Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/zvTTfvAg8KvKxjem4IAlfPHN3s4.roa
File: zvTTfvAg8KvKxjem4IAlfPHN3s4.roa (raw, json)
Hash identifier: EpjCH967y1EXfVjPqSY6kHZr/cXXuT6UJSwML9jsuBk=
Subject key identifier: CE:F4:D3:7E:F0:20:F0:AB:CA:C6:37:A6:E0:80:25:7C:F1:CD:DE:CE
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 01905348219D4E1A0D6365AC5F7838D53236
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/zvTTfvAg8KvKxjem4IAlfPHN3s4.roa
Signing time: Wed 26 Jun 2024 06:42:34 +0000
ROA not before: Wed 26 Jun 2024 06:42:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196944
IP address blocks: 193.105.142.0/24 maxlen: 24
2001:678:fc0::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Jan 2025 11:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:53:48:21:9d:4e:1a:0d:63:65:ac:5f:78:38:d5:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Jun 26 06:42:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cef4d37ef020f0abcac637a6e080257cf1cddece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d7:c4:f8:b5:6d:e8:93:8e:5c:c2:61:c3:d5:
cd:55:ee:30:c6:dc:c4:d3:bf:03:f3:0f:bf:35:c3:
ae:b8:dd:56:ea:ca:b9:64:40:43:c4:a7:45:e5:48:
40:9a:4c:fa:e0:5a:df:e6:28:7a:23:f6:e5:7e:8e:
f3:f3:e4:14:cd:c9:ee:c7:55:bd:f6:72:94:dc:aa:
11:e0:93:53:b6:11:25:f1:39:e7:be:02:ea:64:27:
93:99:11:7f:97:b2:1f:72:76:84:96:5f:e7:db:06:
cd:03:eb:52:a3:ee:72:42:3b:ac:3a:01:86:10:fd:
e5:c7:4a:82:53:ae:e1:55:03:1d:b5:f2:e5:3c:37:
0b:bb:4a:36:9c:fa:18:87:dc:09:fe:f3:cf:6b:45:
7d:ad:e8:b8:ce:c6:77:0d:bb:03:43:ca:6c:5a:0e:
9e:ac:11:08:0a:d7:37:2f:95:4c:4f:30:6f:e2:1e:
b7:ea:63:2b:45:a5:2c:1d:af:ee:cf:6e:11:97:a1:
fd:11:1d:2a:2e:ec:2f:93:32:7c:f1:f4:57:cb:fd:
a0:3e:5c:f6:6e:72:8e:cc:a2:8b:54:68:55:c8:72:
b3:67:7b:b8:82:14:f7:10:bd:bd:09:4f:6d:be:df:
b1:51:83:d5:6e:14:db:e1:a1:91:2a:0e:8c:e1:d6:
a2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F4:D3:7E:F0:20:F0:AB:CA:C6:37:A6:E0:80:25:7C:F1:CD:DE:CE
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/zvTTfvAg8KvKxjem4IAlfPHN3s4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.142.0/24
IPv6:
2001:678:fc0::/48
Signature Algorithm: sha256WithRSAEncryption
3d:b6:23:72:40:bc:33:8f:21:6e:b4:2c:37:91:dc:70:65:a8:
5b:0a:4a:3f:1d:88:3a:dd:88:ba:80:9a:a8:54:aa:8c:fe:7b:
d8:6a:87:5c:06:90:10:47:4d:75:4a:a9:bd:ad:36:ec:e5:0c:
02:f6:97:7e:31:8f:71:b6:7f:8f:74:c9:0d:fe:9e:f9:d7:7c:
ae:15:db:8d:b7:c0:69:8e:68:89:9b:b8:c5:75:be:b9:38:cb:
7d:7f:11:fa:f7:e6:bf:ef:00:f7:58:90:42:f7:73:3d:64:cf:
76:d7:62:b7:92:70:b0:58:01:b6:68:45:8b:a2:62:d9:e4:bb:
cc:78:d2:c4:a9:53:24:18:10:ee:0a:7c:4f:60:1a:d9:d9:93:
13:a4:15:26:5d:fe:29:c9:8a:23:dc:1f:02:40:65:6e:21:f9:
35:ad:2d:26:21:01:80:ab:b0:71:d1:1d:90:d0:32:95:b8:a5:
33:d5:58:94:d9:2f:a5:48:fa:19:cb:c8:94:9d:e5:75:09:0f:
ad:56:14:06:93:b6:ad:40:a0:5b:e1:11:5e:ab:01:c1:42:91:
47:30:b3:cc:fd:5a:f4:88:e1:a2:54:55:2a:d9:c6:ab:20:05:
3e:ab:d3:59:6b:57:50:70:76:8f:29:8e:d2:8d:35:ea:51:01:
3a:6a:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:50 2025 by rpki-client