Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/zhDaa5V6JFtbwumVjeqHtrCQalE.roa
File: zhDaa5V6JFtbwumVjeqHtrCQalE.roa (raw, json)
Hash identifier: bXZcGCAHxTBt+dQ9IrVRhL2l+DLQpryxO2UhnBg+bIw=
Subject key identifier: CE:10:DA:6B:95:7A:24:5B:5B:C2:E9:95:8D:EA:87:B6:B0:90:6A:51
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018571C30AADB03D79E4EB57BFEE272DCA9B
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/zhDaa5V6JFtbwumVjeqHtrCQalE.roa
Signing time: Mon 02 Jan 2023 09:14:45 +0000
ROA not before: Mon 02 Jan 2023 09:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200365
IP address blocks: 2a0b:6b86:a00::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:c3:0a:ad:b0:3d:79:e4:eb:57:bf:ee:27:2d:ca:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 2 09:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce10da6b957a245b5bc2e9958dea87b6b0906a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:87:4a:f9:cb:2f:37:f3:19:73:c2:b4:17:84:
f1:12:dc:41:a2:6d:a7:38:3f:c2:6a:7e:95:c3:84:
1c:18:f8:75:4b:8b:f4:05:3a:75:ac:a3:15:54:ed:
14:ac:26:2e:a6:51:e8:69:82:9a:c2:f6:72:c7:de:
2e:9b:7b:c4:99:ab:bb:d9:c8:70:85:31:cd:15:b5:
fa:3d:cc:f6:4f:1d:d9:c8:5d:f8:b2:cb:1d:fe:df:
b6:fc:74:5a:8f:a0:90:bb:03:37:82:fe:d7:c7:6d:
75:28:0f:01:fd:02:5e:f4:2a:5a:57:55:07:5a:02:
f0:41:76:2b:a8:e4:6f:e1:a0:79:ec:70:12:21:92:
cc:25:55:3b:05:6e:ac:68:0f:4d:33:35:6f:0b:a8:
a7:e8:19:b9:c5:62:27:bf:43:0a:1f:7a:57:29:86:
bc:3b:34:9e:65:b7:96:64:ea:e0:83:54:0e:0a:93:
55:0c:c9:72:c8:57:83:64:77:7e:89:dd:09:9a:f3:
9c:d8:1e:37:2e:41:c9:19:e7:76:24:b1:0f:af:89:
11:cb:e4:6e:34:0e:ea:b5:4f:1b:be:c7:38:50:ad:
81:12:7d:78:3e:d2:fa:c9:12:fb:e5:f7:19:cf:e4:
22:a6:f2:91:46:f4:79:3b:c2:e5:cd:df:02:cc:18:
90:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:10:DA:6B:95:7A:24:5B:5B:C2:E9:95:8D:EA:87:B6:B0:90:6A:51
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/zhDaa5V6JFtbwumVjeqHtrCQalE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:a00::/40
Signature Algorithm: sha256WithRSAEncryption
52:5d:bd:6c:a1:b9:a1:8e:a9:13:73:46:3b:10:73:54:67:5b:
39:0f:08:a6:d0:85:0c:ab:2b:b1:dc:2a:cb:0c:4c:41:7f:f8:
41:d1:16:be:4e:3e:77:79:43:e6:a5:6f:4e:a7:28:53:6f:04:
dc:f2:7d:fc:71:bf:05:92:35:2a:69:86:ff:bb:8a:64:e1:1a:
c9:23:12:e3:3a:5c:eb:ac:ef:d8:b9:b4:2c:f8:fe:30:9e:e1:
2d:b5:16:8f:30:cf:24:84:ed:d3:99:e3:82:f5:4e:7b:cf:5f:
99:e8:c8:db:35:7a:6b:4e:4c:16:e3:30:db:a5:a3:ff:98:da:
bf:aa:99:dd:06:3c:17:42:bb:53:8b:cb:84:81:f5:e2:5e:00:
ce:b9:8a:24:46:a9:60:30:16:34:17:a7:5d:0c:64:50:3e:db:
70:db:71:ff:ad:c1:7b:a1:95:0c:20:8d:8a:6f:21:9f:02:15:
57:2f:3f:35:48:8b:82:3a:a8:97:4a:e3:8f:94:ff:42:7b:2e:
c7:43:8d:01:35:f8:46:60:2b:7b:57:a8:c4:a4:57:99:26:ba:
51:06:f8:aa:ba:e0:e3:93:40:85:25:b7:b4:d8:bd:33:c1:0d:
e6:fd:1d:c2:00:04:d7:d1:ff:76:76:dd:a0:bd:cc:59:9e:dd:
35:d5:32:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-fra.rpki-client.org