Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/ZXjNytQXOQIMmRUisxeUtSMCOlo.roa
File: ZXjNytQXOQIMmRUisxeUtSMCOlo.roa (raw, json)
Hash identifier: CPRP45xtGe8EOmHkoJActDS8LKWOyNrbyY8R4Dkrtdo=
Subject key identifier: 65:78:CD:CA:D4:17:39:02:0C:99:15:22:B3:17:94:B5:23:02:3A:5A
Certificate issuer: /CN=7626359949cecf2418c5a2db21acab85dd9193d8
Certificate serial: 01856CCAC5741AF90E0BEEE1EDFFAB7B9699
Authority key identifier: 76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/ZXjNytQXOQIMmRUisxeUtSMCOlo.roa
Signing time: Sun 01 Jan 2023 10:05:06 +0000
ROA not before: Sun 01 Jan 2023 10:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12874
IP address blocks: 193.43.16.0/24 maxlen: 24
193.43.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:c5:74:1a:f9:0e:0b:ee:e1:ed:ff:ab:7b:96:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7626359949cecf2418c5a2db21acab85dd9193d8
Validity
Not Before: Jan 1 10:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6578cdcad41739020c991522b31794b523023a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:73:80:5f:5c:a0:aa:f1:7d:da:cf:ad:0a:77:
7c:ef:ed:01:0b:fd:41:0e:6f:6d:10:30:05:1e:38:
17:de:70:ba:1e:8a:e1:45:b5:d9:35:04:ce:ef:04:
ff:42:b1:70:a6:e4:6a:8e:7e:bd:82:9e:e8:af:45:
35:d4:43:d7:b4:a5:6b:5d:55:ed:b1:93:9e:f0:77:
1d:6c:9a:83:c2:e2:c3:61:78:17:f3:9e:f2:46:8f:
84:20:6b:dc:9a:02:15:46:21:7d:ed:f2:37:6f:f4:
cb:66:cc:7a:32:10:ee:7f:10:bc:e7:1b:d4:b3:7b:
d4:0b:b7:90:f0:65:cd:48:64:61:aa:69:f8:87:a6:
9c:4c:13:28:b2:93:99:b6:35:d1:53:e8:90:dd:37:
49:82:ed:2f:23:1d:ac:52:9c:17:15:75:57:11:bd:
36:b7:8a:dc:b3:3e:fb:c1:1f:d5:11:00:77:2f:df:
0d:8b:0d:fb:0d:1b:1d:5c:83:25:c9:c2:05:9c:aa:
fa:0f:2f:6b:82:7f:0f:a1:79:b1:14:b1:60:56:e5:
15:9a:2b:26:a5:88:ca:3c:e0:5b:a6:3e:99:d7:36:
95:89:32:41:e4:c0:2d:63:88:dc:47:17:7e:22:71:
48:8d:1b:0b:13:40:c8:10:6a:c6:f7:a9:8b:01:69:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:78:CD:CA:D4:17:39:02:0C:99:15:22:B3:17:94:B5:23:02:3A:5A
X509v3 Authority Key Identifier:
keyid:76:26:35:99:49:CE:CF:24:18:C5:A2:DB:21:AC:AB:85:DD:91:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diY1mUnOzyQYxaLbIayrhd2Rk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/ZXjNytQXOQIMmRUisxeUtSMCOlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c3c13e-8f61-4dfe-952c-c804083e7d49/1/diY1mUnOzyQYxaLbIayrhd2Rk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.16.0/23
Signature Algorithm: sha256WithRSAEncryption
52:db:3c:b8:af:5b:08:29:80:45:a8:18:91:b6:c8:9e:30:86:
29:a3:ed:f0:ce:37:a6:ac:79:3b:0c:13:2b:ff:d1:cd:8f:05:
f1:b0:46:7e:31:a5:0e:e2:08:34:96:6b:26:04:43:b3:a5:60:
ee:1d:7d:b4:2b:b5:57:77:0f:75:ca:9b:d5:1e:e0:fe:c4:c7:
e6:de:49:ad:ea:d1:69:80:59:cd:c1:ca:d7:b1:34:b6:2b:3e:
fa:92:c8:98:5d:5a:74:5c:31:61:45:e9:ff:a2:8d:cc:d6:e5:
89:a2:b1:86:32:71:35:16:19:1b:93:60:9e:f2:d9:00:2c:63:
3c:4f:f1:e3:5c:88:2c:59:3c:74:05:e2:a1:a9:01:dc:17:61:
01:ca:f2:5c:fa:f0:9c:6f:ca:25:e5:45:c9:c2:44:b7:b2:8b:
e9:e4:70:f1:70:4b:81:dc:0c:83:9e:ee:6f:b1:3c:87:34:60:
af:30:c1:19:95:ed:1d:c7:50:de:e5:9d:54:be:7b:29:f4:cd:
9d:ac:fb:00:d0:b4:2e:85:14:b4:a2:59:8d:6b:d9:5f:8c:e1:
48:53:f4:13:7c:ae:47:e6:55:d4:39:6f:4b:10:51:0b:d7:78:
c2:45:0f:66:90:44:90:0b:f7:9e:2a:8f:8e:af:6f:2d:9e:ef:
73:5f:bc:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:01 2024 by rpki-client on console-fra.rpki-client.org