Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/ZP2M_xcLmFTlNdbOA22QmMy46v0.roa
File: ZP2M_xcLmFTlNdbOA22QmMy46v0.roa (raw, json)
Hash identifier: PsYj2GsTyt7HU2h9+BcHvDCfGMNAhDPEyFZkl+163/A=
Subject key identifier: 64:FD:8C:FF:17:0B:98:54:E5:35:D6:CE:03:6D:90:98:CC:B8:EA:FD
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 018EF15D95548CC9CE51D284276A8C88D25D
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/ZP2M_xcLmFTlNdbOA22QmMy46v0.roa
Signing time: Thu 18 Apr 2024 13:20:25 +0000
ROA not before: Thu 18 Apr 2024 13:20:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215137
IP address blocks: 2a07:5900::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 01 May 2024 12:22:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:5d:95:54:8c:c9:ce:51:d2:84:27:6a:8c:88:d2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: Apr 18 13:20:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64fd8cff170b9854e535d6ce036d9098ccb8eafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7e:15:52:0e:67:4c:36:54:8c:98:31:e9:c0:
4e:9d:1a:6f:76:f5:7f:dd:46:ed:42:fc:a1:5e:7b:
72:82:cf:16:c0:db:f3:8e:8f:23:f0:b7:59:1b:c5:
c6:b8:bd:33:5e:2f:3d:bb:b2:bf:b3:1b:05:fa:28:
ec:ad:bf:25:f8:97:4e:d5:9b:82:f1:bc:3b:31:dd:
77:c8:c8:d3:d3:b5:7e:94:42:59:ec:f2:43:66:2d:
df:49:0f:2e:f4:46:67:43:c5:07:ee:bf:c3:54:17:
d3:05:fe:25:e6:13:0d:e6:b2:92:85:5f:e1:71:06:
3f:69:d7:a7:1a:64:be:68:45:46:46:2a:47:15:95:
e4:a1:d5:26:f7:a8:2b:b6:17:8c:e4:3b:3a:26:bd:
49:8b:5b:c2:ed:9f:4e:49:7d:92:34:4e:bd:00:fe:
a6:bc:cb:86:5f:a1:80:9d:72:b2:64:65:ae:ca:c6:
fd:7b:3c:eb:25:91:16:2b:ce:12:38:aa:d6:7f:c6:
e8:1e:7f:c7:1f:c3:b5:29:f3:47:d8:23:8f:99:35:
05:ab:5f:fc:97:81:8e:5b:7c:1e:6f:be:4a:0d:8f:
01:de:e3:5c:4e:8e:13:d4:c9:a9:70:e7:82:70:de:
de:2d:00:61:98:04:de:2f:81:df:d1:f8:53:b9:9b:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:FD:8C:FF:17:0B:98:54:E5:35:D6:CE:03:6D:90:98:CC:B8:EA:FD
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/ZP2M_xcLmFTlNdbOA22QmMy46v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
ae:83:33:b9:a9:f1:44:9b:8d:13:08:02:e9:02:55:54:42:0b:
81:d3:9a:33:f3:69:49:11:32:1d:ce:b3:34:a1:db:ef:f5:02:
fe:05:6f:ff:36:0c:eb:2d:62:14:bf:50:4d:dd:10:1e:20:78:
45:d1:33:b2:c6:a6:3b:46:89:e1:1c:ec:68:db:2f:3d:ac:05:
1f:17:e9:a6:87:98:1a:30:49:f7:fa:f8:5e:37:8d:74:eb:fe:
2b:d1:16:24:f4:e0:b5:54:84:2c:23:d6:0b:9f:e3:21:70:a2:
27:d2:ae:8c:a7:03:3d:9b:68:c3:11:b3:5e:d4:c8:dc:8e:0f:
eb:dd:f9:55:4e:d4:0f:9c:78:49:73:d1:fb:a8:ed:ba:3d:62:
04:bf:b0:5f:5b:b9:e1:da:d4:d5:e4:92:18:d6:8d:d8:a2:97:
9b:cc:6e:97:d9:2c:62:e2:c7:3d:3a:b4:f1:af:1d:31:8a:cc:
d1:3a:da:50:a4:58:d1:09:0a:6f:3d:c0:9d:40:82:bc:a3:b8:
8b:d0:16:05:d6:f0:78:fa:6b:7c:10:cb:46:3b:95:49:32:49:
2c:4d:c9:66:a9:e0:18:5f:13:a8:1f:5c:21:82:38:05:7d:49:
48:c7:87:10:56:dc:60:e9:db:52:3a:77:8a:fb:f2:e0:fb:5d:
a5:bf:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:42 2024 by rpki-client on console-fra.rpki-client.org