Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/szZLUchuaM5pFDETyHxbOUPp-N4.roa
File: szZLUchuaM5pFDETyHxbOUPp-N4.roa (raw, json)
Hash identifier: 5MTuMOFgAf6UYJ+7biIHtTzVx9addYXLxqpx4D9F/7w=
Subject key identifier: B3:36:4B:51:C8:6E:68:CE:69:14:31:13:C8:7C:5B:39:43:E9:F8:DE
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED69BB6FE157E79EAA1E5629F497B
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/szZLUchuaM5pFDETyHxbOUPp-N4.roa
Signing time: Sun 01 Jan 2023 06:04:52 +0000
ROA not before: Sun 01 Jan 2023 06:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205342
IP address blocks: 193.192.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d6:9b:b6:fe:15:7e:79:ea:a1:e5:62:9f:49:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b3364b51c86e68ce69143113c87c5b3943e9f8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:a2:55:bc:3e:08:53:b7:bb:42:cc:6e:53:
5b:77:2a:7a:ab:25:69:d3:fd:55:d6:a9:c9:27:7c:
83:c6:5b:cb:4f:4f:88:12:74:4a:b1:b4:39:ad:f3:
79:ba:44:11:df:92:de:b8:83:43:be:25:49:66:53:
d5:38:2d:5b:0c:38:3e:ff:32:ee:12:05:40:03:7a:
d5:09:ab:c5:2c:74:58:a7:04:1e:8e:4f:ff:21:a3:
2e:76:0c:a9:6f:70:0f:f6:93:d1:e8:02:04:d3:34:
96:0f:6b:75:72:8a:7d:01:9c:9b:29:2a:34:9d:54:
29:fa:f0:ec:e3:47:93:3c:db:49:4e:2b:d4:a9:11:
21:f0:5a:c4:98:a7:11:6f:b6:69:90:b5:66:eb:e9:
d9:05:ad:2f:f7:02:3e:99:57:72:15:6c:77:6b:74:
3f:ee:fb:1e:77:a3:f4:7d:b0:ca:68:3f:9b:53:f6:
de:38:9a:d9:cc:e6:9b:fa:28:10:5b:50:1f:26:9b:
b3:8f:84:99:6a:78:c7:dd:c0:95:8e:99:59:7a:ed:
96:97:a0:bc:ef:bc:c6:89:04:74:6c:8b:0e:91:d7:
ce:cf:a5:d4:9e:98:a7:68:6f:91:fe:29:77:cd:1d:
05:6c:81:7a:56:0d:56:d9:ee:fa:df:13:a5:84:48:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:36:4B:51:C8:6E:68:CE:69:14:31:13:C8:7C:5B:39:43:E9:F8:DE
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/szZLUchuaM5pFDETyHxbOUPp-N4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.164.0/24
Signature Algorithm: sha256WithRSAEncryption
42:37:97:4c:ff:97:67:c6:91:0b:3f:48:7a:1f:1e:82:3c:03:
44:7b:68:c7:ff:f1:66:17:f0:05:7e:e3:aa:c3:ca:11:e2:88:
b5:25:00:3b:96:80:6a:38:87:58:5a:bf:a0:0b:05:60:d2:82:
ac:d1:16:49:a4:0f:c2:4d:71:b3:eb:8e:d8:6d:93:10:52:0e:
85:09:4f:1c:4d:23:46:28:b6:75:48:4f:86:1e:d9:3b:28:c3:
72:c6:5b:21:d6:7a:b6:e8:1a:0c:c8:70:01:72:a4:c6:07:1a:
31:2a:7d:2e:f2:9e:b9:ca:a2:72:16:77:85:b4:0a:0f:06:c2:
68:ec:43:e7:d7:1b:12:6b:05:88:ed:02:3f:18:a3:13:2a:d5:
8a:5a:8b:b9:d5:d6:29:e6:dd:7d:36:fa:9d:71:a9:e3:07:ff:
c7:e0:e3:fe:64:fa:0d:41:c0:79:97:70:1c:4d:d5:37:91:14:
75:3a:9e:e2:4e:e6:e1:39:94:1b:b7:ff:e9:1d:75:d0:a3:d8:
49:86:58:ba:c5:82:b8:26:90:d6:b9:4f:cf:c2:85:a1:4b:e7:
dc:f8:e6:d1:ac:5a:b4:ae:fd:31:61:db:17:03:57:46:9c:4a:
9c:84:ed:06:81:05:99:82:aa:68:a7:cc:13:ac:3b:6b:ad:d6:
cb:87:84:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org