Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/cmzucACsChWpPDEbOGHKR6uueEU.roa
File: cmzucACsChWpPDEbOGHKR6uueEU.roa (raw, json)
Hash identifier: 6T48QbeGn60RySZ4plWk72Hkv5DkD8SAURFKzwlCX6M=
Subject key identifier: 72:6C:EE:70:00:AC:0A:15:A9:3C:31:1B:38:61:CA:47:AB:AE:78:45
Certificate issuer: /CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Certificate serial: 018570FBA741C8FB42CD81176CD5D54A6308
Authority key identifier: 61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/cmzucACsChWpPDEbOGHKR6uueEU.roa
Signing time: Mon 02 Jan 2023 05:36:58 +0000
ROA not before: Mon 02 Jan 2023 05:36:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44478
IP address blocks: 194.48.218.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:a7:41:c8:fb:42:cd:81:17:6c:d5:d5:4a:63:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=613789e73c75cab6d83ab69da328fc2dffbc9082
Validity
Not Before: Jan 2 05:36:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=726cee7000ac0a15a93c311b3861ca47abae7845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:0f:38:23:1f:2a:a8:c6:53:45:4e:2e:f3:
5a:38:e0:04:fe:dc:ea:fd:a3:d5:cb:2f:4c:fd:5c:
b9:97:6c:26:ea:8f:3a:ea:2c:d4:17:67:59:13:d1:
0e:66:cf:08:76:bc:8c:31:70:b1:cf:b4:7f:5b:af:
94:ee:c9:62:1a:4b:d4:27:12:d7:f0:4e:b9:0d:e4:
51:21:4a:89:b9:13:cf:04:0c:0d:61:da:90:19:11:
49:e6:47:ab:a4:37:57:3e:d2:bd:f8:24:d8:a2:6a:
11:cf:b7:51:bd:7a:55:43:18:f7:54:f1:af:e9:bd:
8b:09:ab:96:7b:ce:38:ad:75:40:db:76:d0:10:37:
7a:10:17:e7:c0:1b:e0:60:e4:28:d6:05:11:73:29:
97:a4:7e:f6:f2:84:4a:4c:78:86:aa:ab:cd:22:11:
a0:a8:80:f8:9a:23:08:84:87:ec:83:6d:98:8b:c7:
3e:87:5b:0a:87:e3:d1:82:c2:cc:23:e4:bf:26:57:
c8:b0:5e:29:e1:3d:c1:a3:ed:77:4a:5e:77:cb:27:
4a:5a:0b:af:2f:b6:4e:bc:72:78:c5:0e:74:a7:10:
fa:b5:07:3f:63:6b:cb:f3:f8:00:fa:c0:f4:d3:d3:
e0:a0:28:ea:30:3c:a5:82:70:cf:0d:b8:61:26:cf:
0e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6C:EE:70:00:AC:0A:15:A9:3C:31:1B:38:61:CA:47:AB:AE:78:45
X509v3 Authority Key Identifier:
keyid:61:37:89:E7:3C:75:CA:B6:D8:3A:B6:9D:A3:28:FC:2D:FF:BC:90:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTeJ5zx1yrbYOradoyj8Lf-8kII.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/cmzucACsChWpPDEbOGHKR6uueEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/3bad52-9246-4709-a617-bd942371c86a/1/YTeJ5zx1yrbYOradoyj8Lf-8kII.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.218.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:ef:d1:e4:4c:b7:20:67:29:58:b5:4d:57:c2:35:ff:88:
d8:3c:05:9f:42:65:d3:14:54:30:d5:00:17:0b:6b:d6:e9:b7:
57:67:b0:2f:04:42:8b:bf:3b:98:64:a4:ea:7c:0e:25:84:1c:
f2:7b:1d:87:1f:7b:92:fc:f4:86:6b:6b:46:f8:5d:ac:0d:38:
a3:32:86:01:df:a8:58:09:2f:fa:1a:f5:17:4d:bb:15:c9:3c:
d3:67:b0:af:5b:ef:ae:30:0c:c2:53:d9:49:03:98:f5:6d:15:
72:31:f2:fd:73:27:75:10:f7:9d:62:54:c3:bb:3e:1f:e0:78:
63:15:52:60:2d:76:22:e6:0e:db:66:98:fe:10:59:8a:d8:50:
fb:70:71:3e:08:bd:6c:51:8f:4b:ce:7a:45:d6:5d:2f:d6:84:
b3:35:a5:3c:f3:d3:38:09:87:1d:a1:9e:b4:68:6f:9c:e6:13:
52:a7:f7:12:bd:80:a0:7b:58:07:3c:96:21:0b:24:b8:33:b6:
ea:1e:4a:73:24:6e:be:2b:1a:f8:cb:c0:6b:0d:6b:24:d7:b6:
28:d8:f6:1c:ff:ef:41:fd:a5:37:ab:74:85:89:5c:f8:cb:a3:
e9:4a:fd:bb:f8:22:77:e9:fb:3d:00:56:6f:57:07:3f:eb:80:
4d:66:f4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:05 2024 by rpki-client on console-fra.rpki-client.org