Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ZEYraT5V4b-WnpAWk9Wwb8xn66w.roa
File: ZEYraT5V4b-WnpAWk9Wwb8xn66w.roa (raw, json)
Hash identifier: Pj4GUqNvzxKoBgEVwUuChTaxIf/ImAAMnZEYi8cjqws=
Subject key identifier: 64:46:2B:69:3E:55:E1:BF:96:9E:90:16:93:D5:B0:6F:CC:67:EB:AC
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 01856C6F10EA57B5C90415B5928B55C45340
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ZEYraT5V4b-WnpAWk9Wwb8xn66w.roa
Signing time: Sun 01 Jan 2023 08:24:56 +0000
ROA not before: Sun 01 Jan 2023 08:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213392
IP address blocks: 2a0e:46c3:800::/40 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:10:ea:57:b5:c9:04:15:b5:92:8b:55:c4:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 08:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64462b693e55e1bf969e901693d5b06fcc67ebac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:2e:ac:5e:21:21:88:39:c5:79:5b:03:c1:
51:95:91:56:e2:30:12:69:ed:57:9c:54:91:61:d7:
9e:b5:6d:6a:98:34:10:74:d5:b8:5a:b5:84:2c:43:
93:b4:be:14:fe:af:24:5f:32:3e:80:f8:1d:fd:0f:
9b:20:61:ff:30:2a:1e:e1:21:ea:40:b5:54:90:0c:
b5:86:e3:c5:d7:50:5b:9d:22:89:73:d3:50:40:db:
cf:90:87:80:11:1f:37:6b:5c:d6:97:f4:ac:37:34:
53:14:34:1f:6b:bb:e5:ec:93:62:a7:67:54:f5:f8:
ab:57:12:9e:e5:80:74:e8:2f:75:9a:ec:f4:8a:27:
e1:7e:3f:4f:c9:b8:db:8f:d6:e2:5f:93:0e:1f:b6:
df:d1:9c:d4:3a:b1:88:12:2d:e7:c3:77:31:65:36:
4d:64:64:e3:e7:73:0f:17:fd:dc:39:06:88:bc:49:
8f:47:f8:c3:1b:d8:78:d5:7c:7d:4b:83:da:11:93:
69:d9:b5:e2:36:b7:a4:1e:80:74:ba:58:43:a9:49:
dd:b8:c2:64:90:c8:08:d6:9f:64:09:0d:43:9a:20:
94:b0:38:e2:3a:12:4b:d1:eb:e2:92:f3:1f:cd:73:
93:25:76:f2:42:23:3c:45:f4:ac:a7:7d:00:53:af:
84:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:46:2B:69:3E:55:E1:BF:96:9E:90:16:93:D5:B0:6F:CC:67:EB:AC
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/ZEYraT5V4b-WnpAWk9Wwb8xn66w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c3:800::/40
Signature Algorithm: sha256WithRSAEncryption
1f:86:d5:aa:0b:87:11:63:58:25:dc:5e:10:2d:3b:3f:e2:a5:
b3:74:4b:ec:c0:3c:94:40:ed:64:fa:33:16:e6:ce:27:46:5c:
29:e9:8e:00:a9:80:03:95:39:b8:20:c6:39:7c:f0:eb:ca:94:
80:85:93:a3:ae:b0:35:5d:a7:4a:9e:79:69:50:c1:7d:b3:0b:
fe:6b:ae:f0:8d:0e:ae:98:ee:b9:4c:10:2a:69:cb:92:78:3b:
97:52:59:ab:27:e4:d3:f9:d1:96:46:50:ca:65:84:69:f4:25:
f4:68:46:a5:38:5d:19:86:6f:ea:f9:43:db:8e:16:49:dc:2c:
5a:1b:cd:f4:7a:e4:c1:57:2f:ae:68:c5:db:2a:94:f9:93:42:
70:82:25:de:d0:f4:b1:ab:56:dd:bb:57:15:af:d7:b6:6b:1d:
6b:8c:8c:87:1e:b9:e0:9c:53:da:f0:62:7d:41:54:20:83:84:
b1:71:35:9a:a5:d3:5a:59:d4:bc:61:33:65:72:19:a2:d6:72:
4e:ac:c9:2f:fa:13:c0:4f:fd:87:01:7c:61:b3:11:bd:d0:bd:
27:ca:55:9b:b3:36:18:a0:a3:94:3e:87:63:a8:40:0d:0d:65:
af:72:85:ed:33:c8:67:6e:c0:3d:b9:ec:55:2d:a0:c6:d3:d9:
71:62:37:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:40 2024 by rpki-client on console-ams.rpki-client.org