Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/ZbMBX3KIILp2Yrl6bt4KjSJDWLE.roa
File: ZbMBX3KIILp2Yrl6bt4KjSJDWLE.roa (raw, json)
Hash identifier: xmk5CtF9pcZYbgWnntdPKOzyO2U6ks+MrO5MbofPcWg=
Subject key identifier: 65:B3:01:5F:72:88:20:BA:76:62:B9:7A:6E:DE:0A:8D:22:43:58:B1
Certificate issuer: /CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Certificate serial: 018CC5010BE631D19E58C1617BB68D1087FC
Authority key identifier: 60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/ZbMBX3KIILp2Yrl6bt4KjSJDWLE.roa
Signing time: Mon 01 Jan 2024 12:30:29 +0000
ROA not before: Mon 01 Jan 2024 12:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15924
IP address blocks: 2a14:2b80::/29 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0b:e6:31:d1:9e:58:c1:61:7b:b6:8d:10:87:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601ddc60799263ffb9bd0e5eeb0872843dee6a72
Validity
Not Before: Jan 1 12:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=65b3015f728820ba7662b97a6ede0a8d224358b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:25:80:c0:27:f5:f4:fe:fc:d0:75:0a:0f:4d:
56:8f:d5:15:e3:4c:f6:5c:18:ee:c8:6a:8b:f6:2f:
71:6d:4e:28:15:80:c7:93:8a:75:4b:22:c1:c1:27:
48:50:69:33:65:b9:e4:ad:63:df:82:f8:06:b9:10:
d2:5b:0b:66:9f:bc:cd:3c:13:89:33:c2:8a:6a:33:
db:18:ed:7c:d1:af:8a:5e:88:41:01:d2:18:57:cf:
5c:69:d2:08:4b:96:9a:ea:2b:0a:de:94:c0:8c:75:
ee:27:8a:57:9e:b8:d3:4f:c5:65:7b:f2:1a:a4:13:
03:21:aa:7f:75:41:27:da:81:5a:9c:f1:e9:04:3e:
34:be:28:99:13:bd:ee:92:cf:f1:dc:73:24:9c:dd:
4f:43:38:b8:6d:07:df:52:ec:93:a9:19:62:ea:37:
df:38:9f:02:3f:11:25:71:fc:4d:ca:b9:f8:78:47:
6f:ae:89:96:e7:b0:83:15:8c:97:b2:a3:74:6c:7e:
2b:5b:98:73:ed:ee:06:ee:63:c4:22:fe:95:07:26:
35:f1:9f:e4:b1:bd:00:4f:93:b5:0a:21:65:f6:23:
ff:7f:d5:12:c4:eb:93:b5:99:4a:98:6d:3b:9e:2e:
ec:a7:c7:19:06:2c:db:ab:e9:b8:41:4a:59:89:08:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B3:01:5F:72:88:20:BA:76:62:B9:7A:6E:DE:0A:8D:22:43:58:B1
X509v3 Authority Key Identifier:
keyid:60:1D:DC:60:79:92:63:FF:B9:BD:0E:5E:EB:08:72:84:3D:EE:6A:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YB3cYHmSY_-5vQ5e6whyhD3uanI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/ZbMBX3KIILp2Yrl6bt4KjSJDWLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a45e7e-5dc3-49d3-aa3f-367e170e7128/1/YB3cYHmSY_-5vQ5e6whyhD3uanI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2b80::/29
Signature Algorithm: sha256WithRSAEncryption
af:bf:fd:b2:9b:90:8d:d6:d9:0b:23:2f:0e:81:9e:c3:7e:24:
b7:ae:e9:e1:16:84:7e:d6:d3:47:2e:4d:1d:6e:4f:bb:3c:a9:
3a:ab:6b:44:91:74:2f:63:2b:94:ee:17:12:51:4f:2c:11:7c:
56:a9:95:5c:f7:81:e4:e9:dc:0f:ae:be:a5:16:9d:57:79:ed:
af:10:05:4f:1d:c4:8c:0f:f1:39:25:9f:94:b1:43:e3:b4:7e:
9f:fa:4b:64:a9:25:31:8f:57:bf:c5:bb:00:2b:71:a0:ef:fe:
05:05:db:60:7e:5d:b3:60:a1:e0:c7:83:70:37:87:12:00:d1:
e8:89:b9:f0:1e:9c:f3:d1:13:fa:36:fc:5f:3b:3f:99:28:e7:
13:ae:d9:03:98:61:38:51:67:58:e8:1d:cf:8e:cf:8e:0b:6a:
f4:99:4a:d5:d3:59:00:8d:24:e6:ad:d2:1d:00:07:5d:b9:54:
1a:b7:3b:5e:1c:03:b2:7a:7e:60:38:f4:3f:f4:26:45:38:d0:
a1:25:24:ad:b7:0f:d2:0b:12:47:be:90:1b:16:ff:1a:d8:a3:
fa:61:9b:23:ef:ba:d4:f9:04:f7:ff:41:f9:28:3b:e1:f1:ab:
be:d2:1d:4a:1d:b0:c4:52:78:f5:36:4a:82:d6:11:2e:e0:d5:
96:11:5e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 3 13:09:59 2024 by rpki-client on console-fra.rpki-client.org