Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/z_J7UsbqqMFcoajZ4VUv5PkkZAk.roa
File: z_J7UsbqqMFcoajZ4VUv5PkkZAk.roa (raw, json)
Hash identifier: BQlNJAPuAqirIMPBbTTq1jNUbOegsXb3sSjgBcu1FB8=
Subject key identifier: CF:F2:7B:52:C6:EA:A8:C1:5C:A1:A8:D9:E1:55:2F:E4:F9:24:64:09
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB84EFAA0ABB7E5C35A17EEA26B4DBE
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/z_J7UsbqqMFcoajZ4VUv5PkkZAk.roa
Signing time: Sun 01 Jan 2023 09:44:56 +0000
ROA not before: Sun 01 Jan 2023 09:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41951
IP address blocks: 193.252.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4e:fa:a0:ab:b7:e5:c3:5a:17:ee:a2:6b:4d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cff27b52c6eaa8c15ca1a8d9e1552fe4f9246409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d9:06:64:d8:4b:74:e0:24:db:96:52:32:ef:
c4:db:1c:f9:5f:18:eb:31:f7:1d:ec:91:37:fb:54:
2d:ba:8b:f0:e3:69:bb:73:ec:87:84:4c:ec:81:7f:
4f:27:63:30:79:bf:fc:1b:8d:1b:c2:b5:31:85:3d:
7d:e5:21:ec:53:da:cd:0d:a2:9a:d0:00:d9:31:b7:
57:3f:3c:51:e8:ef:fc:56:e9:db:c3:72:b8:13:36:
3f:33:a4:8a:dd:5f:e9:50:eb:1b:af:c9:86:9e:bd:
32:be:50:e1:79:d1:22:e3:1b:3f:cb:a3:ee:ed:c7:
72:1b:57:6e:b6:e0:f7:cc:36:50:b2:a0:07:5d:81:
c2:f6:dc:01:f0:60:b4:35:bb:ec:be:f3:d2:e4:24:
9a:86:46:fa:99:22:c3:9d:b7:e9:39:be:e4:37:b3:
b9:d9:c9:4f:fb:18:0f:ae:1d:a1:f3:51:f4:db:bf:
52:b8:f6:f2:d3:b7:f5:05:93:4a:a6:5d:d1:b1:7a:
34:ca:42:45:5a:79:8d:2b:17:10:39:8a:d0:9a:6d:
b2:1c:6b:1a:11:f1:83:c9:98:4c:81:86:fb:27:ea:
b0:45:6f:ba:3f:eb:19:29:7e:83:97:22:89:6d:14:
6e:79:ce:b7:2b:bf:11:15:42:4b:d8:fe:6f:b4:85:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F2:7B:52:C6:EA:A8:C1:5C:A1:A8:D9:E1:55:2F:E4:F9:24:64:09
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/z_J7UsbqqMFcoajZ4VUv5PkkZAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.252.16.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:ab:19:6c:97:45:eb:3d:e7:25:f0:c5:6c:a2:1e:bf:7d:c8:
88:af:c8:cc:db:93:a6:ed:75:1d:35:40:b6:e8:df:8f:05:fe:
d2:7a:f9:9d:3a:3a:96:94:df:41:16:a0:cc:15:48:61:f3:ab:
cc:34:8f:e5:b4:09:31:35:74:05:68:72:17:0e:0e:82:a2:3f:
92:e5:0c:e0:3a:f0:fa:ab:5c:f6:97:26:45:2a:c2:36:75:9f:
22:f9:42:f1:4f:3e:6f:be:2d:24:14:85:b4:a8:55:1a:a7:86:
3d:ea:75:e3:ee:fe:ba:1b:9c:03:a1:77:3e:92:5a:a0:9a:2c:
09:cc:36:32:17:01:04:f6:c6:d0:56:17:78:6e:dd:b4:1e:c6:
df:f0:7b:18:8e:9b:70:8c:55:10:75:22:c4:e0:03:0e:17:19:
0a:8a:59:20:4c:4d:98:58:59:65:4a:e0:a4:34:d0:7b:82:f4:
4d:3e:48:75:00:05:bc:8d:3a:50:d1:19:2e:25:84:d6:f7:48:
95:30:4f:ac:69:b2:4b:0a:9d:98:55:a7:d2:ba:63:5c:8a:9a:
59:07:27:58:13:01:b3:a7:bc:8e:b4:3f:33:df:1b:4c:9e:71:
a3:f0:eb:f7:a2:9d:d5:01:45:ff:ed:50:e5:5d:27:45:fa:2d:
d8:01:b2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:52 2024 by rpki-client on console-fra.rpki-client.org