Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ZA_SYbSoQt7fDQouZGJ1jSefDK4.roa
File: ZA_SYbSoQt7fDQouZGJ1jSefDK4.roa (raw, json)
Hash identifier: KtsvK4wLZRWrQdtPZH4gKs+hU+xNRXbmSv8KFLF6fkQ=
Subject key identifier: 64:0F:D2:61:B4:A8:42:DE:DF:0D:0A:2E:64:62:75:8D:27:9F:0C:AE
Certificate issuer: /CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Certificate serial: 01932BD6FD3C2F87A27845A7E576F33C9FA2
Authority key identifier: 6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ZA_SYbSoQt7fDQouZGJ1jSefDK4.roa
Signing time: Thu 14 Nov 2024 18:02:09 +0000
ROA not before: Thu 14 Nov 2024 18:02:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214088
IP address blocks: 2001:30c0:30c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Fri 22 Nov 2024 11:43:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:d6:fd:3c:2f:87:a2:78:45:a7:e5:76:f3:3c:9f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6faf48b02b97dc2d312250aa234083b8c1bb9e81
Validity
Not Before: Nov 14 18:02:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=640fd261b4a842dedf0d0a2e6462758d279f0cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:ba:e8:8a:08:9b:af:d8:af:78:3b:0b:4b:
44:ec:b7:14:e8:53:5d:e4:a6:dd:49:c0:e6:5a:4f:
1f:0c:f7:d2:0d:b9:96:b7:73:ee:e4:b2:54:da:04:
89:e4:6d:54:2d:49:ca:49:b1:bd:62:5b:2c:ae:bc:
94:3c:14:51:0f:2a:70:a7:cf:29:ff:78:8f:96:c1:
cc:23:8c:78:82:48:69:73:50:64:99:7b:6d:bc:c4:
82:48:d6:76:e1:92:cb:d5:9d:7b:d2:2b:38:d5:80:
c9:ea:73:28:76:ea:8c:7e:05:94:d0:22:4f:b0:9b:
16:61:bd:c0:8e:0b:55:b5:8a:33:f5:dc:7e:15:8a:
3d:c9:3a:1b:1d:e2:fc:15:54:2c:5e:17:9b:48:fa:
f5:94:72:01:a9:53:29:60:3f:c4:3b:f2:51:81:21:
17:cb:ca:49:41:78:f8:03:8d:86:20:25:a1:75:cd:
55:7c:96:27:ad:16:a5:9f:af:14:5e:3c:e8:bc:15:
ee:1e:59:79:1d:2e:a0:b9:64:0d:10:8d:48:c2:76:
fd:9b:c4:52:0d:f1:13:43:68:f3:7b:4b:79:1c:f5:
a2:7b:4f:d2:9a:48:5a:6a:b6:d6:71:77:db:09:52:
6e:20:01:67:5c:13:4b:d0:72:64:85:13:df:7d:fc:
ca:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:0F:D2:61:B4:A8:42:DE:DF:0D:0A:2E:64:62:75:8D:27:9F:0C:AE
X509v3 Authority Key Identifier:
keyid:6F:AF:48:B0:2B:97:DC:2D:31:22:50:AA:23:40:83:B8:C1:BB:9E:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b69IsCuX3C0xIlCqI0CDuMG7noE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/ZA_SYbSoQt7fDQouZGJ1jSefDK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c230b5-4791-48d0-b887-b34d649cfb7b/1/b69IsCuX3C0xIlCqI0CDuMG7noE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:30c0:30c0::/48
Signature Algorithm: sha256WithRSAEncryption
75:ef:2c:49:b0:76:90:30:30:2e:f1:99:b1:01:ad:bd:b8:9b:
0a:72:69:06:96:87:42:f9:86:3a:7d:c4:b9:1d:79:34:e0:5e:
fc:34:92:92:18:36:80:4b:11:28:c4:75:f9:60:99:75:7f:21:
1e:e1:b3:cb:76:ee:6d:33:ae:65:a7:24:1b:3d:58:f1:24:de:
28:9d:d6:f8:07:a9:55:5b:c8:0a:39:0c:05:f3:2c:67:1a:1d:
b7:24:15:52:ce:ff:9a:17:f0:e5:c0:84:98:2c:62:e3:f5:b6:
f0:87:4b:17:df:f7:35:49:53:14:a0:8f:10:8a:49:cd:19:b2:
19:a4:c0:31:c4:d7:d9:13:09:31:0c:4e:a0:49:70:91:d1:22:
6b:dc:11:40:3b:f5:8e:bb:f7:0a:41:47:ee:eb:8d:31:70:b3:
d4:dd:9b:69:7f:c8:e5:48:d9:6b:2c:9b:df:ae:ec:46:36:43:
39:99:ba:5b:6f:b5:ad:85:3d:4d:fb:d1:7d:b0:31:5e:28:02:
62:df:74:ce:f0:7f:5f:49:f4:db:d8:86:2a:75:10:43:69:b5:
0a:05:e9:f5:82:fd:06:16:e3:bc:86:c4:bc:59:df:02:6e:54:
91:c0:ea:35:10:03:86:10:5d:cd:db:00:f9:4d:7a:7c:9f:b5:
17:31:7c:e2
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZMr1v08L4eieEWn5XbzPJ+iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmYWY0OGIwMmI5N2RjMmQzMTIyNTBhYTIzNDA4M2I4YzFi
YjllODEwHhcNMjQxMTE0MTgwMjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NDBmZDI2MWI0YTg0MmRlZGYwZDBhMmU2NDYyNzU4ZDI3OWYwY2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpe66IoIm6/Yr3g7C0tE7LcU6FNd
5KbdScDmWk8fDPfSDbmWt3Pu5LJU2gSJ5G1ULUnKSbG9YlssrryUPBRRDypwp88p
/3iPlsHMI4x4gkhpc1BkmXttvMSCSNZ24ZLL1Z170is41YDJ6nModuqMfgWU0CJP
sJsWYb3AjgtVtYoz9dx+FYo9yTobHeL8FVQsXhebSPr1lHIBqVMpYD/EO/JRgSEX
y8pJQXj4A42GICWhdc1VfJYnrRaln68UXjzovBXuHll5HS6guWQNEI1Iwnb9m8RS
DfETQ2jze0t5HPWie0/SmkhaarbWcXfbCVJuIAFnXBNL0HJkhRPfffzKeQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFGQP0mG0qELe3w0KLmRidY0nnwyuMB8GA1UdIwQY
MBaAFG+vSLArl9wtMSJQqiNAg7jBu56BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODct
YjM0ZDY0OWNmYjdiLzEvWkFfU1liU29RdDdmRFFvdVpHSjFqU2VmREs0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMjMwYjUtNDc5MS00OGQwLWI4ODctYjM0ZDY0OWNmYjdi
LzEvYjY5SXNDdVgzQzB4SWxDcUkwQ0R1TUc3bm9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEwwDDA
MA0GCSqGSIb3DQEBCwUAA4IBAQB17yxJsHaQMDAu8ZmxAa29uJsKcmkGlodC+YY6
fcS5HXk04F78NJKSGDaASxEoxHX5YJl1fyEe4bPLdu5tM65lpyQbPVjxJN4ondb4
B6lVW8gKOQwF8yxnGh23JBVSzv+aF/DlwISYLGLj9bbwh0sX3/c1SVMUoI8QiknN
GbIZpMAxxNfZEwkxDE6gSXCR0SJr3BFAO/WOu/cKQUfu640xcLPU3Ztpf8jlSNlr
LJvfruxGNkM5mbpbb7WthT1N+9F9sDFeKAJi33TO8H9fSfTb2IYqdRBDabUKBen1
gv0GFuO8hsS8Wd8CblSRwOo1EAOGEF3N2wD5TXp8n7UXMXzi
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:13:29 2024 by rpki-client on console-fra.rpki-client.org