Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cz_g3A9f9sjF6Jd5Rg-XkJzcQso.roa
File: cz_g3A9f9sjF6Jd5Rg-XkJzcQso.roa (raw, json)
Hash identifier: jI9Zviq/RlJHiVweFroAz36DZYrr74T9zkNJrD2ScF8=
Subject key identifier: 73:3F:E0:DC:0F:5F:F6:C8:C5:E8:97:79:46:0F:97:90:9C:DC:42:CA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0185732843A29A5A30588FD5E5755ADE24F7
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cz_g3A9f9sjF6Jd5Rg-XkJzcQso.roa
Signing time: Mon 02 Jan 2023 15:44:56 +0000
ROA not before: Mon 02 Jan 2023 15:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200275
IP address blocks: 5.231.127.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:43:a2:9a:5a:30:58:8f:d5:e5:75:5a:de:24:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 2 15:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=733fe0dc0f5ff6c8c5e89779460f97909cdc42ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2c:e9:f7:bc:5f:5e:2b:e3:3d:32:ac:99:50:
8c:f9:fc:79:51:ce:e2:3f:98:68:59:cc:fd:71:11:
f6:b0:be:0a:80:c7:2f:33:f8:28:75:14:47:e6:0b:
f8:16:fd:bc:c3:85:ca:ad:f2:54:9e:c7:02:ea:1f:
ee:32:d4:c3:b9:8e:13:c6:60:53:a3:2d:ee:55:87:
4f:e2:eb:8a:8f:ce:bc:19:64:e5:c5:a6:10:c1:72:
89:82:2b:35:18:db:95:37:20:91:b4:e1:5a:73:a2:
1a:62:d0:ad:09:d9:07:af:da:49:df:71:03:91:7c:
58:3c:41:2e:bb:bb:3a:3e:3e:06:fd:fd:d3:7e:11:
11:5f:cd:88:9a:5b:42:df:c0:4c:2c:c2:19:15:03:
f6:f1:a6:21:34:d7:f8:c1:f5:c9:61:4c:c6:77:99:
ee:69:02:92:cd:4e:f9:d1:f8:6a:0a:c5:28:4a:0d:
d8:50:0b:94:ac:78:3b:80:13:93:7f:67:15:1c:a3:
29:56:d9:1d:00:14:7e:d7:ee:38:00:1f:fd:02:b3:
1f:bd:d3:ba:14:f5:27:0f:f0:3d:32:b7:62:22:6a:
a5:1c:8c:8a:5a:8a:2a:a3:16:2a:dc:b7:49:2f:1d:
72:0c:21:f3:26:7f:42:22:c1:66:46:0e:69:65:33:
16:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:3F:E0:DC:0F:5F:F6:C8:C5:E8:97:79:46:0F:97:90:9C:DC:42:CA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/cz_g3A9f9sjF6Jd5Rg-XkJzcQso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.127.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:5b:a7:da:f5:f1:9c:3a:fc:2d:9b:9c:01:66:2e:bd:d7:0a:
7f:39:b2:27:91:99:08:3c:88:51:26:f2:39:ec:60:01:ee:c6:
26:ff:e9:c0:5f:29:3e:00:35:bc:1f:2b:fa:b6:e1:c4:51:e8:
22:3d:53:94:1e:a0:ba:a4:70:d9:e8:49:d0:10:de:41:80:5c:
8e:20:7f:b4:4b:b4:df:29:75:19:13:c7:71:09:23:cc:2f:91:
d4:43:9b:c8:6f:e1:36:d4:d3:3b:f0:44:ee:0f:7e:30:48:a9:
85:13:2e:a7:45:99:da:62:16:e8:68:45:5b:87:ba:6a:42:d8:
20:3c:1a:65:a7:67:4a:2e:6d:25:63:af:03:7d:38:f0:8c:25:
0d:ec:04:65:17:99:06:c9:98:81:10:10:cd:08:0e:c0:1d:8f:
da:ee:ea:c7:62:b4:05:e6:87:2c:84:57:ab:a1:54:8f:85:da:
ae:36:e3:69:16:9f:a1:07:5b:b1:c0:8f:5e:5f:1c:79:85:92:
ad:fd:93:1e:4d:3a:6c:a2:43:69:36:6c:6b:45:a9:36:a9:8a:
00:07:9f:91:ff:33:fd:6b:e3:ba:d4:05:dd:e7:c7:d9:89:cd:
46:0a:3e:2d:f9:f6:e3:da:8e:d4:9b:36:dc:03:79:95:6b:61:
ae:c6:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:30 2024 by rpki-client on console-fra.rpki-client.org