Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/zQa--7NekSiJr6uWL7l_0VHYNF4.roa
File: zQa--7NekSiJr6uWL7l_0VHYNF4.roa (raw, json)
Hash identifier: t2tlaay9g8JjK8W8rlSWc5c5pOfkMFtPiFySchbj0yk=
Subject key identifier: CD:06:BE:FB:B3:5E:91:28:89:AF:AB:96:2F:B9:7F:D1:51:D8:34:5E
Certificate issuer: /CN=fba0a564634f42e82cf38388991c9e7e40052a20
Certificate serial: 0185704BF10093170C5E9F851D5F9F32AE5C
Authority key identifier: FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/zQa--7NekSiJr6uWL7l_0VHYNF4.roa
Signing time: Mon 02 Jan 2023 02:25:03 +0000
ROA not before: Mon 02 Jan 2023 02:25:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:f1:00:93:17:0c:5e:9f:85:1d:5f:9f:32:ae:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0a564634f42e82cf38388991c9e7e40052a20
Validity
Not Before: Jan 2 02:25:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd06befbb35e912889afab962fb97fd151d8345e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:c2:d4:ae:4a:b3:77:e4:e5:06:fd:b7:e6:
3b:fb:83:e9:9b:20:81:9f:d6:b7:f6:59:92:6b:4f:
d8:3e:2f:b6:f4:5b:7b:e7:77:e4:44:e7:c5:58:d7:
dc:15:9f:c2:5e:d6:e5:6a:24:36:ff:52:99:07:55:
93:59:e1:cb:76:a7:60:7d:21:e2:7e:35:0a:d0:92:
cf:74:41:af:61:43:09:02:98:b5:3d:23:f5:9b:40:
f5:5f:23:9b:74:32:d9:ed:f8:28:20:67:64:ff:54:
c5:bd:88:71:67:42:ff:fc:f3:9b:c7:dd:90:99:2a:
f9:0a:35:fa:68:6b:98:6e:a4:06:4c:2d:f7:d6:05:
22:75:6a:1a:d1:50:fc:8d:40:c3:01:16:e0:97:98:
9e:22:1d:e8:6d:67:81:11:b0:5f:19:3b:ee:cd:12:
70:0e:51:c9:f3:0f:57:5f:8a:da:e4:40:ee:f4:12:
dc:57:6c:51:4c:8c:c3:b7:c9:01:32:bb:5a:fa:95:
a1:77:10:8b:e3:40:17:95:98:3c:cf:0f:81:82:fc:
7d:d9:2c:d5:c8:6c:a1:fe:a9:2f:54:4e:4e:00:04:
f6:f7:11:17:01:0c:11:63:54:e5:45:5b:99:79:26:
85:de:ba:19:7d:f4:4f:1d:0d:6f:c0:f2:ca:85:64:
1b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:BE:FB:B3:5E:91:28:89:AF:AB:96:2F:B9:7F:D1:51:D8:34:5E
X509v3 Authority Key Identifier:
keyid:FB:A0:A5:64:63:4F:42:E8:2C:F3:83:88:99:1C:9E:7E:40:05:2A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6ClZGNPQugs84OImRyefkAFKiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/zQa--7NekSiJr6uWL7l_0VHYNF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0b6154-b55e-4dd7-90a5-5526987a0745/1/1-6ClZGNPQugs84OImRyefkAFKiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.175.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:e7:d9:e4:55:d7:d7:6c:eb:fd:9b:b1:29:d8:ac:63:bb:23:
ea:01:a0:95:52:2e:0c:c4:73:00:51:a6:60:50:d2:a1:e2:e4:
8d:1e:60:93:b2:a2:b0:21:05:4c:41:3a:ec:fa:ec:79:4a:b3:
d5:0a:b1:0f:da:e4:ba:7c:0a:77:f8:14:d0:03:12:c7:09:2c:
2f:fc:06:60:60:a5:d0:12:26:fe:0f:5e:e9:78:76:8e:bd:77:
1e:87:cf:78:2e:39:11:ea:5d:40:19:31:16:d4:dd:7e:f3:03:
e4:bb:9e:d0:11:b9:d4:f9:52:36:e2:42:67:ac:2f:b7:bc:a4:
f9:e3:55:db:e3:97:9e:e9:4e:0a:d3:96:8e:e8:6b:bb:7f:44:
4a:90:ba:66:7c:0e:be:16:cd:c5:c8:41:7e:6a:77:f9:97:1a:
d8:f7:bf:fb:b2:65:28:b9:a3:82:01:d6:c5:9f:d6:45:85:ac:
8f:6b:55:78:8a:e8:50:3d:f1:21:1f:af:25:dd:c1:1a:ec:c5:
a3:6a:2f:9a:62:41:2c:f5:fd:10:a6:2b:f8:4a:68:80:4f:5f:
70:50:51:b9:ac:79:9f:2e:4c:c6:41:bf:61:2a:fe:b0:9b:73:
e7:5d:ef:90:06:47:2a:19:33:80:7a:47:30:11:a5:af:f7:62:
c5:e7:60:b0
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVwS/EAkxcMXp+FHV+fMq5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBhNTY0NjM0ZjQyZTgyY2YzODM4ODk5MWM5ZTdlNDAw
NTJhMjAwHhcNMjMwMTAyMDIyNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDA2YmVmYmIzNWU5MTI4ODlhZmFiOTYyZmI5N2ZkMTUxZDgzNDVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV/C1K5Ks3fk5Qb9t+Y7+4PpmyCB
n9a39lmSa0/YPi+29Ft753fkROfFWNfcFZ/CXtblaiQ2/1KZB1WTWeHLdqdgfSHi
fjUK0JLPdEGvYUMJApi1PSP1m0D1XyObdDLZ7fgoIGdk/1TFvYhxZ0L//PObx92Q
mSr5CjX6aGuYbqQGTC331gUidWoa0VD8jUDDARbgl5ieIh3obWeBEbBfGTvuzRJw
DlHJ8w9XX4ra5EDu9BLcV2xRTIzDt8kBMrta+pWhdxCL40AXlZg8zw+Bgvx92SzV
yGyh/qkvVE5OAAT29xEXAQwRY1TlRVuZeSaF3roZffRPHQ1vwPLKhWQbyQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFM0GvvuzXpEoia+rli+5f9FR2DReMB8GA1UdIwQY
MBaAFPugpWRjT0LoLPODiJkcnn5ABSogMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q2xaR05QUXVnczg0T0ltUnllZmtBRktpQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDcvMGI2MTU0LWI1NWUtNGRkNy05MGE1
LTU1MjY5ODdhMDc0NS8xL3pRYS0tN05la1NpSnI2dVdMN2xfMFZIWU5GNC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDcvMGI2MTU0LWI1NWUtNGRkNy05MGE1LTU1MjY5ODdhMDc0
NS8xLzEtNkNsWkdOUFF1Z3M4NE9JbVJ5ZWZrQUZLaUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBA68w
DQYJKoZIhvcNAQELBQADggEBACrn2eRV19ds6/2bsSnYrGO7I+oBoJVSLgzEcwBR
pmBQ0qHi5I0eYJOyorAhBUxBOuz67HlKs9UKsQ/a5Lp8Cnf4FNADEscJLC/8BmBg
pdASJv4PXul4do69dx6Hz3guORHqXUAZMRbU3X7zA+S7ntARudT5UjbiQmesL7e8
pPnjVdvjl57pTgrTlo7oa7t/REqQumZ8Dr4WzcXIQX5qd/mXGtj3v/uyZSi5o4IB
1sWf1kWFrI9rVXiK6FA98SEfryXdwRrsxaNqL5piQSz1/RCmK/hKaIBPX3BQUbms
eZ8uTMZBv2Eq/rCbc+dd75AGRyoZM4B6RzARpa/3YsXnYLA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:58 2023 by rpki-client on console-ams.rpki-client.org