Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/ZIqHBccGz1dl_JobgUp3LuxhbDU.roa
File: ZIqHBccGz1dl_JobgUp3LuxhbDU.roa (raw, json)
Hash identifier: QH3chGCIECGhKQxDkyaQMWDibMC8/khJiui2IEQrGlI=
Subject key identifier: 64:8A:87:05:C7:06:CF:57:65:FC:9A:1B:81:4A:77:2E:EC:61:6C:35
Certificate issuer: /CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Certificate serial: 018CC801BA24A5C4D7B229BDB230C4FF9AB5
Authority key identifier: E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/ZIqHBccGz1dl_JobgUp3LuxhbDU.roa
Signing time: Tue 02 Jan 2024 02:30:05 +0000
ROA not before: Tue 02 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203011
IP address blocks: 193.28.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:ba:24:a5:c4:d7:b2:29:bd:b2:30:c4:ff:9a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4044a9d10a19e6b1acedac9ff778d4f409068cb
Validity
Not Before: Jan 2 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=648a8705c706cf5765fc9a1b814a772eec616c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:d8:d5:11:bd:c7:47:5c:2f:f4:71:49:c6:
d5:19:11:83:64:52:30:0e:37:8e:0a:41:32:01:ca:
f1:09:fd:e9:3b:3f:89:40:06:3b:2d:c7:54:2a:a7:
ee:d6:0e:b5:3d:8f:4d:c6:ab:b2:f5:eb:f2:a5:49:
b8:41:06:d2:35:d5:4f:30:86:7b:5c:58:1a:69:18:
13:8e:6c:cb:b0:f2:c4:f7:7b:35:5a:d0:55:7f:d9:
13:b1:1d:14:cd:74:52:4e:a0:db:6f:85:de:0c:94:
63:89:85:57:ce:0d:e8:b3:af:50:8e:c1:8a:0f:25:
ce:03:3c:de:3f:3c:1d:3c:c9:08:f5:4e:ca:62:43:
4f:7f:10:3a:00:d2:90:bf:88:75:91:f1:d0:61:c7:
99:af:99:86:d7:42:67:d0:e2:9f:27:fd:d5:b8:d5:
6d:cf:84:a0:85:1f:d3:03:eb:85:f5:a9:e8:d1:e7:
54:0b:c6:f8:b7:9e:d4:04:ad:23:e4:c4:6d:32:83:
27:32:39:59:a9:7b:a9:34:f2:40:94:2d:4b:dd:c7:
96:27:f0:6c:22:fd:d9:7c:f2:ef:1f:66:d0:df:3b:
5e:58:ce:dd:e7:38:6d:28:8e:0e:19:e8:79:6d:c2:
c4:92:21:5c:8d:f3:b1:a9:55:67:16:85:e7:b6:61:
b8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:8A:87:05:C7:06:CF:57:65:FC:9A:1B:81:4A:77:2E:EC:61:6C:35
X509v3 Authority Key Identifier:
keyid:E4:04:4A:9D:10:A1:9E:6B:1A:CE:DA:C9:FF:77:8D:4F:40:90:68:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ARKnRChnmsaztrJ_3eNT0CQaMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/ZIqHBccGz1dl_JobgUp3LuxhbDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0e8b5d-ee98-47fb-a389-03fa7a9c371e/1/5ARKnRChnmsaztrJ_3eNT0CQaMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.176.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0e:cb:fa:a0:59:06:96:9c:ff:bc:18:32:26:99:10:fd:3a:
22:7b:e8:db:a1:61:fc:cc:a1:ba:e4:e1:1a:ee:7f:e8:d5:7f:
a3:cd:ff:c6:17:1c:3c:fe:ef:f0:51:d7:8c:0c:d2:6e:13:a1:
28:a6:68:fd:13:5a:ea:d0:b1:73:f4:e8:cf:be:5d:fd:6f:c8:
32:6e:58:6b:25:35:d0:60:51:3e:31:a9:b6:c7:f0:16:57:c2:
4a:31:91:b7:31:12:a3:41:b3:a4:e9:18:91:c9:fe:2d:1c:2b:
82:a3:90:d9:90:72:34:eb:1d:c2:e7:e2:00:2c:c9:e6:32:10:
74:56:eb:f3:a7:2e:5c:68:ce:f4:2b:8b:69:ec:27:13:53:15:
f7:06:4c:a0:64:40:da:d1:fb:ea:62:9f:d8:60:da:38:74:52:
d5:fd:ce:ce:21:76:53:7b:f4:80:a9:16:a8:97:47:8f:9d:82:
8c:e1:f8:14:91:f7:0e:85:f8:6e:b5:6e:c4:2e:93:80:c1:e2:
3a:80:ef:8f:0e:68:62:6f:29:c7:18:e9:91:6c:d6:fa:be:9e:
8c:b0:40:f0:e1:bb:cc:81:62:ac:d3:d4:38:99:98:93:d3:1c:
76:2b:28:66:34:72:73:02:e4:51:87:fa:70:ba:8c:23:82:65:
69:7b:85:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:52:10 2024 by rpki-client on console-ams.rpki-client.org