Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ZjP_1N35QOjIWzxUKGc_1ne7JSs.roa
File: ZjP_1N35QOjIWzxUKGc_1ne7JSs.roa (raw, json)
Hash identifier: s1mL19K5qYdq4YOEwn1EpJPzxC0w451kDbI+xV0neDc=
Subject key identifier: 66:33:FF:D4:DD:F9:40:E8:C8:5B:3C:54:28:67:3F:D6:77:BB:25:2B
Certificate issuer: /CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Certificate serial: 018D30D21927AF43A07C23A782F7C9223AC4
Authority key identifier: 50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ZjP_1N35QOjIWzxUKGc_1ne7JSs.roa
Signing time: Mon 22 Jan 2024 10:58:11 +0000
ROA not before: Mon 22 Jan 2024 10:58:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198571
IP address blocks: 2a0c:580::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 24 Jan 2024 14:06:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:30:d2:19:27:af:43:a0:7c:23:a7:82:f7:c9:22:3a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50592e68895c7068b4655508917ad5bbddbd0a5f
Validity
Not Before: Jan 22 10:58:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6633ffd4ddf940e8c85b3c5428673fd677bb252b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:bd:c5:fb:e9:bc:a7:95:f8:08:4b:16:07:93:
50:1f:10:7c:02:89:36:ba:6e:61:4e:16:3e:6f:3b:
f7:3a:64:ad:19:28:16:44:ab:be:9c:f0:96:a1:dc:
c2:92:b5:3d:a7:aa:2e:cd:58:98:48:e5:12:8e:c5:
ba:42:12:46:d0:56:22:bc:f9:9b:a7:a2:25:ea:47:
bd:ec:12:8a:df:18:7c:b7:99:a6:a3:45:f0:b2:97:
a5:f5:3d:01:21:60:74:da:c0:e0:0f:66:22:e8:47:
10:9e:84:b5:b6:10:ff:8c:5b:4c:38:63:da:c7:9d:
29:32:e2:a1:41:a0:cb:ef:cb:21:a1:65:f2:b1:3b:
05:a4:9c:7d:20:a6:a5:13:9f:98:88:41:57:fd:98:
27:b0:d0:d4:a8:47:27:73:ae:ff:04:4d:26:fd:6d:
64:65:a2:c2:14:e4:30:c4:38:56:7e:0c:9f:51:49:
aa:c1:fb:67:ef:e5:27:0f:24:d0:b6:20:2b:6b:ef:
0b:d7:d5:c1:0a:0b:e6:77:ef:cf:16:95:c5:4f:ff:
cf:fe:60:94:90:a1:10:a4:dc:20:21:2a:98:87:ed:
a5:3e:70:57:6d:30:f7:e1:7f:d8:2c:87:08:a6:c0:
49:c2:37:2a:5b:f6:5b:fd:d5:b9:68:8d:0a:df:f0:
f3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:33:FF:D4:DD:F9:40:E8:C8:5B:3C:54:28:67:3F:D6:77:BB:25:2B
X509v3 Authority Key Identifier:
keyid:50:59:2E:68:89:5C:70:68:B4:65:55:08:91:7A:D5:BB:DD:BD:0A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFkuaIlccGi0ZVUIkXrVu929Cl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/ZjP_1N35QOjIWzxUKGc_1ne7JSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2a8100-172b-48e3-a32a-7bbd28ce4a75/1/UFkuaIlccGi0ZVUIkXrVu929Cl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:580::/29
Signature Algorithm: sha256WithRSAEncryption
53:b8:0d:8f:77:a3:21:3c:fa:ee:b5:bc:84:3a:b8:e7:fc:7d:
4c:dc:a6:a1:48:aa:30:a1:79:8c:85:77:24:5e:81:ae:28:64:
48:61:69:9d:6a:8b:7e:17:22:08:ea:05:c8:7c:bd:6f:ea:89:
ee:03:64:40:f4:02:86:ed:bf:b0:83:7c:64:30:10:a4:7e:70:
09:aa:ba:8d:2d:db:b4:34:3e:c4:68:eb:42:a2:06:e7:1d:ef:
3e:f3:0c:ee:d0:ad:ad:81:d9:09:e9:02:f7:73:dd:f7:ed:f5:
69:91:a8:6a:07:c7:8e:2e:cb:6f:48:e1:1a:18:c9:51:fd:7b:
fb:64:93:31:fc:81:dc:88:35:9d:4b:f9:89:98:dc:dc:e6:c1:
5d:75:0f:ab:12:f9:5b:25:7b:60:e7:76:1c:ec:e2:ce:fe:25:
65:fc:3b:02:90:35:44:21:ca:de:25:ba:40:d1:91:f9:a6:5f:
cc:c7:5d:c6:b2:96:aa:25:27:f3:5b:4e:17:6f:b1:22:2b:75:
9b:ef:13:f0:d6:d7:b3:77:36:bb:ac:c2:8b:4e:de:17:64:20:
90:7b:5e:44:1a:2c:1f:5b:9b:c0:96:94:4b:8f:95:b2:5c:64:
e2:74:8f:44:05:5b:26:90:a5:d1:6c:1d:13:0d:8c:7c:a1:2e:
27:f2:cd:b8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY0w0hknr0OgfCOngvfJIjrEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTkyZTY4ODk1YzcwNjhiNDY1NTUwODkxN2FkNWJiZGRi
ZDBhNWYwHhcNMjQwMTIyMTA1ODExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjMzZmZkNGRkZjk0MGU4Yzg1YjNjNTQyODY3M2ZkNjc3YmIyNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA273F++m8p5X4CEsWB5NQHxB8Aok2
um5hThY+bzv3OmStGSgWRKu+nPCWodzCkrU9p6ouzViYSOUSjsW6QhJG0FYivPmb
p6Il6ke97BKK3xh8t5mmo0Xwspel9T0BIWB02sDgD2Yi6EcQnoS1thD/jFtMOGPa
x50pMuKhQaDL78shoWXysTsFpJx9IKalE5+YiEFX/ZgnsNDUqEcnc67/BE0m/W1k
ZaLCFOQwxDhWfgyfUUmqwftn7+UnDyTQtiAra+8L19XBCgvmd+/PFpXFT//P/mCU
kKEQpNwgISqYh+2lPnBXbTD34X/YLIcIpsBJwjcqW/Zb/dW5aI0K3/DzjwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFGYz/9Td+UDoyFs8VChnP9Z3uyUrMB8GA1UdIwQY
MBaAFFBZLmiJXHBotGVVCJF61bvdvQpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEt
N2JiZDI4Y2U0YTc1LzEvWmpQXzFOMzVRT2pJV3p4VUtHY18xbmU3SlNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yYTgxMDAtMTcyYi00OGUzLWEzMmEtN2JiZDI4Y2U0YTc1
LzEvVUZrdWFJbGNjR2kwWlZVSWtYclZ1OTI5Q2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKgwFgDAN
BgkqhkiG9w0BAQsFAAOCAQEAU7gNj3ejITz67rW8hDq45/x9TNymoUiqMKF5jIV3
JF6BrihkSGFpnWqLfhciCOoFyHy9b+qJ7gNkQPQChu2/sIN8ZDAQpH5wCaq6jS3b
tDQ+xGjrQqIG5x3vPvMM7tCtrYHZCekC93Pd9+31aZGoagfHji7Lb0jhGhjJUf17
+2STMfyB3Ig1nUv5iZjc3ObBXXUPqxL5WyV7YOd2HOzizv4lZfw7ApA1RCHK3iW6
QNGR+aZfzMddxrKWqiUn81tOF2+xIit1m+8T8NbXs3c2u6zCi07eF2QgkHteRBos
H1ubwJaUS4+Vslxk4nSPRAVbJpCl0WwdEw2MfKEuJ/LNuA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:52 2024 by rpki-client on console-ams.rpki-client.org