Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/Zhc4fMjZJfgG0Ue-ZVjYBhKT4SY.roa
File: Zhc4fMjZJfgG0Ue-ZVjYBhKT4SY.roa (raw, json)
Hash identifier: N/yhmPlf6ub/AFw/BV+krNFi2Hq71hB1+QmjyoowA38=
Subject key identifier: 66:17:38:7C:C8:D9:25:F8:06:D1:47:BE:65:58:D8:06:12:93:E1:26
Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Certificate serial: 018B8F1D7FAD1AA25DB1FC4CD51313555C9A
Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/Zhc4fMjZJfgG0Ue-ZVjYBhKT4SY.roa
Signing time: Thu 02 Nov 2023 08:19:16 +0000
ROA not before: Thu 02 Nov 2023 08:19:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400587
IP address blocks: 2a0e:1c80:17::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:1d:7f:ad:1a:a2:5d:b1:fc:4c:d5:13:13:55:5c:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6
Validity
Not Before: Nov 2 08:19:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6617387cc8d925f806d147be6558d8061293e126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5b:d6:6a:9b:70:bc:68:f5:64:1e:43:fa:64:
89:77:21:b7:de:0a:e1:ef:36:5b:0e:04:dd:9c:ee:
d1:a1:45:c7:d9:0c:5a:46:33:22:36:3b:a8:95:03:
b9:74:90:6f:6d:c1:db:af:70:95:4e:a5:0f:6d:dc:
86:36:6e:67:f6:96:f1:b9:8d:2f:69:c6:86:95:bb:
ef:0c:06:91:62:70:67:4a:d2:a1:ad:ae:e5:66:99:
ce:5e:b4:8c:e6:ab:19:8d:a9:39:6e:5f:13:80:06:
8f:f5:9f:9b:fd:f6:e2:2b:c3:0e:1b:72:eb:84:af:
e2:e5:8e:dc:cf:f4:97:62:99:89:87:c5:bc:d1:b8:
f7:f6:a1:91:dd:9a:6d:1c:03:3e:67:2b:e0:10:c6:
f5:d3:da:f5:be:d5:40:f9:78:b4:3d:c5:fb:74:5a:
a4:b4:d7:a9:40:41:e9:5a:f5:90:f5:cc:24:a9:60:
82:d3:47:7f:58:ca:75:9b:bc:7c:ba:b3:0a:3f:bd:
b7:f5:15:22:ca:98:ff:79:bb:1b:8f:ca:9f:7e:68:
a0:c3:88:d4:56:73:22:bc:b2:eb:5d:81:1d:ef:53:
3e:40:0c:82:7b:fb:ad:9a:18:10:65:44:f7:e6:c1:
31:a3:5b:f1:5b:2f:59:2a:d0:62:36:5f:22:1f:34:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:17:38:7C:C8:D9:25:F8:06:D1:47:BE:65:58:D8:06:12:93:E1:26
X509v3 Authority Key Identifier:
keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/Zhc4fMjZJfgG0Ue-ZVjYBhKT4SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1c80:17::/48
Signature Algorithm: sha256WithRSAEncryption
95:55:41:27:d4:d9:dc:b6:bd:34:e5:64:c8:bc:94:93:a3:76:
36:b4:7c:64:ff:f2:f1:30:e8:a7:1f:cb:3f:a4:17:e3:fe:20:
6d:e7:90:3d:e5:65:27:ba:44:a7:fc:33:a0:4a:6b:e2:48:12:
f4:33:b4:79:c8:d8:3e:98:17:1d:d3:d5:88:82:08:e0:a2:f8:
c9:75:cb:5d:a3:57:09:5e:8d:18:4d:48:c2:1e:12:ff:69:7b:
83:50:39:43:04:f2:7e:35:0c:5a:96:e3:bc:d3:7a:d7:e1:a4:
ed:18:84:c1:e6:5f:4c:a7:b2:5a:97:a2:a0:16:8d:7b:1b:e8:
c6:8a:a1:cd:8e:b5:72:4b:d0:3f:39:4f:82:c3:3a:95:a9:33:
f1:bc:4c:f0:16:67:2d:10:34:08:0a:aa:26:7e:56:49:8b:66:
70:dc:95:a6:9e:6e:69:da:1c:da:07:e1:1a:91:2a:7c:47:a5:
65:08:58:a0:8e:a4:0a:11:3c:d0:27:19:7e:11:cd:99:91:5e:
f1:47:16:9b:09:66:41:7f:a9:60:70:45:ae:3c:e3:75:23:7d:
08:cb:07:85:ee:c1:af:3b:f8:3a:d7:11:e4:87:4a:30:22:be:
ad:7a:98:0b:a4:85:46:d0:0f:5b:45:21:fe:14:ae:c6:60:00:
2c:6b:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:20 2024 by rpki-client on console-fra.rpki-client.org