Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/zMxWBtcz4wcGaJ0Gp03iHShwteM.roa
File: zMxWBtcz4wcGaJ0Gp03iHShwteM.roa (raw, json)
Hash identifier: kliSg0PvOgLnvY0CLMJLvxy7KUhJ9I5tFjUvBryRckQ=
Subject key identifier: CC:CC:56:06:D7:33:E3:07:06:68:9D:06:A7:4D:E2:1D:28:70:B5:E3
Certificate issuer: /CN=4003350bcc7b540fadea951e046081d8da06c145
Certificate serial: 0189402D33C77D03ED9D9BAF5233333DC02F
Authority key identifier: 40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/zMxWBtcz4wcGaJ0Gp03iHShwteM.roa
Signing time: Mon 10 Jul 2023 14:20:51 +0000
ROA not before: Mon 10 Jul 2023 14:20:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58251
IP address blocks: 2a13:8b40:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 12 Jul 2023 04:41:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:40:2d:33:c7:7d:03:ed:9d:9b:af:52:33:33:3d:c0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4003350bcc7b540fadea951e046081d8da06c145
Validity
Not Before: Jul 10 14:20:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cccc5606d733e30706689d06a74de21d2870b5e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f0:e6:f2:90:ab:43:93:17:09:3d:1e:4b:02:
c8:5c:6c:a8:99:9f:4b:44:eb:8c:e4:cd:36:cc:22:
d2:a1:26:03:c4:8a:3c:04:d1:0c:5e:69:fd:8c:09:
98:c5:98:ce:85:e3:0c:23:61:53:b6:a9:ba:ae:a5:
e7:7d:d4:8f:77:24:17:42:4a:ad:7f:2a:a0:c1:d4:
a1:a8:d1:20:a1:3f:e6:af:07:df:17:00:0f:43:cd:
3b:31:25:64:fe:dd:76:2f:43:d5:b8:7d:c3:83:0e:
26:d5:81:06:33:90:37:8c:5d:63:e5:ff:f8:72:80:
fd:7d:39:bc:e2:c2:59:b0:4b:8a:b1:4a:f0:88:9c:
8b:4d:61:3a:95:b7:3b:9e:41:6a:cc:52:21:57:7b:
63:ea:4e:b0:66:50:b2:fd:36:cd:ba:66:7f:e3:ec:
fb:4d:1e:0a:8c:08:fe:d9:ec:2c:9a:1f:7a:3f:b5:
57:b0:9d:8c:44:c7:2f:d5:72:f8:91:ca:59:05:9e:
20:0f:a3:b3:58:bf:14:7c:d6:92:52:f3:6c:86:e6:
9b:60:0b:a9:a3:c1:12:10:e6:8e:7f:96:60:f5:f6:
fc:f6:24:dd:88:e3:de:47:3c:50:be:c6:cf:9a:b1:
5e:0a:a3:5d:d9:40:aa:ab:14:1a:5b:f8:a6:af:77:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CC:56:06:D7:33:E3:07:06:68:9D:06:A7:4D:E2:1D:28:70:B5:E3
X509v3 Authority Key Identifier:
keyid:40:03:35:0B:CC:7B:54:0F:AD:EA:95:1E:04:60:81:D8:DA:06:C1:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAM1C8x7VA-t6pUeBGCB2NoGwUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/zMxWBtcz4wcGaJ0Gp03iHShwteM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/dd8877-d082-41ea-9f85-696b615cbec3/1/QAM1C8x7VA-t6pUeBGCB2NoGwUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8b40:1::/48
Signature Algorithm: sha256WithRSAEncryption
a0:ae:37:9b:d6:64:1f:c7:cb:18:af:86:bd:99:c0:5b:b8:4a:
f9:63:cb:f8:48:fc:4a:04:94:00:00:29:6b:db:6a:fd:49:8a:
d1:f5:67:09:b3:05:70:dd:f2:96:ad:be:e4:21:7a:96:01:bd:
5d:e1:45:c9:de:12:fa:3e:47:2f:98:07:cb:bb:8a:00:4b:be:
c0:f8:af:b6:71:56:82:07:3d:e5:53:54:95:8f:65:91:9f:d6:
0d:a8:d5:2e:1c:a3:9d:00:74:6d:da:56:7b:6d:2e:11:9d:aa:
d4:91:a7:6a:bd:74:e0:f2:e8:1e:9f:d6:30:49:3c:ca:fb:b9:
b0:4b:f0:40:73:c4:5b:99:a5:49:8c:b1:38:27:f2:a9:4b:48:
0b:02:1e:60:43:9c:18:66:cf:25:d5:cf:22:70:44:32:25:d2:
48:27:33:78:9e:29:cb:29:4e:ac:b9:1b:0e:7d:7a:e8:ce:76:
3f:9e:b4:f4:fe:56:b3:74:a7:fb:04:5b:fc:ad:84:01:32:73:
24:36:a8:c7:04:5a:18:43:32:33:82:3f:72:df:2a:74:43:32:
22:d5:e6:5c:3b:ad:d8:71:0b:f8:a7:41:c5:72:2b:60:5d:35:
37:2d:24:22:59:5f:63:1e:34:8b:02:d3:81:d3:ab:d5:e2:13:
80:67:30:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:13 2024 by rpki-client on console-ams.rpki-client.org