424a906cee
Certificate serial: 01856BAEC96908EB19B97D1FFB0714B2B394
Authority key identifier: DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/zmoaXElWtmje02hok4Y4FeiypO0.roa
Signing time: Sun 01 Jan 2023 04:54:54 +0000
ROA not before: Sun 01 Jan 2023 04:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15683
IP address blocks: 2a01:6d80:2000::/36 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:31:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:c9:69:08:eb:19:b9:7d:1f:fb:07:14:b2:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc94bb69453f139a60029e22db0fb3424a906cee
Validity
Not Before: Jan 1 04:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce6a1a5c4956b668ded3686893863815e8b2a4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:95:e8:8a:22:38:a8:20:46:57:24:65:3e:f0:
b2:12:f0:e1:8d:11:9e:14:82:11:cf:bf:61:ed:08:
d1:b6:98:52:06:59:9a:7c:cf:83:12:a5:9b:54:bb:
89:11:76:d8:f4:a7:3b:10:50:3a:5b:89:1a:b6:f0:
4a:0d:f9:cc:e6:60:bb:fe:25:10:3a:fc:71:8b:6d:
05:7a:6a:c6:02:9a:4c:0b:1d:3c:aa:ba:c3:8b:37:
c8:12:ff:09:86:8c:d2:e0:e5:29:3d:ed:a5:88:63:
86:93:e5:74:59:00:05:22:fc:cb:29:f8:ab:88:e1:
ef:89:92:44:d6:ca:fb:c5:1a:06:b5:94:bc:79:1c:
bb:f5:e5:7d:cf:d6:b3:59:c4:f7:e8:e9:34:4d:9c:
32:7c:db:d6:20:9d:bf:85:2a:20:c3:f0:27:56:55:
89:ea:32:ff:1d:0d:64:50:e2:52:af:e0:f6:14:54:
26:fd:86:bb:45:5b:2a:5e:10:b1:6a:fe:28:ed:d9:
72:4f:07:3f:9b:b3:98:ca:f5:08:9c:36:cc:29:f1:
08:32:e3:ea:2b:9a:84:78:df:6a:f9:bb:fc:b1:ce:
2f:61:4e:ca:9c:59:d1:8d:67:b3:28:a6:7f:7b:c9:
ea:f0:a3:f5:89:0f:2d:0e:f1:89:41:be:d8:33:eb:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6A:1A:5C:49:56:B6:68:DE:D3:68:68:93:86:38:15:E8:B2:A4:ED
X509v3 Authority Key Identifier:
keyid:DC:94:BB:69:45:3F:13:9A:60:02:9E:22:DB:0F:B3:42:4A:90:6C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JS7aUU_E5pgAp4i2w-zQkqQbO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/zmoaXElWtmje02hok4Y4FeiypO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d045ca-c1f7-4ed9-afdb-090c46e9f2ed/1/3JS7aUU_E5pgAp4i2w-zQkqQbO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:6d80:2000::/36
Signature Algorithm: sha256WithRSAEncryption
13:b8:b1:f7:4e:2b:63:21:a9:8b:31:60:6c:16:f4:2f:d7:27:
44:cc:fc:29:0f:c6:8f:77:37:6c:68:0a:e2:68:6f:52:56:ca:
ac:67:5f:33:80:9b:8f:fb:a6:a1:58:f6:27:7c:9d:f4:34:c9:
36:ca:c4:5d:fe:55:c5:1d:32:c0:a0:b9:3c:da:eb:a9:d1:60:
a5:f0:d6:20:34:df:e5:0d:81:ba:30:6b:43:a7:af:a9:f5:6d:
22:b0:e1:7f:ff:b4:67:84:61:e5:90:d9:03:e0:44:96:33:e7:
f1:a4:c5:2c:68:93:f9:eb:25:76:81:5e:14:c5:b4:bd:a5:e2:
69:44:92:5c:8a:2b:66:36:35:1b:37:d2:c2:b2:14:79:95:32:
f7:bb:f2:0d:be:17:f8:4e:23:97:05:fe:f7:0b:ad:47:82:9e:
9f:b4:70:bb:1b:0e:77:17:a5:5f:3c:24:34:fd:35:f5:6a:6d:
69:8f:e7:6c:9d:b3:1e:03:57:5a:c2:3e:34:11:58:fa:6e:ae:
fe:28:40:8d:27:a5:f3:4e:2c:ed:8c:f6:fc:64:a7:26:86:50:
94:17:78:64:7e:bf:f9:ca:36:6d:03:ca:8b:6c:97:b6:5d:0e:
ad:80:f0:2f:ab:8f:d9:14:76:fb:b0:00:e7:c7:13:db:cc:a5:
2c:71:f5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org