Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/1-zfhQFIaBiGrfgRIeqDS35j9ZoE.roa
File: 1-zfhQFIaBiGrfgRIeqDS35j9ZoE.roa (raw, json)
Hash identifier: C4RH6PmzahasJivUdVlFId6sMqz8fLaalCv/gYN39lA=
Subject key identifier: FB:37:E1:40:52:1A:06:21:AB:7E:04:48:7A:A0:D2:DF:98:FD:66:81
Certificate issuer: /CN=dd0b663c45d7bc2724d168485087581e14448fb6
Certificate serial: 018570FBC41A33553DC99FDB3C44032C4CE8
Authority key identifier: DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/1-zfhQFIaBiGrfgRIeqDS35j9ZoE.roa
Signing time: Mon 02 Jan 2023 05:37:05 +0000
ROA not before: Mon 02 Jan 2023 05:37:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34370
IP address blocks: 193.227.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:c4:1a:33:55:3d:c9:9f:db:3c:44:03:2c:4c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd0b663c45d7bc2724d168485087581e14448fb6
Validity
Not Before: Jan 2 05:37:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb37e140521a0621ab7e04487aa0d2df98fd6681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:a2:f4:b6:62:e8:39:12:e5:2b:7c:6c:0b:
c7:a3:73:6e:e8:c0:5e:e5:af:f3:d4:15:63:20:b8:
aa:38:cd:ce:af:40:44:45:44:25:f6:7e:09:19:6e:
ca:d4:8f:d8:67:4b:0f:1c:c6:8f:4f:9d:e5:3c:35:
5a:5b:fe:07:27:af:c7:dc:be:4c:6b:1b:ce:d3:4e:
fa:4c:e4:8b:73:ff:b2:4a:d6:c9:5c:b4:fb:8a:a9:
67:9c:9c:91:8c:bf:bd:22:41:0a:7a:77:57:bb:ee:
61:49:7f:e4:23:72:4d:49:4d:6f:dc:08:6b:c3:03:
27:3b:32:77:55:e8:7f:ef:96:0f:4c:ef:3c:e4:50:
5d:d7:3f:da:80:2c:e5:a3:69:9c:c7:6a:f8:a8:3b:
d2:75:bc:ec:f7:65:f2:c3:35:3b:29:c0:6e:21:53:
24:9c:21:1a:d2:78:69:92:1d:b0:9f:d6:15:f3:e2:
83:60:a3:98:53:33:07:c2:58:8b:38:ab:a1:40:6a:
21:44:95:66:54:bc:cd:58:b5:33:e7:88:f2:a6:16:
b7:89:40:cc:74:8e:75:36:a3:62:aa:2b:e5:19:54:
3b:38:89:e3:95:d6:62:0a:2f:c3:66:0c:4f:91:ce:
f1:9b:f7:b0:7c:83:24:48:0b:59:f6:86:53:5b:fc:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:37:E1:40:52:1A:06:21:AB:7E:04:48:7A:A0:D2:DF:98:FD:66:81
X509v3 Authority Key Identifier:
keyid:DD:0B:66:3C:45:D7:BC:27:24:D1:68:48:50:87:58:1E:14:44:8F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3QtmPEXXvCck0WhIUIdYHhREj7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/1-zfhQFIaBiGrfgRIeqDS35j9ZoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/edc238-4c0a-46ed-bc24-3b9e3c8a2fca/1/3QtmPEXXvCck0WhIUIdYHhREj7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.181.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:95:21:16:e0:85:bf:cf:3f:c5:f5:52:63:6e:fd:d6:22:5f:
9c:7e:92:f4:20:d5:14:78:25:e7:27:37:3c:20:3a:7c:fc:ca:
65:ce:b5:65:67:95:b5:a3:00:85:c3:8d:1a:7f:af:52:bc:4b:
a7:65:74:e5:13:db:49:2e:d9:37:b2:71:2a:69:2b:b0:06:f5:
19:e0:56:ca:e1:89:b4:11:e3:8d:60:2e:b4:42:6a:d1:06:d9:
78:89:44:ff:36:53:65:e9:4c:26:4f:a6:21:a2:2c:5d:94:b2:
d7:5f:b3:95:c4:10:7d:dd:09:c2:96:0c:4c:d9:04:3d:62:2c:
b7:20:92:9c:b6:6c:48:62:f9:ed:02:eb:ec:e3:11:a0:41:fc:
3a:01:5d:41:95:e6:0e:86:3d:6a:1b:ac:41:ff:ec:3a:39:ff:
11:0c:52:dc:75:63:b0:f4:dc:08:cf:72:b8:fb:b4:53:00:b9:
8c:52:1d:bd:dc:08:bf:01:9a:a8:85:c8:e4:18:be:d5:8e:26:
a2:f6:51:bf:ab:8e:d7:51:4e:33:52:8f:9a:4a:2c:92:f2:32:
3f:3d:f1:ca:01:ec:f1:d4:5f:51:bf:a9:4e:ac:c2:f0:19:ca:
6a:59:80:76:fa:ae:60:62:47:5a:40:32:67:70:f7:8c:b8:f1:
f8:f3:2f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:05 2024 by rpki-client on console-fra.rpki-client.org