Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/ZxL6gU8G8ube5b4Z-YnikzqdpMw.roa
File: ZxL6gU8G8ube5b4Z-YnikzqdpMw.roa (raw, json)
Hash identifier: l1X0r9qsw+GyDjC4P+Okty7seRIW9uGx9Z7/ftkrWWY=
Subject key identifier: 67:12:FA:81:4F:06:F2:E6:DE:E5:BE:19:F9:89:E2:93:3A:9D:A4:CC
Certificate issuer: /CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Certificate serial: 0185744ED51837353B28BFCFBC1C2E61B24A
Authority key identifier: 88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/ZxL6gU8G8ube5b4Z-YnikzqdpMw.roa
Signing time: Mon 02 Jan 2023 21:06:41 +0000
ROA not before: Mon 02 Jan 2023 21:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59422
IP address blocks: 2a13:74c0:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:74:4e:d5:18:37:35:3b:28:bf:cf:bc:1c:2e:61:b2:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88179ac9052f6941b39535b7fd21e2aab08d5878
Validity
Not Before: Jan 2 21:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6712fa814f06f2e6dee5be19f989e2933a9da4cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:88:ca:b0:11:f0:0c:80:61:b3:2e:ea:43:
60:7e:18:0d:0e:93:d2:be:ec:ee:2c:48:5c:00:43:
9b:49:23:40:2a:99:32:bb:02:4f:b1:98:25:39:49:
bd:f8:89:f7:3c:8f:f6:cc:71:d4:e6:96:fd:01:7c:
fe:04:8a:e9:e2:30:51:a6:8b:1a:73:03:1b:55:dc:
ea:86:59:c5:a7:96:79:fe:d0:a4:82:00:cc:79:be:
41:a1:60:88:20:72:56:73:40:29:86:d3:d9:01:91:
6c:0e:3e:f4:79:28:5d:66:7d:15:41:65:e0:22:7d:
90:02:db:f6:fa:a5:c7:0c:d1:1e:fc:25:79:d2:24:
54:f2:bc:2a:50:07:f8:93:06:b2:df:6d:5e:a3:95:
c9:64:d9:fa:0c:40:f7:d5:9c:d6:3a:43:fe:28:93:
73:bc:54:02:17:2d:df:1c:ce:16:17:a6:8a:dd:7f:
ec:69:07:a2:73:12:b2:2a:21:5f:45:ea:35:a3:0c:
3d:65:58:36:c3:10:9e:c3:d7:d3:da:7e:7a:73:3e:
4b:5a:ff:9a:2b:28:df:4f:39:be:32:c9:36:7b:f2:
40:21:db:2c:19:08:08:75:80:7f:f5:42:8b:71:7c:
3a:79:c3:2e:ea:7a:0f:5b:d3:9e:1d:b5:37:d9:4b:
0e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:12:FA:81:4F:06:F2:E6:DE:E5:BE:19:F9:89:E2:93:3A:9D:A4:CC
X509v3 Authority Key Identifier:
keyid:88:17:9A:C9:05:2F:69:41:B3:95:35:B7:FD:21:E2:AA:B0:8D:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeayQUvaUGzlTW3_SHiqrCNWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/ZxL6gU8G8ube5b4Z-YnikzqdpMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/265e5c-fa46-4b02-ad0a-5b78bf7e9603/1/iBeayQUvaUGzlTW3_SHiqrCNWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:74c0:5::/48
Signature Algorithm: sha256WithRSAEncryption
12:44:ea:8a:e8:78:93:05:5f:76:cb:2a:0c:25:4c:79:ae:ce:
c3:2c:9e:03:5d:c3:a6:f2:6c:57:e7:27:9c:6a:71:eb:96:f3:
fc:09:99:c2:62:22:3b:d0:de:67:d6:62:88:23:1f:c4:1e:46:
4c:d6:df:38:6f:ad:ae:21:71:f8:b8:4a:93:66:bc:73:97:f6:
a6:d3:61:c6:3e:cc:55:0d:28:a4:77:47:36:94:43:d4:c5:84:
88:0d:72:60:de:e9:68:ef:c5:bb:ff:13:39:26:24:7b:8c:5c:
fe:7c:38:7b:e9:f1:fd:9c:2f:88:22:f2:52:31:5d:ad:f2:05:
4f:7f:4d:ac:de:17:92:84:f3:61:68:c8:2a:bd:7f:11:9c:d5:
87:5a:54:54:e3:4a:ae:3b:d0:dd:98:2a:fc:b1:43:b1:49:91:
9f:eb:a1:12:da:41:0b:d6:9e:85:9d:43:d5:d6:38:1e:1c:0f:
4b:b3:aa:7c:b9:c2:ec:36:dc:81:92:8a:e3:18:c4:f1:45:fb:
7d:82:ab:bb:41:73:fc:20:de:1c:9a:bc:cc:4e:35:e4:af:35:
e2:9c:bb:1c:92:1e:6f:d6:61:fb:c6:bc:7d:26:09:7b:23:37:
12:95:5c:c8:c0:b2:25:5a:c8:81:f2:60:ff:c6:28:63:ac:f0:
c7:d2:79:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:40 2024 by rpki-client on console-fra.rpki-client.org