Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/zu-Apj3MUa7vKDa_OXMSeuEnlDA.roa
File: zu-Apj3MUa7vKDa_OXMSeuEnlDA.roa (raw, json)
Hash identifier: TS60GI7Vn96iFEzvd1c8egNNsOnci/DGUDbNOxezB9U=
Subject key identifier: CE:EF:80:A6:3D:CC:51:AE:EF:28:36:BF:39:73:12:7A:E1:27:94:30
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 01856D13DD08663797C6A1B56C4ADEC215D5
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/zu-Apj3MUa7vKDa_OXMSeuEnlDA.roa
Signing time: Sun 01 Jan 2023 11:24:56 +0000
ROA not before: Sun 01 Jan 2023 11:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.108.102.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:dd:08:66:37:97:c6:a1:b5:6c:4a:de:c2:15:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Jan 1 11:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ceef80a63dcc51aeef2836bf3973127ae1279430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:79:30:dd:bd:38:55:f0:4a:0d:40:97:4f:98:
92:cb:17:82:36:33:18:93:69:8a:ad:46:52:d5:e6:
92:b2:63:80:34:af:a0:62:96:08:7d:00:95:d1:e0:
a0:e4:e0:2a:0c:53:b4:5c:28:58:80:da:e3:d6:c5:
cc:14:b6:29:26:e8:9a:b5:8b:07:91:17:ae:07:6d:
62:1a:2e:6b:0c:6a:1c:50:b2:b6:18:66:5e:58:43:
c1:46:76:e5:49:2e:fb:8f:85:da:1f:ff:d9:7b:52:
5a:ac:31:7d:c7:2f:2c:4c:cd:6f:08:b6:7b:d0:ac:
81:fd:be:36:7a:bc:ca:af:34:4b:6c:64:e4:8f:3a:
13:f0:88:c2:99:9b:d4:c8:a0:8d:7f:a0:ff:22:f9:
c0:13:9a:2f:7d:7d:28:93:e6:c0:2c:bf:74:4e:5d:
e1:48:00:43:bd:6e:14:2b:df:93:d4:29:00:fc:ad:
8d:cd:d3:48:63:ba:6d:92:0d:57:64:e6:92:39:75:
62:5a:c2:59:b3:ea:56:d3:ef:36:7e:d2:da:45:75:
6a:ca:09:0a:8a:46:57:34:3f:1c:63:e1:56:62:18:
4f:7c:ae:01:de:ed:e2:af:8b:22:6f:2d:95:8c:d2:
08:de:ce:6c:cb:53:d5:7f:fd:2c:f4:48:58:4b:56:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:EF:80:A6:3D:CC:51:AE:EF:28:36:BF:39:73:12:7A:E1:27:94:30
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/zu-Apj3MUa7vKDa_OXMSeuEnlDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.102.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:7c:66:cb:5d:c6:d0:87:ce:75:ef:33:38:6c:9d:16:67:25:
ca:ee:93:cd:f8:3c:8e:3a:34:ac:f5:4e:d1:6b:ea:1b:f7:14:
48:39:25:49:e8:08:85:08:70:bc:92:d1:9a:04:6b:57:47:92:
af:7d:76:ca:44:d9:c3:42:ac:b5:5c:c5:e7:22:cd:21:6d:9c:
58:d9:4a:11:6a:09:5a:17:44:92:2e:f3:b0:82:ec:a6:46:32:
24:0d:14:e8:30:30:a3:bb:a1:4a:96:a5:83:ef:c3:82:10:bc:
a4:a7:0a:40:a4:6d:d9:e9:05:e2:0e:a8:2a:35:ce:d8:ca:bd:
a0:80:51:42:80:10:90:8e:c2:f4:5c:4b:cd:a5:49:9e:99:56:
4d:bf:cd:1f:5b:6c:4b:88:af:24:5e:66:a8:f6:fd:ae:f1:d7:
e9:cc:77:d5:80:c1:a4:9c:74:b8:b0:b6:34:95:0d:7e:f7:93:
e3:10:c7:56:2d:4e:16:f1:42:d4:5a:14:11:5b:cc:aa:b8:00:
ed:98:62:c7:e3:e3:23:14:5b:be:d7:78:fe:8a:ea:63:fd:d7:
7f:51:03:8f:62:fa:6c:b4:67:f8:02:e9:52:6c:00:4b:23:e6:
97:f3:65:a3:22:5e:0f:e1:93:46:fd:57:23:fb:09:1b:96:98:
0e:25:50:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-fra.rpki-client.org