Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/ZHPv48s9exGQJDM-CiEy1lTpt9U.roa
File: ZHPv48s9exGQJDM-CiEy1lTpt9U.roa (raw, json)
Hash identifier: ZvsvRVqrDuM51vCausdK6GR71nkAPcSmMuCR3vJu3Ss=
Subject key identifier: 64:73:EF:E3:CB:3D:7B:11:90:24:33:3E:0A:21:32:D6:54:E9:B7:D5
Certificate issuer: /CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Certificate serial: 01856F67029F628F9C08AFC8A244AC3DC8EF
Authority key identifier: C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/ZHPv48s9exGQJDM-CiEy1lTpt9U.roa
Signing time: Sun 01 Jan 2023 22:14:59 +0000
ROA not before: Sun 01 Jan 2023 22:14:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29229
IP address blocks: 193.93.164.0/22 maxlen: 22
2001:67c:2cd4::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:67:02:9f:62:8f:9c:08:af:c8:a2:44:ac:3d:c8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8982b00dc6003dcc5cfd7d27b5595d0caca5da1
Validity
Not Before: Jan 1 22:14:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6473efe3cb3d7b119024333e0a2132d654e9b7d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:a2:49:41:c2:f0:44:3c:d8:f8:70:21:f6:
9f:52:d1:e4:ef:1a:24:c2:89:f5:07:36:31:0b:4f:
2c:ba:00:d1:65:a3:ae:82:40:64:19:65:4a:8a:b8:
09:a4:b9:b9:08:29:60:f9:83:63:52:e9:b6:96:92:
3b:24:22:b3:7d:dc:11:b9:28:7e:0f:77:05:b9:d6:
82:c3:e1:5f:c5:6d:ce:fc:0f:ea:a2:d0:75:68:2b:
6f:c8:85:bf:e2:c3:90:3d:c1:3a:ef:d5:c5:a1:82:
0d:f3:07:83:3d:68:c8:c9:3c:65:d9:a0:e2:99:9c:
dd:55:61:21:cf:fa:c6:bb:f7:d6:f9:86:c8:b7:35:
f6:8c:a5:1e:1a:f1:2a:ae:90:b6:f2:47:68:12:81:
da:f4:89:6a:35:cb:df:9c:11:82:f4:21:b3:78:2c:
d1:52:ae:40:12:38:ab:39:00:62:2c:4a:f8:da:3e:
b3:0f:80:dd:d6:f8:d0:1b:2a:3d:c1:83:b0:bd:a2:
be:8a:11:2f:bf:16:bb:32:17:a5:8f:fd:8f:ad:f7:
9c:a8:9c:18:86:6b:5c:f3:85:76:68:f1:27:2e:0b:
a8:cc:3f:0a:9e:da:82:ef:71:9f:b4:23:43:ce:58:
e1:2b:cf:b2:6b:e7:e2:7b:fa:82:7a:69:93:eb:d6:
32:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:73:EF:E3:CB:3D:7B:11:90:24:33:3E:0A:21:32:D6:54:E9:B7:D5
X509v3 Authority Key Identifier:
keyid:C8:98:2B:00:DC:60:03:DC:C5:CF:D7:D2:7B:55:95:D0:CA:CA:5D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJgrANxgA9zFz9fSe1WV0MrKXaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/ZHPv48s9exGQJDM-CiEy1lTpt9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2168ba-1c4c-4206-9299-1653e0de4050/1/yJgrANxgA9zFz9fSe1WV0MrKXaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.164.0/22
IPv6:
2001:67c:2cd4::/48
Signature Algorithm: sha256WithRSAEncryption
1c:b8:db:57:b0:40:e8:d4:80:fd:a5:43:27:3e:d8:71:89:e9:
48:b6:9a:8f:a4:53:22:67:2c:a6:ea:9c:82:84:02:8b:de:08:
b1:d1:ee:37:b4:1c:ab:c5:44:4e:ed:5d:09:9e:78:c8:3a:64:
25:72:77:de:99:6f:35:d3:72:75:b3:d8:55:df:6e:a8:2c:76:
69:34:60:df:54:b9:8e:b7:5f:f7:51:cf:de:ae:e1:c9:4e:49:
49:be:4f:57:b7:27:56:72:09:04:41:69:e1:1c:7b:d7:38:16:
2c:cc:3e:db:fd:e3:d9:ce:21:db:08:ec:47:72:64:44:27:aa:
8c:0f:d0:d3:8c:4a:b2:af:63:0e:9e:df:fb:4f:9b:e7:6d:a3:
7f:5d:ff:d2:95:9b:d1:13:2e:68:54:c7:a0:6e:40:19:7b:f8:
6c:64:25:8b:60:de:95:3f:ef:1e:8d:70:74:25:38:39:23:da:
7e:77:82:73:8c:3b:ec:b0:b2:4d:dc:1c:3f:34:22:f3:fc:2f:
71:e2:5b:b7:fd:23:ee:e5:b9:9f:2d:f4:0b:26:7f:92:c8:9f:
f8:0c:59:54:9a:65:d8:50:25:94:36:14:1d:0e:14:ed:ff:f4:
78:10:bd:d2:22:e0:6d:f1:ee:af:c1:ed:ae:31:32:28:a6:94:
cd:7c:a4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:55 2024 by rpki-client on console-fra.rpki-client.org