Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/6zo_CL665UENEz6uvMjqFRviEbw.roa
File: 6zo_CL665UENEz6uvMjqFRviEbw.roa (raw, json)
Hash identifier: 99W6kMhdGcKSycajwnpm7BJvwghni/FyNeh8KH3GbXc=
Subject key identifier: EB:3A:3F:08:BE:BA:E5:41:0D:13:3E:AE:BC:C8:EA:15:1B:E2:11:BC
Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Certificate serial: 018E416ADABA873D3095E007EFB356420092
Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/6zo_CL665UENEz6uvMjqFRviEbw.roa
Signing time: Fri 15 Mar 2024 09:21:45 +0000
ROA not before: Fri 15 Mar 2024 09:21:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24953
IP address blocks: 2a10:fd00::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 18 Mar 2024 12:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:41:6a:da:ba:87:3d:30:95:e0:07:ef:b3:56:42:00:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a
Validity
Not Before: Mar 15 09:21:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb3a3f08bebae5410d133eaebcc8ea151be211bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4d:b4:33:fb:00:94:55:5f:c8:36:bc:2e:e8:
d0:c8:5c:11:55:00:e6:26:6c:d7:54:56:d5:22:98:
05:f4:e0:c7:36:d1:81:78:3e:ee:41:06:84:6c:fa:
66:cd:1f:7b:2b:70:46:21:b1:df:b2:b5:6f:96:7e:
da:dc:4a:c6:be:47:10:5f:86:15:d6:42:65:08:1a:
b6:30:66:69:30:1c:19:03:75:4d:54:3f:47:49:d2:
e0:2f:5c:83:ad:95:ea:04:dc:68:b6:42:6b:3e:2c:
96:2c:ef:49:02:74:39:45:4a:5d:89:a9:2f:25:2c:
4c:46:ef:13:84:ca:3e:a1:d9:2b:4a:b6:0b:b2:01:
ac:bd:f9:12:2e:30:08:af:5a:63:e9:ed:9c:72:f3:
5d:9d:5a:84:a2:6b:bc:3f:61:35:d1:b9:b1:bd:d0:
2c:f2:dd:67:85:51:60:d9:1c:55:7f:86:62:91:4b:
ea:a3:4b:ff:a3:3c:65:c2:04:59:f6:57:d9:5d:ba:
4e:5f:68:d9:71:4b:1c:79:ae:71:5a:c8:9a:e2:67:
d0:49:52:62:f7:42:c2:2d:d2:cf:af:56:b6:56:b1:
42:41:71:3c:ed:39:20:62:9d:fe:3e:fb:10:da:fc:
70:ce:5b:3f:72:14:12:85:ab:06:3a:ff:8a:a2:0e:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:3F:08:BE:BA:E5:41:0D:13:3E:AE:BC:C8:EA:15:1B:E2:11:BC
X509v3 Authority Key Identifier:
keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/6zo_CL665UENEz6uvMjqFRviEbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fd00::/32
Signature Algorithm: sha256WithRSAEncryption
47:b0:57:e7:b6:a1:48:9a:0f:c3:01:87:db:ea:c9:0c:cb:2a:
2e:0e:34:df:77:df:99:c1:e0:f2:71:e6:0d:99:7f:2f:c2:93:
67:57:5b:19:41:d8:6d:f2:dc:9c:b4:20:e5:08:c7:f6:66:aa:
2b:bb:05:43:82:f8:7b:4e:2d:97:3e:8a:3f:5a:28:30:2d:04:
57:e0:f5:00:cb:b2:5b:2e:17:c2:cb:dd:aa:ed:6f:2d:a6:8a:
2c:16:3f:5d:bc:03:04:de:49:fd:ef:8d:6d:11:d0:d5:9d:fc:
05:92:a4:22:c5:bd:4a:65:63:bc:4b:bd:5f:b6:9e:31:a8:ca:
16:8e:65:32:27:19:ab:ea:46:84:a2:c6:ad:57:cb:88:78:0b:
bc:1e:9b:01:fc:9e:61:69:ff:82:e1:38:6f:24:e3:54:0c:85:
e7:d2:02:99:8d:be:9f:1f:a0:44:4d:65:71:eb:75:f4:92:9e:
e4:27:4d:00:f5:99:9c:06:21:92:ed:e7:7b:97:3c:1f:a7:41:
79:1b:e5:46:fc:d0:5a:68:54:83:2c:33:d3:5a:98:10:d9:db:
af:c8:7d:a0:17:02:24:72:01:2b:d3:17:a7:f1:fd:89:ad:0c:
74:c8:5d:42:01:2b:59:9b:0c:fa:5b:e0:9c:9c:0b:75:54:3f:
04:eb:06:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:03 2025 by rpki-client