Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zM-FYNs3NgEP-hDSt2Dxc96Z8zA.roa
File: zM-FYNs3NgEP-hDSt2Dxc96Z8zA.roa (raw, json)
Hash identifier: LjVbXxOHZR68foKd4+yCq+IK95lvmHPJHueXnTDwEyo=
Subject key identifier: CC:CF:85:60:DB:37:36:01:0F:FA:10:D2:B7:60:F1:73:DE:99:F3:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B1E7E4E8E01AC24454288B2CEF92E918D
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zM-FYNs3NgEP-hDSt2Dxc96Z8zA.roa
Signing time: Wed 11 Oct 2023 11:27:55 +0000
ROA not before: Wed 11 Oct 2023 11:27:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.148.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 11 Oct 2023 11:35:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:7e:4e:8e:01:ac:24:45:42:88:b2:ce:f9:2e:91:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 11 11:27:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cccf8560db3736010ffa10d2b760f173de99f330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:78:2d:09:3f:bc:85:6c:ff:83:a2:71:0e:37:
5f:9f:fd:fb:eb:f5:4a:a6:1d:ce:de:cf:80:a4:2f:
5f:f4:91:7a:d0:8d:08:04:7f:ed:0f:6a:9a:7b:30:
e1:e3:2a:57:c7:94:dc:53:f7:03:e7:95:d7:0b:92:
b0:a7:1a:58:57:2c:52:59:cc:c5:56:3a:7f:c6:a9:
1e:cb:93:74:9d:96:bf:98:44:a0:ac:01:8d:50:9a:
5c:d1:6b:8a:54:b4:8d:0f:66:ed:62:ef:58:8d:d7:
9e:f8:18:13:e5:ad:23:04:b4:00:d5:0f:2d:9d:52:
e0:9a:3b:3e:82:ae:c5:1a:27:11:bc:6a:1c:5a:23:
94:dc:c5:7c:48:8e:42:01:f1:e5:1a:1c:c3:7a:8e:
f0:88:e3:73:6a:45:8a:a0:75:c5:60:34:5e:72:ba:
3b:ed:98:12:35:41:9a:1f:47:88:18:7e:ca:08:f5:
b8:ae:70:5f:9e:5f:f9:ad:44:ab:38:84:21:56:c4:
a8:96:e0:b4:20:92:bb:73:0d:d7:6a:d4:ac:b9:c3:
14:d0:a3:75:74:20:e5:85:86:50:1f:9f:c6:f9:9f:
36:43:0e:83:ad:e9:45:ef:34:77:09:dc:6c:2d:bd:
8c:c3:84:bc:f8:b5:bb:a9:37:b1:9c:f2:ab:41:94:
e0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CF:85:60:DB:37:36:01:0F:FA:10:D2:B7:60:F1:73:DE:99:F3:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zM-FYNs3NgEP-hDSt2Dxc96Z8zA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.48.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:3b:90:b1:e1:2f:fb:c4:30:16:91:3a:cf:f2:69:fd:c8:90:
2f:fd:5d:93:46:f8:e8:c9:e9:be:5f:ab:37:64:fd:1f:c7:8f:
75:62:49:11:ea:56:b5:68:d1:10:d6:18:dd:3c:40:15:d9:87:
21:31:cc:e5:37:25:4b:48:33:d3:31:b2:33:e6:0a:d0:3e:c3:
55:32:47:6e:29:b6:3a:84:91:86:93:6d:45:11:c5:c2:44:15:
3e:b2:ad:6a:8f:d1:22:ec:65:be:b4:15:42:6c:a5:fc:7d:83:
96:a0:22:38:a8:11:41:fa:75:b9:a1:58:16:e1:57:ae:ad:fa:
c9:eb:66:28:0c:6c:b0:74:a6:e5:6d:eb:c6:e2:3b:cc:ee:81:
7a:73:86:49:29:73:77:9f:64:62:bd:90:d2:f2:d4:d7:c1:bf:
cb:04:c7:56:4f:2a:e7:5a:d8:3d:56:63:ab:8b:e8:79:2c:66:
76:c1:06:b3:40:f8:02:88:82:9a:e4:c0:41:06:73:81:0f:de:
1a:c7:a4:a2:a6:fb:10:30:0a:30:6f:71:17:34:7e:66:23:04:
be:c6:ec:5c:31:96:60:2a:90:63:10:00:39:1a:5e:02:4f:f4:
63:a2:a6:b9:b7:79:d0:c9:c1:25:a6:ae:0a:cf:d2:28:ae:57:
4a:7e:4e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:22 2024 by rpki-client on console-fra.rpki-client.org