Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/Zq8Y6jndBfVKlm-Wk64Jm4e3Nb8.roa
File: Zq8Y6jndBfVKlm-Wk64Jm4e3Nb8.roa (raw, json)
Hash identifier: 5TuGIIFUaLYVXTuBmHFwF0QSh95zCll88PkvPAZjZSo=
Subject key identifier: 66:AF:18:EA:39:DD:05:F5:4A:96:6F:96:93:AE:09:9B:87:B7:35:BF
Certificate issuer: /CN=0cab42239ba94485b310b5515dccc7feed92205c
Certificate serial: 01856BCA1104DC5BD009ED36EEA6200A09A6
Authority key identifier: 0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/Zq8Y6jndBfVKlm-Wk64Jm4e3Nb8.roa
Signing time: Sun 01 Jan 2023 05:24:42 +0000
ROA not before: Sun 01 Jan 2023 05:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51364
IP address blocks: 193.142.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ca:11:04:dc:5b:d0:09:ed:36:ee:a6:20:0a:09:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cab42239ba94485b310b5515dccc7feed92205c
Validity
Not Before: Jan 1 05:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66af18ea39dd05f54a966f9693ae099b87b735bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:77:a5:c9:a6:67:88:d1:1f:9c:65:99:e7:
fd:ed:14:c5:6a:7c:66:57:bf:3a:76:7b:87:90:0c:
3d:2a:62:81:15:e9:59:c3:2c:3d:7d:b1:1b:ee:61:
eb:cf:b3:75:d0:93:ac:e6:7c:3b:3b:1e:1f:9a:94:
30:e8:91:53:f4:26:73:6d:03:07:ff:56:41:24:27:
fb:ad:ff:96:a4:10:22:06:68:c8:b1:07:e3:5d:f0:
81:11:a5:21:fd:15:7a:f9:f6:37:27:0d:6d:01:e6:
2e:da:75:47:6f:09:aa:01:ae:66:ae:58:da:24:4b:
d5:20:49:42:07:df:04:bc:cb:43:15:47:c4:d4:f8:
db:75:0a:2f:a9:84:0f:9c:15:24:ba:a9:89:81:e1:
7d:2e:21:70:ef:52:f3:fd:4a:a2:86:d5:32:34:8a:
fd:87:e2:bd:ba:12:3a:72:5b:63:7c:19:a7:e2:3c:
af:71:b4:7e:e2:b4:97:57:f0:db:92:09:f6:a5:6b:
4d:43:8c:42:25:bc:73:db:7f:8d:8b:54:d3:f1:0d:
6d:6c:c3:da:71:68:27:59:02:45:0c:9f:1e:15:d4:
65:3b:2b:d3:5f:16:10:e8:84:cf:1e:ed:9a:61:fa:
fd:1e:50:10:f2:85:94:2e:82:85:53:cb:1f:56:d5:
4a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AF:18:EA:39:DD:05:F5:4A:96:6F:96:93:AE:09:9B:87:B7:35:BF
X509v3 Authority Key Identifier:
keyid:0C:AB:42:23:9B:A9:44:85:B3:10:B5:51:5D:CC:C7:FE:ED:92:20:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKtCI5upRIWzELVRXczH_u2SIFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/Zq8Y6jndBfVKlm-Wk64Jm4e3Nb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/aab62e-408c-483d-95fa-cc119d277148/1/DKtCI5upRIWzELVRXczH_u2SIFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.127.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:83:96:3e:f7:2d:66:5f:1b:90:5b:95:f4:8e:87:4e:84:36:
79:ff:e4:47:c8:52:8e:9f:b2:a2:29:31:84:4c:e3:61:23:49:
a0:a0:bb:d2:c1:a8:46:de:71:18:9a:a3:ee:83:6f:88:7b:c4:
29:76:24:a3:a2:e9:f8:c2:7d:00:80:67:93:25:1d:86:19:08:
42:2a:fe:a5:bf:c0:14:3b:62:ca:50:f7:52:97:95:f1:f5:d1:
75:24:9a:3e:36:e5:bf:ca:74:a6:85:95:e0:1d:d7:7e:33:7e:
34:d0:98:24:79:e4:10:f3:00:f3:6d:b1:6a:3c:db:a7:0d:37:
4a:0c:c5:da:e0:8b:e9:75:42:58:fc:42:1c:f5:e3:a3:0f:40:
e3:26:15:bd:64:11:3e:a3:77:e0:27:7d:da:24:06:08:ba:e8:
56:36:3f:47:6d:15:2b:76:bb:6f:21:2b:9a:f4:b2:25:60:dc:
d6:7d:d7:06:af:5e:40:99:ff:aa:b6:35:61:39:88:6e:49:d0:
32:be:25:5f:d5:38:11:62:5f:a4:19:05:32:cd:52:27:94:4c:
87:a1:77:da:33:f3:77:4b:11:94:1e:25:95:fd:f7:ad:86:06:
4a:d6:7d:65:93:44:29:90:f8:d9:a2:56:29:e8:e1:44:d6:c0:
03:a6:db:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:04 2024 by rpki-client on console-fra.rpki-client.org