Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ZypeLSNreyOTi5vgIGdhThyrLJc.roa
File: ZypeLSNreyOTi5vgIGdhThyrLJc.roa (raw, json)
Hash identifier: S4uLBAIFmDkmyFsOYZfPn79gcoykqRXRbz0cxJKcSTc=
Subject key identifier: 67:2A:5E:2D:23:6B:7B:23:93:8B:9B:E0:20:67:61:4E:1C:AB:2C:97
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0192C34B7BFBE668FFF834141006FF1AD8F3
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ZypeLSNreyOTi5vgIGdhThyrLJc.roa
Signing time: Fri 25 Oct 2024 10:49:17 +0000
ROA not before: Fri 25 Oct 2024 10:49:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4bc7::/32 maxlen: 32
2a0e:5385::/32 maxlen: 32
2a0e:5901::/32 maxlen: 32
2a0e:8080::/32 maxlen: 32
2a0e:8082::/32 maxlen: 32
2a0e:ccc5::/32 maxlen: 32
2a0f:c081::/32 maxlen: 32
2a0f:c087::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 28 Oct 2024 14:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c3:4b:7b:fb:e6:68:ff:f8:34:14:10:06:ff:1a:d8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 25 10:49:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=672a5e2d236b7b23938b9be02067614e1cab2c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fc:d9:7a:0c:8b:71:f9:13:06:83:83:10:79:
f1:9c:41:8e:ff:88:4d:8f:b5:f9:b7:97:23:4f:96:
e9:63:75:c9:16:0b:2f:16:85:68:f7:65:04:4b:6c:
99:c0:b5:b4:36:45:ce:18:89:15:42:39:83:4a:a9:
c8:25:f9:b3:97:12:c4:dd:c3:01:94:63:36:b4:9d:
46:d7:0d:98:3c:63:ba:e6:96:4d:d5:91:d5:bd:7a:
2e:46:2e:64:32:31:15:72:77:20:9d:dd:3d:2f:d7:
ee:59:0d:61:54:de:34:2c:15:03:f9:e3:92:d2:b2:
b5:28:f1:fc:98:26:c7:6d:95:74:8c:c7:57:ca:00:
ea:f1:7d:bf:8f:5d:04:48:0e:4d:4f:58:55:59:cb:
95:2d:bc:fe:05:d6:65:40:b6:df:40:74:00:b3:43:
66:53:05:99:dd:6b:19:48:53:05:4f:a2:36:2c:4c:
22:37:dc:63:bf:b0:29:70:9f:64:16:ec:a0:a5:cc:
a9:c5:59:14:b5:a9:45:87:4a:d1:97:2f:5f:e4:e2:
15:34:b0:3f:64:80:7b:d7:a4:a7:3d:96:47:80:af:
d1:cf:5f:25:0d:b9:9c:46:09:b3:88:af:db:8c:e9:
74:79:f4:7a:85:e5:38:55:a2:bf:26:d2:ee:62:f2:
80:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:2A:5E:2D:23:6B:7B:23:93:8B:9B:E0:20:67:61:4E:1C:AB:2C:97
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/ZypeLSNreyOTi5vgIGdhThyrLJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4bc7::/32
2a0e:5385::/32
2a0e:5901::/32
2a0e:8080::/32
2a0e:8082::/32
2a0e:ccc5::/32
2a0f:c081::/32
2a0f:c087::/32
Signature Algorithm: sha256WithRSAEncryption
89:6f:d0:3f:cc:3a:16:10:de:91:c4:e0:87:47:cd:9e:eb:89:
8a:25:44:ec:bd:8c:6e:b6:7f:59:83:49:4d:29:4b:f6:50:d6:
bc:42:03:89:5f:d2:60:38:2c:26:6c:96:28:db:53:84:10:a6:
e6:be:4c:c4:11:5e:05:41:4c:1f:92:0c:4f:50:0d:80:81:9c:
12:c8:cd:e7:b2:0f:a6:28:e8:e5:76:29:5e:28:36:58:bd:0f:
9d:f8:a7:04:3e:30:ef:75:8f:58:6b:19:46:bd:92:58:16:a6:
1f:8d:0e:05:96:66:ff:88:c2:28:e0:b6:76:57:ae:c1:c5:d7:
28:ce:4a:4a:e1:04:3e:93:fa:89:55:9f:f7:45:55:8f:b4:18:
30:be:b4:f7:5d:a4:26:4e:d4:a3:6e:a0:8a:d5:d6:be:a1:96:
ce:fd:ae:90:53:20:b9:ea:03:a0:a2:bc:d2:c6:4e:a1:0f:d5:
db:15:a3:c8:0e:33:5f:82:c9:3f:00:89:6c:2e:83:0b:ba:d0:
15:68:70:11:86:8c:c5:45:83:1c:f5:aa:e3:24:e2:7a:a2:6c:
27:ed:64:e5:e9:0a:2b:58:61:32:65:d1:1d:22:b8:61:8d:a6:
55:9e:6c:6e:b6:e7:ae:a2:e4:fc:e7:0f:cd:88:2c:0f:a4:89:
a8:5a:72:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 16:44:25 2024 by rpki-client on console-fra.rpki-client.org