Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/ZYOlNwUIccVGDmuFziThXvsAsuk.roa
File: ZYOlNwUIccVGDmuFziThXvsAsuk.roa (raw, json)
Hash identifier: XjRdNZHunW+IihxCMNylGsYF4QIvdNr5TNwh/dneLvg=
Subject key identifier: 65:83:A5:37:05:08:71:C5:46:0E:6B:85:CE:24:E1:5E:FB:00:B2:E9
Certificate issuer: /CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Certificate serial: 01856F38F6633EBFB009E33347A1687CEAA4
Authority key identifier: A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/ZYOlNwUIccVGDmuFziThXvsAsuk.roa
Signing time: Sun 01 Jan 2023 21:24:42 +0000
ROA not before: Sun 01 Jan 2023 21:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203229
IP address blocks: 193.162.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:38:f6:63:3e:bf:b0:09:e3:33:47:a1:68:7c:ea:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76b7b9f7fd66943927c60dcf1212ddc07df0523
Validity
Not Before: Jan 1 21:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6583a537050871c5460e6b85ce24e15efb00b2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:54:15:4b:ff:a6:42:7e:a2:32:81:05:ee:ff:
f2:40:eb:c2:15:3d:9d:a5:fb:af:00:60:3a:9e:7b:
3d:fe:62:25:d8:fd:86:39:15:e2:fe:fe:99:7e:94:
90:35:06:2f:2b:de:11:f8:f2:b5:2c:c5:ab:01:b1:
59:1d:7b:52:2e:32:9d:b0:84:50:4c:94:c2:a3:9d:
56:06:4c:6e:0b:aa:0f:07:63:9c:8f:dd:74:8c:06:
99:90:f6:06:ba:57:c4:e7:d0:18:2d:1a:28:5f:88:
39:9d:33:c8:fd:97:cc:0b:88:af:53:43:c4:58:6c:
35:c7:e4:37:6d:67:a7:a3:fa:93:85:8f:36:78:a1:
08:74:1d:fa:dd:0a:81:cf:34:95:82:8e:53:ef:c4:
74:0b:24:56:9b:9d:35:8a:ba:9e:c4:55:4a:3f:f7:
52:63:9b:bf:57:85:41:b4:d9:38:ae:ea:cc:54:6e:
35:7c:f8:a8:4c:99:00:1b:80:a7:f3:d1:f6:a8:f4:
a7:bd:64:0f:80:2b:47:43:db:00:f7:e0:d1:c1:00:
44:a0:eb:92:a1:1c:77:9a:0b:76:96:28:d0:31:cd:
a3:0b:3b:0c:30:37:c0:31:82:ac:50:29:2e:5f:17:
e5:51:86:29:ee:8a:8f:7f:2f:48:f3:d8:af:87:02:
27:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:83:A5:37:05:08:71:C5:46:0E:6B:85:CE:24:E1:5E:FB:00:B2:E9
X509v3 Authority Key Identifier:
keyid:A7:6B:7B:9F:7F:D6:69:43:92:7C:60:DC:F1:21:2D:DC:07:DF:05:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2t7n3_WaUOSfGDc8SEt3AffBSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/ZYOlNwUIccVGDmuFziThXvsAsuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/985be9-9781-4fda-b7f3-0df07a908fbf/1/p2t7n3_WaUOSfGDc8SEt3AffBSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.162.129.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:07:47:45:cd:bd:dd:0c:3a:8b:04:49:44:20:a5:9f:f5:80:
a2:78:d4:ff:f2:46:06:7f:b8:b9:25:19:3e:13:1b:5c:e9:89:
f9:48:71:75:2c:9f:16:ff:25:0b:f1:f9:17:dc:a3:8b:2b:1c:
c8:30:4d:99:92:98:f9:ee:fe:d8:cf:93:74:26:ca:92:97:be:
76:e5:03:f7:7a:95:9c:f3:a6:31:d8:64:29:93:b3:1b:5d:0b:
06:61:43:f1:04:87:c5:d2:28:4a:05:d6:69:6c:1e:7e:10:77:
92:0a:34:c6:26:8d:eb:4c:a2:e4:4b:35:aa:5a:54:fc:73:2a:
6e:3a:da:da:eb:8e:b9:b0:54:a4:a8:2e:cd:5e:9f:c2:22:eb:
3e:0b:86:d3:d2:64:c9:23:ad:4f:db:38:7f:b0:4e:3c:fb:85:
b0:3c:43:13:47:42:bf:ea:37:02:f9:7c:0c:56:10:9e:e9:e9:
62:e8:3c:40:c9:91:f4:e0:d3:4a:67:f9:f7:d4:da:07:71:67:
de:72:ae:45:82:36:b1:e6:dc:22:7b:56:f2:0f:ac:a0:98:60:
db:77:ba:d0:a5:80:be:dc:bb:d9:b3:43:72:4b:47:03:61:f5:
59:b5:43:df:e5:66:a6:4a:c5:a5:37:99:5f:12:10:98:0a:7a:
97:c1:a3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:39 2024 by rpki-client on console-ams.rpki-client.org