Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/cz7dY1GflDmEr73Q9MQHQ_QATBM.roa
File: cz7dY1GflDmEr73Q9MQHQ_QATBM.roa (raw, json)
Hash identifier: mVZEs4j4THqwP3XHbj1Us5TPD7PQllPVQulWzYWEmGc=
Subject key identifier: 73:3E:DD:63:51:9F:94:39:84:AF:BD:D0:F4:C4:07:43:F4:00:4C:13
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 018571D7A563C72CA8D433A1346559215BAB
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/cz7dY1GflDmEr73Q9MQHQ_QATBM.roa
Signing time: Mon 02 Jan 2023 09:37:16 +0000
ROA not before: Mon 02 Jan 2023 09:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21183
IP address blocks: 193.254.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:a5:63:c7:2c:a8:d4:33:a1:34:65:59:21:5b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jan 2 09:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=733edd63519f943984afbdd0f4c40743f4004c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:2e:be:2c:4c:d4:c3:27:cc:5b:49:f6:b0:
08:58:08:c5:46:60:12:f3:89:ff:02:d1:c0:17:5e:
b7:0b:e9:82:48:b2:fc:cb:76:5f:2b:e3:d6:37:dd:
c0:17:9b:cc:76:56:15:76:99:61:33:40:d9:4b:6b:
df:4e:18:55:ac:ed:9c:6f:bc:78:cb:ba:f7:51:03:
6c:1c:c9:43:98:6e:be:1b:4b:a1:a7:d5:6d:cc:bb:
ca:67:f0:c8:83:75:d4:22:00:94:37:92:cc:c5:23:
bf:a4:32:c3:e3:3d:00:ab:bd:e5:71:23:91:6c:b1:
62:cf:dc:ae:8b:4e:fa:fb:c6:a8:90:fe:25:d5:01:
0f:9b:69:76:65:5a:f6:fb:fa:64:5b:91:a6:08:34:
ad:50:b3:4c:61:b2:97:53:17:39:08:8a:6c:28:cd:
d2:e0:2f:fc:98:ee:ed:6f:c1:75:04:29:65:50:d2:
a4:9d:08:46:33:a3:88:6e:45:51:f0:26:d7:5c:6d:
62:25:88:64:28:6f:ba:c6:97:83:4a:33:7d:5e:a1:
13:b6:e2:29:b6:54:9e:38:69:70:c6:6f:3b:e5:fb:
fb:42:6a:6e:4b:5d:19:8b:2a:9f:87:c4:33:e9:f5:
c0:ad:0b:07:3e:41:be:e6:4c:3a:ff:a5:2b:60:30:
52:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3E:DD:63:51:9F:94:39:84:AF:BD:D0:F4:C4:07:43:F4:00:4C:13
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/cz7dY1GflDmEr73Q9MQHQ_QATBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.254.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:52:16:8a:37:5b:c3:6b:03:1b:74:74:61:90:a7:bd:4f:ca:
4c:42:f5:ec:ff:57:65:3a:fa:ab:cf:49:ad:ce:bb:6b:a0:a5:
80:22:8d:7f:ab:69:dc:be:cf:4b:03:24:e9:2c:ae:91:80:7e:
c7:79:c3:ee:25:8e:99:51:3b:fd:65:5b:96:28:28:f0:1d:34:
04:f7:4a:de:5d:8b:33:24:1e:38:72:89:85:7c:7c:96:70:83:
28:7b:cd:74:fd:9d:40:7c:14:6f:a0:81:ce:05:a3:90:82:77:
e2:a2:23:22:88:9e:8e:30:73:b4:d3:6d:2c:ca:de:6b:04:5e:
dc:22:25:3f:0a:04:41:67:a3:c6:18:bd:4c:33:c6:d1:49:46:
39:f5:ea:7e:3b:26:94:14:29:43:45:53:57:2b:39:da:8c:5f:
de:fe:80:68:cd:7c:3b:ec:73:aa:0f:ab:b1:df:d3:bd:52:ee:
4a:6f:2d:c4:8e:bf:53:49:18:22:8d:06:de:0b:3b:a7:26:79:
62:fb:3f:25:9e:47:5b:0b:c8:4b:8a:de:2e:a7:ae:c6:52:9e:
0a:90:f4:c4:36:da:43:da:7b:60:bf:d1:c6:93:8b:e4:9b:a9:
9c:f9:5a:a8:79:e3:62:93:be:94:a3:1b:2b:5f:1b:31:c1:2c:
bf:2c:b1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:13 2024 by rpki-client on console-ams.rpki-client.org