Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ZDiqmsG894hyYyAbT51Suwzu9WU.roa
File: ZDiqmsG894hyYyAbT51Suwzu9WU.roa (raw, json)
Hash identifier: hr7tIdXuH6oTBw/61dbYPijyDS+UNyxhECSxSghRN0E=
Subject key identifier: 64:38:AA:9A:C1:BC:F7:88:72:63:20:1B:4F:9D:52:BB:0C:EE:F5:65
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018DC5E204378AE310AB46C044124003947C
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ZDiqmsG894hyYyAbT51Suwzu9WU.roa
Signing time: Tue 20 Feb 2024 09:39:00 +0000
ROA not before: Tue 20 Feb 2024 09:39:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198351
IP address blocks: 2a12:bec4:1020::/48 maxlen: 48
2a12:bec4:1021::/48 maxlen: 48
2a12:bec4:1022::/48 maxlen: 48
2a12:bec4:1023::/48 maxlen: 48
2a12:bec4:1024::/48 maxlen: 48
2a12:bec4:1025::/48 maxlen: 48
2a12:bec4:1026::/48 maxlen: 48
2a12:bec4:1027::/48 maxlen: 48
2a12:bec4:1028::/48 maxlen: 48
2a12:bec4:1029::/48 maxlen: 48
2a12:bec4:102a::/48 maxlen: 48
2a12:bec4:102b::/48 maxlen: 48
2a12:bec4:102c::/48 maxlen: 48
2a12:bec4:102d::/48 maxlen: 48
2a12:bec4:102e::/48 maxlen: 48
2a12:bec4:102f::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Apr 2024 12:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:e2:04:37:8a:e3:10:ab:46:c0:44:12:40:03:94:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 20 09:39:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6438aa9ac1bcf7887263201b4f9d52bb0ceef565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:96:90:67:31:6a:7d:81:ef:d0:79:8c:5a:
d3:e0:8d:c1:39:d5:ab:60:5c:04:f3:13:67:13:c2:
02:d4:43:19:2a:8e:af:7a:54:4d:53:5d:9f:a2:01:
0d:e8:0e:14:ad:fe:71:e6:17:33:1f:34:a5:f5:19:
70:4b:b6:a0:b7:4a:1b:27:1c:23:ee:a2:f1:ee:ac:
24:f4:64:cf:b0:48:4a:15:57:82:30:ca:11:ad:26:
91:3e:83:4d:0d:d5:df:87:d6:92:23:11:c3:2b:56:
ae:0a:a9:ba:08:ad:8a:f3:7f:0b:0c:1e:4d:3c:c5:
cd:13:77:cc:ef:c2:2b:2a:cd:84:03:6f:25:89:a6:
6b:31:43:e8:53:2c:41:e1:f5:f1:ed:6a:e6:54:0a:
25:b9:11:9a:ad:b2:da:ca:a2:71:8c:ae:9a:bf:d2:
63:79:a0:00:2a:e5:94:e3:32:82:6d:a7:1a:9e:8b:
03:30:59:41:8b:47:77:d1:dc:54:be:bc:ef:df:d2:
c6:8d:95:22:db:ea:30:97:71:2a:78:ac:a9:d4:34:
17:90:64:d9:41:21:07:29:04:0c:2f:5c:d9:3e:8f:
19:5d:76:af:89:93:a8:77:57:e9:58:5e:2d:3e:6c:
d3:ef:66:c7:73:43:9c:3a:87:e2:28:76:47:38:f8:
51:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:38:AA:9A:C1:BC:F7:88:72:63:20:1B:4F:9D:52:BB:0C:EE:F5:65
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/ZDiqmsG894hyYyAbT51Suwzu9WU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1020::/44
Signature Algorithm: sha256WithRSAEncryption
49:a2:9d:dd:d6:fa:0d:c1:15:0e:88:83:86:98:7a:9b:77:d0:
91:fd:92:3d:e3:2e:ed:87:5b:d8:36:96:97:c3:8e:ef:b7:33:
f9:be:82:6c:ff:35:f4:56:08:ed:31:03:6f:ad:72:98:16:20:
ba:d6:7a:97:ae:0a:86:90:47:87:4e:3b:7b:07:f2:77:2b:a7:
24:d1:1b:ee:25:4e:88:f4:c7:30:df:9b:5b:03:6f:69:b9:c5:
75:ee:fa:ce:25:57:31:c3:45:d0:9d:dd:7c:db:52:34:e2:5d:
28:33:99:39:ed:2c:1a:f5:3a:f0:ae:0b:a8:00:e2:40:f9:7a:
f1:6d:73:72:d2:88:59:de:6b:38:b6:a2:0e:52:ae:0b:7e:bd:
7e:91:e8:a3:dd:6f:0a:06:b6:04:39:61:ea:23:48:79:c8:94:
3b:31:77:54:93:8f:56:7f:81:c0:c7:c9:92:67:98:2a:2c:6a:
84:53:03:b3:82:3d:8e:07:e3:68:22:e5:6b:4e:52:03:e6:bb:
37:cd:cb:79:30:af:21:5d:02:d2:22:5c:3b:3c:7d:68:14:de:
24:01:fd:80:09:9b:c6:68:18:ac:a7:ff:8e:c2:18:ed:0b:6f:
58:ed:fb:a9:48:0b:d4:7f:ab:9f:aa:5b:8b:67:1b:0b:67:cc:
72:bb:d9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:47 2024 by rpki-client on console-ams.rpki-client.org