Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/Dzt-KhjMUpBGmjiY4voT_QJyZpc.roa
File: Dzt-KhjMUpBGmjiY4voT_QJyZpc.roa (raw, json)
Hash identifier: Wj6qTufBZe49KRbw8QwBwHV7I0Ap31BwJ0gUSlggVoo=
Subject key identifier: 0F:3B:7E:2A:18:CC:52:90:46:9A:38:98:E2:FA:13:FD:02:72:66:97
Certificate issuer: /CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Certificate serial: 0191B4DE23BFB4A82A90EA0A40DB205B040B
Authority key identifier: E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/Dzt-KhjMUpBGmjiY4voT_QJyZpc.roa
Signing time: Mon 02 Sep 2024 22:32:22 +0000
ROA not before: Mon 02 Sep 2024 22:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199681
IP address blocks: 2a14:6980:30::/44 maxlen: 48
2a14:6980:30::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 04 Sep 2024 10:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b4:de:23:bf:b4:a8:2a:90:ea:0a:40:db:20:5b:04:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e099ee07822ef2ace9c356f7b42caeaff25c9692
Validity
Not Before: Sep 2 22:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f3b7e2a18cc5290469a3898e2fa13fd02726697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0d:8f:d3:11:2a:86:7f:80:de:e1:9f:53:de:
ff:66:31:b7:8b:0c:be:dd:a6:e9:71:52:ef:ac:0b:
88:11:ad:c0:f4:20:c2:6d:37:5b:f6:09:9a:2c:79:
85:66:38:c6:38:cf:6a:b5:2f:5b:1c:4c:56:74:5c:
6e:92:93:28:24:d7:03:78:9f:07:55:d4:ec:ad:07:
4b:2f:5d:70:40:2e:9b:a3:ba:b7:54:bc:54:13:68:
02:1a:35:85:71:6b:46:79:61:cd:51:00:1f:1b:bf:
2c:08:8b:19:c5:fd:35:8b:3e:97:af:4f:09:00:08:
c0:d3:d5:f7:85:d7:73:d7:3e:5d:e8:04:2e:2b:97:
d2:92:a5:36:ee:c9:66:3a:80:0f:ec:b5:21:5d:d9:
bc:45:7c:12:11:4b:3c:e7:50:95:db:f9:40:1c:89:
2f:26:75:8a:5d:62:11:cf:ef:cb:bc:cb:18:3c:c1:
b2:69:97:30:9e:82:f5:16:f2:86:15:9d:cf:3d:4e:
f2:b0:e2:98:a9:27:ad:45:ec:7c:1c:c0:3a:08:38:
f0:9d:1e:a5:86:09:87:d6:dc:56:99:ea:a1:ab:1a:
ae:da:8f:90:a1:c6:fe:82:ca:6d:e3:e1:f7:4e:ca:
72:39:05:fa:46:b7:53:f4:a3:30:f0:55:01:a0:f2:
b2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:3B:7E:2A:18:CC:52:90:46:9A:38:98:E2:FA:13:FD:02:72:66:97
X509v3 Authority Key Identifier:
keyid:E0:99:EE:07:82:2E:F2:AC:E9:C3:56:F7:B4:2C:AE:AF:F2:5C:96:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JnuB4Iu8qzpw1b3tCyur_JclpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/Dzt-KhjMUpBGmjiY4voT_QJyZpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/9732bb-f590-4194-85be-d069f17602b6/1/4JnuB4Iu8qzpw1b3tCyur_JclpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:6980:30::/44
Signature Algorithm: sha256WithRSAEncryption
3c:03:39:c6:7b:78:ac:7c:63:ae:11:cd:e7:11:5a:7d:6b:f1:
85:f5:98:83:6c:7e:82:6c:6a:28:63:f7:34:17:05:36:91:e0:
22:d0:a4:ea:7f:51:e3:ef:87:0c:dc:78:5c:18:11:00:5a:38:
3d:95:d5:c4:a1:af:68:9e:4e:22:cf:98:89:c7:e4:6a:36:bf:
88:ce:b3:2b:92:b0:d0:92:0a:93:5c:c7:72:13:90:b3:90:f4:
9a:66:55:b4:af:7e:d2:17:be:10:85:85:f6:e9:76:13:ee:84:
e7:ce:52:c5:2f:19:8e:85:97:3e:3e:53:b6:ad:99:f3:75:06:
9c:7e:c5:3e:29:40:c6:e1:4c:8c:3d:d3:ec:7a:db:91:42:03:
3c:63:45:4b:47:bb:c0:77:02:98:02:0a:b6:aa:59:e8:d4:73:
48:fc:13:18:d1:50:a5:be:4e:ff:9c:ac:48:a7:8c:19:36:3c:
74:3b:13:06:25:80:b5:87:7a:b5:b0:32:7b:09:22:52:12:29:
3f:76:c6:60:96:94:02:ac:a6:db:8e:71:8d:f0:cd:ab:c9:e7:
79:ed:fe:27:e5:a8:6f:49:0d:cf:66:48:73:61:97:96:32:26:
b6:b3:47:a1:03:34:52:04:f4:b6:47:83:d0:0c:8e:21:39:2f:
c0:09:d4:36
-----BEGIN CERTIFICATE-----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Generated at Wed Sep 4 13:10:43 2024 by rpki-client on console-ams.rpki-client.org