Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/ZZe9j3AUJnUPoxAaAfV2GCCorMo.roa
File: ZZe9j3AUJnUPoxAaAfV2GCCorMo.roa (raw, json)
Hash identifier: N/+caP8t4szVXmZRlMCUN73777QXpVDj53EfRhWJeP0=
Subject key identifier: 65:97:BD:8F:70:14:26:75:0F:A3:10:1A:01:F5:76:18:20:A8:AC:CA
Certificate issuer: /CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Certificate serial: 018CC9BBF2B1B602B6460D4B740969C8F913
Authority key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/ZZe9j3AUJnUPoxAaAfV2GCCorMo.roa
Signing time: Tue 02 Jan 2024 10:33:06 +0000
ROA not before: Tue 02 Jan 2024 10:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44186
IP address blocks: 193.200.126.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 28 Jun 2024 06:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f2:b1:b6:02:b6:46:0d:4b:74:09:69:c8:f9:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Validity
Not Before: Jan 2 10:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6597bd8f701426750fa3101a01f5761820a8acca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:3b:d5:61:3c:8f:e0:5c:ef:9f:59:d2:69:
b3:08:a1:24:97:a5:01:40:23:79:a0:f0:77:6d:22:
74:03:98:a6:45:f2:29:9e:49:fd:a9:5a:55:16:c1:
c2:f2:e7:a0:a0:de:48:27:61:39:3e:25:81:d0:4b:
5d:2c:8f:55:a9:d7:09:da:68:11:2a:32:c4:c1:f1:
a8:05:0e:40:85:49:d5:d4:2b:8b:fd:46:37:d9:cd:
ac:31:7e:51:cb:94:c2:38:ae:c1:10:7e:01:69:e3:
32:1e:13:9b:0c:d0:58:d5:15:01:4e:53:ca:1a:cc:
c6:d6:42:e1:21:4f:9e:b2:e2:63:fa:4b:a1:4f:9c:
e1:55:fa:4a:cf:52:0e:73:bb:7f:99:44:7e:53:2b:
8b:ed:e6:00:ac:e4:64:c6:d9:b2:a0:ca:15:23:09:
7b:b4:1c:ce:9c:c2:55:18:d0:34:55:22:6e:9b:3d:
f0:38:49:31:c9:07:8f:35:43:c5:68:12:1e:96:54:
cb:f1:e0:08:55:74:d9:1b:1a:cb:f4:eb:91:63:d6:
f9:4a:5a:97:88:2c:d7:50:34:56:d8:b3:e4:a5:da:
b1:7e:b1:44:bc:6f:a6:59:90:1c:55:c6:e9:0d:7d:
4b:1f:46:84:f3:df:78:67:fb:1a:85:88:e9:66:82:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:97:BD:8F:70:14:26:75:0F:A3:10:1A:01:F5:76:18:20:A8:AC:CA
X509v3 Authority Key Identifier:
keyid:6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/ZZe9j3AUJnUPoxAaAfV2GCCorMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.126.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:87:96:9d:ce:7d:00:db:0a:1d:4d:28:76:3a:51:be:10:86:
5b:f3:ef:41:56:b7:ce:88:18:6f:cc:d3:cf:44:45:d1:97:9e:
64:88:e4:5e:58:ff:b9:14:91:6b:9f:24:92:bd:71:3f:15:a8:
90:f0:3c:9e:17:f8:e8:9d:36:65:85:10:f8:26:e1:a1:de:e1:
ce:4a:6a:14:86:50:c9:ad:e9:a0:10:d3:41:68:5e:a8:7d:9b:
02:bb:b2:a1:1e:84:74:b8:c8:c8:6e:dc:62:61:76:37:a0:4c:
f8:51:e6:00:c7:14:de:bc:63:e2:22:09:0d:10:d4:c9:a3:d6:
f9:9d:7a:35:94:6f:5e:c5:5f:dc:7b:d3:09:db:43:bd:aa:d4:
5f:4b:dc:0b:b1:6b:bb:df:70:b3:87:fa:15:7b:b8:88:4c:34:
d4:64:1c:4f:5f:c4:ad:f6:39:f0:00:01:c2:90:7f:8e:68:fd:
d5:5e:58:89:a0:3b:19:2c:f2:ca:8e:9f:b4:70:a7:ec:dc:b3:
f0:43:2d:52:c0:d3:b8:76:d7:66:9b:b7:18:d3:59:f3:df:bc:
51:16:d0:74:ae:c7:be:92:fc:e9:30:3a:28:e2:ed:5c:97:9e:
db:7a:52:fe:cd:f9:c9:09:79:55:84:0c:5e:1d:2b:e3:ad:4c:
69:46:49:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 08:44:26 2024 by rpki-client on console-ams.rpki-client.org