Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SrxAgQKTIFzD3A2xpb--HC7045g.roa
File: SrxAgQKTIFzD3A2xpb--HC7045g.roa (raw, json)
Hash identifier: yRM9hRWTzcdO22OoWx7W8GWbviR8EThcPuHA5zYbwcI=
Subject key identifier: 4A:BC:40:81:02:93:20:5C:C3:DC:0D:B1:A5:BF:BE:1C:2E:F4:E3:98
Certificate issuer: /CN=66e92c341e769443fde1d27566044b4b65159060
Certificate serial: 01857094F84EAEB9026D69036ADCF21F98B3
Authority key identifier: 66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SrxAgQKTIFzD3A2xpb--HC7045g.roa
Signing time: Mon 02 Jan 2023 03:44:49 +0000
ROA not before: Mon 02 Jan 2023 03:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202797
IP address blocks: 193.22.106.0/24 maxlen: 24
193.22.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:94:f8:4e:ae:b9:02:6d:69:03:6a:dc:f2:1f:98:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66e92c341e769443fde1d27566044b4b65159060
Validity
Not Before: Jan 2 03:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4abc40810293205cc3dc0db1a5bfbe1c2ef4e398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:d7:d0:30:e2:13:8b:42:dd:1e:5f:c3:62:
2a:a8:bd:85:b5:32:f1:26:9c:61:8a:46:33:b8:1b:
ce:9a:51:2d:64:6a:fa:9f:96:27:c9:d5:04:ad:b4:
93:3d:9e:ad:3b:5a:57:3e:6c:07:d3:0d:0e:e7:ef:
1a:ab:55:54:71:c6:67:a6:39:bb:29:ce:f4:1e:4e:
65:2c:d2:4a:e0:65:51:24:37:14:ed:87:8d:91:50:
2b:99:c0:81:aa:77:cd:20:71:4c:fb:ce:7f:2c:94:
16:5d:bd:f9:20:d5:1f:76:b5:a5:ca:24:8a:c0:f3:
65:31:20:c2:7e:f0:c1:4a:40:a9:a0:31:84:03:cf:
b0:64:3c:fb:65:5a:88:99:8e:a4:1c:ec:2d:94:0d:
a3:4b:5f:c9:0f:29:a3:1c:d9:26:37:84:e6:0c:25:
24:13:59:42:60:eb:e3:57:5b:de:b7:70:f0:79:b3:
33:95:6c:dc:e8:30:7f:3d:0d:db:43:85:31:97:6b:
70:e3:a4:1a:5d:6d:a9:82:99:4a:b9:e3:48:78:7c:
65:39:b8:f5:f5:2a:50:27:54:ec:1b:62:32:44:31:
a9:f5:de:5d:b5:66:8e:36:84:8c:02:73:d5:9c:52:
52:30:49:73:44:ae:21:fc:9b:54:ad:82:16:9d:12:
15:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BC:40:81:02:93:20:5C:C3:DC:0D:B1:A5:BF:BE:1C:2E:F4:E3:98
X509v3 Authority Key Identifier:
keyid:66:E9:2C:34:1E:76:94:43:FD:E1:D2:75:66:04:4B:4B:65:15:90:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZuksNB52lEP94dJ1ZgRLS2UVkGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/SrxAgQKTIFzD3A2xpb--HC7045g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/8f1968-a79a-4a07-ace6-c1d296f8fd07/1/ZuksNB52lEP94dJ1ZgRLS2UVkGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.1.0/24
193.22.106.0/24
Signature Algorithm: sha256WithRSAEncryption
69:58:0b:34:95:d9:6b:a1:74:d5:af:f3:64:11:19:a1:31:8a:
4a:4b:c4:e5:41:4e:ce:8a:be:5c:aa:cc:66:cd:91:20:56:a2:
1d:41:d9:1e:45:45:a8:38:33:c4:19:f1:27:67:00:cf:9d:f4:
f0:3b:22:73:84:39:7b:e8:86:72:a0:4c:2f:88:07:d8:73:08:
bc:58:23:ab:4f:d8:66:b2:bd:39:56:6e:8f:1f:3a:d5:40:dd:
53:f9:94:4d:15:7a:44:ce:b1:d8:cb:b7:cc:f6:35:dd:ba:da:
48:1f:51:95:50:ec:a8:cd:d1:1b:f8:2a:7e:e6:0a:43:d5:09:
83:af:0f:73:d7:8d:1a:29:11:86:e2:5b:b0:73:bd:12:84:32:
bf:a9:a6:62:b5:48:d0:62:11:db:77:80:5e:e6:04:d9:f2:41:
6a:e1:cc:3b:c2:86:56:c7:dd:7a:3e:6a:cc:a4:d8:cb:6c:87:
6b:55:55:08:73:a9:43:de:ca:b4:e5:80:65:30:b1:5d:a4:7d:
2c:b8:fd:97:d1:57:82:19:23:f3:ae:23:84:36:43:02:38:0c:
89:d0:d1:21:b6:ef:a6:7d:82:a4:38:d1:db:ef:31:9c:14:cd:
95:2c:cf:9b:e1:04:6b:a0:56:e8:f6:c9:65:61:16:27:49:c8:
90:e4:a5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-fra.rpki-client.org