Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/zqJqs0sK2IU_r7Lo66UksEA31Mo.roa
File: zqJqs0sK2IU_r7Lo66UksEA31Mo.roa (raw, json)
Hash identifier: pl4Ixl4RkIMdjfWlD6IxVReIml8UrANlqXy0FMi7lAo=
Subject key identifier: CE:A2:6A:B3:4B:0A:D8:85:3F:AF:B2:E8:EB:A5:24:B0:40:37:D4:CA
Certificate issuer: /CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Certificate serial: 01856F1DB452D40590B9EC82F24FB66D55F2
Authority key identifier: 33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/zqJqs0sK2IU_r7Lo66UksEA31Mo.roa
Signing time: Sun 01 Jan 2023 20:54:55 +0000
ROA not before: Sun 01 Jan 2023 20:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35175
IP address blocks: 193.143.74.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:1d:b4:52:d4:05:90:b9:ec:82:f2:4f:b6:6d:55:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33ba6c0bcca16c685dc7b9b27f199b42b4beeee9
Validity
Not Before: Jan 1 20:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cea26ab34b0ad8853fafb2e8eba524b04037d4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d9:66:9d:d8:b8:23:2a:80:28:a4:98:ed:d7:
f2:02:f5:4d:99:dd:28:5f:70:66:1e:0c:e0:5a:be:
12:82:93:88:d6:7a:e8:b3:7e:29:7c:38:31:12:06:
2e:8b:99:91:07:f4:a2:19:27:52:b3:e4:15:0f:23:
fc:d8:4f:82:5d:ec:f4:0e:ea:bd:a2:be:6b:5b:a1:
a9:d8:07:43:27:ac:21:27:87:45:f8:d0:d0:5b:9d:
0f:17:1a:37:4b:02:82:40:18:49:42:7b:ef:78:d2:
dd:b4:32:18:88:4c:55:6a:61:91:f4:bb:40:c6:5f:
26:a7:b8:91:ed:5b:ba:2a:f9:c0:87:e3:2e:7e:f6:
20:17:05:10:de:53:1a:49:f5:26:2d:1b:0d:e0:2e:
c8:c2:f5:68:9e:66:62:bc:44:e2:e5:54:ef:5c:8f:
02:cd:13:52:54:47:de:44:7c:ec:86:15:3a:0e:30:
8d:cd:86:f3:cd:dc:d0:04:c9:87:61:2d:4f:f9:f8:
1f:bd:71:4b:83:aa:34:82:9e:91:48:ea:b4:6c:e8:
87:76:8d:ee:5a:57:47:e7:f2:5f:ca:0b:d5:07:f9:
90:39:a5:e0:45:e9:34:eb:56:91:35:3b:1c:0e:d8:
c1:2b:91:66:e1:40:e0:61:bf:e8:48:7e:15:0b:f1:
67:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:6A:B3:4B:0A:D8:85:3F:AF:B2:E8:EB:A5:24:B0:40:37:D4:CA
X509v3 Authority Key Identifier:
keyid:33:BA:6C:0B:CC:A1:6C:68:5D:C7:B9:B2:7F:19:9B:42:B4:BE:EE:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7psC8yhbGhdx7myfxmbQrS-7uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/zqJqs0sK2IU_r7Lo66UksEA31Mo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/510e8f-967f-4137-b4e6-cc75797518a0/1/M7psC8yhbGhdx7myfxmbQrS-7uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.74.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:b2:e5:41:f0:09:10:cc:26:cd:a7:15:8e:85:c2:ac:cd:1b:
5f:4c:58:a4:d5:f3:fc:b7:30:8e:2a:96:57:13:ec:aa:9e:c3:
eb:e0:9f:b1:ec:7f:91:a4:4f:ca:0c:2b:21:64:db:63:f5:c5:
59:d1:3b:45:7b:37:1e:a3:a6:93:8d:cc:f7:70:f9:ff:79:30:
90:15:e0:41:6e:b9:d1:55:d8:7d:a5:40:eb:5f:bf:82:f7:38:
71:a0:1d:b8:f1:2f:9e:91:57:19:4c:fc:ab:21:be:e1:c3:21:
b8:b2:91:c8:31:b5:21:88:9d:a8:45:f1:b0:13:9e:57:9d:79:
e5:2a:18:4b:31:7e:f4:7c:5d:48:ec:e6:a7:f6:22:bd:75:a7:
83:96:6a:82:8d:b6:dd:fe:a8:bc:4b:11:22:74:71:83:85:91:
7f:6c:7b:78:d8:81:42:3c:20:a5:0b:e1:a1:cf:26:34:c8:bc:
be:65:88:65:52:4c:d3:0a:fb:12:f1:e2:b4:92:12:ef:f0:53:
52:0b:b6:f3:47:9c:a1:3f:ac:96:99:2a:f6:3b:dc:f3:1d:dd:
2b:b4:f0:4e:45:9c:a3:83:88:df:12:99:90:fb:8c:8f:bc:94:
89:79:99:6d:ac:bb:91:35:48:6b:d5:5c:ef:1b:31:7b:d4:f2:
e6:de:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:12 2024 by rpki-client on console-ams.rpki-client.org