Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/zXPSoiVIyBUadZjKfbni_UiPXh4.roa
File: zXPSoiVIyBUadZjKfbni_UiPXh4.roa (raw, json)
Hash identifier: 1okZRQs+MM2rJb4d6l/abCnP7VIPgnDsQBgGiXyYOcU=
Subject key identifier: CD:73:D2:A2:25:48:C8:15:1A:75:98:CA:7D:B9:E2:FD:48:8F:5E:1E
Certificate issuer: /CN=213e1d50d52288bee80eea435577018712409bbe
Certificate serial: 018571151EDD826F2B005A40A4683B73EEC0
Authority key identifier: 21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/zXPSoiVIyBUadZjKfbni_UiPXh4.roa
Signing time: Mon 02 Jan 2023 06:04:47 +0000
ROA not before: Mon 02 Jan 2023 06:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9121
IP address blocks: 193.22.12.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:1e:dd:82:6f:2b:00:5a:40:a4:68:3b:73:ee:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=213e1d50d52288bee80eea435577018712409bbe
Validity
Not Before: Jan 2 06:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd73d2a22548c8151a7598ca7db9e2fd488f5e1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:3a:39:e1:1f:bd:ac:a9:0f:bb:7c:ea:8e:
bb:ca:93:ac:f8:b5:56:c2:93:a6:ec:65:19:75:f1:
68:1f:29:db:ef:97:3c:e1:00:40:ba:63:49:b7:4f:
d7:16:50:29:c0:c2:9b:fa:e2:7f:37:ed:d4:b4:14:
c2:ce:39:b8:ba:c7:07:da:8b:0f:a3:aa:f2:87:a7:
6a:cc:e0:83:e7:b2:de:37:e4:ed:e9:92:b7:92:ad:
d7:e9:dc:f9:32:ee:63:8f:28:76:fb:16:ef:06:92:
d5:81:03:09:85:b0:33:b8:e6:df:32:db:05:ac:35:
75:60:f0:a3:f2:83:b5:78:d9:93:9d:61:4d:63:00:
cd:bf:6e:15:11:78:93:e7:2f:7d:d5:09:8e:f0:41:
ca:8e:2e:96:84:2e:a9:5c:70:52:f2:0a:2b:0d:b2:
68:a0:cf:e5:eb:81:2a:9d:ec:7b:40:da:39:15:a7:
50:c0:7b:dd:35:dc:ff:4a:76:8b:b5:80:d0:8a:75:
4d:7f:b0:40:b6:50:94:0f:ec:3a:cc:8c:92:dd:5a:
e7:d9:64:01:f5:ea:37:fc:6a:c9:b4:30:17:94:ba:
88:44:c7:0c:2f:ea:3d:a4:98:dd:fe:53:11:23:be:
8b:8f:d9:99:20:30:e4:b1:5d:3a:24:7a:6f:45:58:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:73:D2:A2:25:48:C8:15:1A:75:98:CA:7D:B9:E2:FD:48:8F:5E:1E
X509v3 Authority Key Identifier:
keyid:21:3E:1D:50:D5:22:88:BE:E8:0E:EA:43:55:77:01:87:12:40:9B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IT4dUNUiiL7oDupDVXcBhxJAm74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/zXPSoiVIyBUadZjKfbni_UiPXh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/2a1ce9-fb4c-41ee-9ff6-316ef261f4a5/1/IT4dUNUiiL7oDupDVXcBhxJAm74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.12.0/24
Signature Algorithm: sha256WithRSAEncryption
42:99:dd:c3:79:d4:17:05:d8:fb:6c:24:d5:23:46:42:34:5e:
a7:92:5e:24:04:e3:5f:dc:22:27:c5:ac:42:d4:4a:2d:c4:bb:
61:f1:ef:97:34:e8:d3:0f:b6:2f:85:d8:8a:d6:64:71:01:2c:
e9:93:fb:86:80:4d:b2:77:bc:d5:81:00:1b:96:75:69:d2:67:
6e:d5:9a:41:3e:b1:5c:11:dd:93:07:b6:56:d0:c1:09:4d:14:
0e:e7:5f:cf:cc:ea:b4:43:af:c6:26:bc:7e:fc:6c:0c:95:e8:
99:d0:bf:b6:30:ab:b8:d6:67:a7:f9:31:15:32:67:1c:eb:6c:
81:21:ae:5a:c6:dc:8b:14:31:89:eb:bd:ee:97:7c:8b:c9:e2:
4c:4b:e9:04:88:99:8e:b6:20:0f:22:0f:c8:f9:98:83:49:80:
bb:c9:83:e4:06:62:ea:46:0b:e2:98:a3:cf:98:1c:2b:d9:29:
89:1f:f2:cd:e9:6a:19:67:9e:79:b5:ea:b2:6d:16:9a:34:41:
82:35:08:87:44:6a:53:7f:de:17:e2:40:18:e0:28:d5:41:9c:
f1:5a:69:9e:49:bf:66:41:2f:d1:80:5c:3d:ff:55:d8:69:8e:
91:34:2e:fc:13:23:d9:1a:34:83:7d:46:35:a3:cb:d6:52:00:
56:49:e0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:33 2024 by rpki-client on console-fra.rpki-client.org