Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/rzydK9Q5OoBEZ4XVa1hImrxfBRo.roa
File: rzydK9Q5OoBEZ4XVa1hImrxfBRo.roa (raw, json)
Hash identifier: nDHArcGfHCMDDOvHA7dZqsbKPQpeuKglem11KFOtC2M=
Subject key identifier: AF:3C:9D:2B:D4:39:3A:80:44:67:85:D5:6B:58:48:9A:BC:5F:05:1A
Certificate issuer: /CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Certificate serial: 01910CB6AF11FF45CD50755C2C41D63D9156
Authority key identifier: 02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/rzydK9Q5OoBEZ4XVa1hImrxfBRo.roa
Signing time: Thu 01 Aug 2024 06:53:04 +0000
ROA not before: Thu 01 Aug 2024 06:53:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214443
IP address blocks: 2a01:e600::/29 maxlen: 29
2a01:e600::/32 maxlen: 32
2a01:e601::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 13 Aug 2024 13:28:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:b6:af:11:ff:45:cd:50:75:5c:2c:41:d6:3d:91:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=027e5858fa543fe3ff474d8d76ab9701ea010b0b
Validity
Not Before: Aug 1 06:53:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af3c9d2bd4393a80446785d56b58489abc5f051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ad:63:48:97:81:df:cd:53:87:a0:4f:7e:01:
7a:9b:fa:2d:5b:cd:ba:37:8f:29:11:12:bd:e7:65:
a7:3f:08:92:36:7c:fd:d2:27:c9:d6:2e:04:f8:96:
cb:ad:27:9a:f9:2b:7f:05:7b:cd:a5:30:09:74:9c:
41:fc:73:1c:54:96:93:59:50:67:e2:56:af:d9:85:
57:bc:05:44:4c:1d:07:cb:c4:80:ed:00:65:14:99:
74:f7:f7:93:63:1e:5e:42:9f:51:46:03:58:48:37:
62:e2:76:eb:28:c1:2a:6c:21:d7:71:57:30:0f:56:
cb:a3:ea:15:98:bc:14:3b:c4:ae:61:72:ff:5a:be:
07:a0:3c:68:5d:50:68:73:b7:cf:b1:ef:ae:2e:30:
f6:8a:2f:ab:8b:53:c0:e1:19:aa:54:1c:b9:a1:6f:
a2:f8:15:4f:11:64:d4:0e:e5:03:ff:2e:5f:6e:cf:
f0:b5:4e:eb:15:45:1a:13:4c:1c:e5:c9:0b:af:7b:
96:4d:5e:db:28:cf:a0:00:a7:32:35:b3:49:29:75:
cf:5a:7d:a1:48:64:a2:ed:3c:57:50:c9:a8:56:90:
19:01:7c:fe:0b:45:2f:de:9d:0f:18:9f:8c:66:12:
b0:65:66:1b:b8:d2:c2:0a:f5:e1:23:b0:3f:e6:ad:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3C:9D:2B:D4:39:3A:80:44:67:85:D5:6B:58:48:9A:BC:5F:05:1A
X509v3 Authority Key Identifier:
keyid:02:7E:58:58:FA:54:3F:E3:FF:47:4D:8D:76:AB:97:01:EA:01:0B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/An5YWPpUP-P_R02NdquXAeoBCws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/rzydK9Q5OoBEZ4XVa1hImrxfBRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/67bbc5-64ae-41d5-93d3-3b2894f0e69c/1/An5YWPpUP-P_R02NdquXAeoBCws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e600::/29
Signature Algorithm: sha256WithRSAEncryption
a4:03:72:17:05:2a:f3:9f:f0:70:1c:a2:6a:e1:24:a0:1c:37:
77:68:a2:43:9b:45:98:49:e9:13:da:04:02:5e:d0:b6:f1:27:
5b:aa:00:a1:c8:1c:75:cf:39:f6:7e:19:57:85:db:d7:cf:19:
94:bb:d9:9c:8b:d5:24:7b:6b:58:4e:f6:40:e4:c7:06:41:99:
93:5b:d0:e9:20:ad:2f:8f:21:7b:f9:04:aa:e4:24:5e:6d:74:
23:7f:e9:45:f7:72:da:0e:3d:ae:c7:62:07:e4:25:cd:67:f8:
aa:ba:09:cc:5b:b6:09:b5:60:0c:6b:2c:38:b0:b0:b9:89:1d:
56:77:e1:71:ce:39:53:18:31:a4:19:4e:43:f8:66:9a:3a:41:
2d:ab:7b:d2:3b:14:09:5e:b2:94:90:0d:dd:b1:1f:b7:b4:83:
03:b1:38:14:65:3e:0c:83:d8:cb:2c:4e:a0:0a:3e:9c:e6:24:
94:d6:5c:b1:8f:3c:25:e8:0c:6c:30:aa:79:3d:0e:8d:31:d1:
58:52:9f:eb:12:96:b4:97:d8:a9:3c:bb:79:5b:91:81:22:d0:
a3:da:15:94:b7:06:32:3a:f6:97:a3:87:d0:20:39:51:e8:15:
44:81:de:ff:02:2b:4b:f1:0c:b8:21:98:16:a6:73:48:69:bb:
1c:df:eb:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 13 17:33:07 2024 by rpki-client on console-ams.rpki-client.org