Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/zIR1CDyFRm0Zi4HAzZqs_ItMEAc.roa
File: zIR1CDyFRm0Zi4HAzZqs_ItMEAc.roa (raw, json)
Hash identifier: 0pt+55CrAg0OHU2Jb/ntJZbxw9tdsdY6OK2ISnbA018=
Subject key identifier: CC:84:75:08:3C:85:46:6D:19:8B:81:C0:CD:9A:AC:FC:8B:4C:10:07
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 01856C5CA2702971C2522F70E1A87B393528
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/zIR1CDyFRm0Zi4HAzZqs_ItMEAc.roa
Signing time: Sun 01 Jan 2023 08:04:48 +0000
ROA not before: Sun 01 Jan 2023 08:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133466
IP address blocks: 149.226.192.0/21 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:35:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:5c:a2:70:29:71:c2:52:2f:70:e1:a8:7b:39:35:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jan 1 08:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc8475083c85466d198b81c0cd9aacfc8b4c1007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:79:b6:93:5e:f5:c6:1f:2e:4a:4f:97:e8:cb:
18:55:0d:76:af:e9:ae:c8:98:44:0e:4e:a0:1d:75:
2d:c7:fa:ca:1a:bb:d5:b7:a3:df:fd:f2:95:e8:ba:
51:0b:8a:41:5c:16:5a:35:ef:7e:a1:ce:8f:b3:de:
ff:8c:79:8a:2e:a7:00:bf:e3:46:6e:0b:54:f5:6d:
eb:ab:af:3a:02:81:79:7c:05:09:3d:f6:08:16:24:
72:e4:99:51:61:db:07:ee:b2:99:19:09:54:8b:26:
7f:78:fd:fd:7d:52:c9:07:5e:93:a8:33:0d:4d:4d:
33:a5:40:01:1b:1b:e4:ae:9a:8c:2b:4a:99:7b:03:
cd:db:77:f1:63:c7:ad:89:d2:c3:e2:10:af:60:00:
eb:d8:e1:5f:c6:62:96:09:d0:6d:31:59:4f:2d:40:
76:70:23:b3:4d:0e:1f:f0:45:6a:19:a0:54:98:1c:
fe:af:1c:ca:c6:58:ce:0d:35:8a:8c:3e:1e:21:c2:
29:e3:8b:f0:ae:e0:36:a5:94:d2:1e:90:c7:7d:87:
35:b5:7d:67:2d:8b:d1:88:cb:60:23:28:f8:b6:91:
93:0f:1d:82:8e:8c:e2:19:27:17:28:74:57:96:14:
d8:99:81:98:dc:6b:37:50:f8:4f:11:04:b9:37:36:
b3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:84:75:08:3C:85:46:6D:19:8B:81:C0:CD:9A:AC:FC:8B:4C:10:07
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/zIR1CDyFRm0Zi4HAzZqs_ItMEAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.192.0/21
Signature Algorithm: sha256WithRSAEncryption
87:6a:38:74:ae:0a:b5:50:8d:5d:7c:23:55:bd:87:51:a6:53:
1d:d9:d6:c8:85:5c:3f:17:91:14:b8:19:bc:7b:c8:6d:c9:8b:
51:9e:b6:21:5f:6b:18:21:68:51:50:08:c6:53:a3:74:0a:44:
f3:c8:86:6b:e4:88:ef:2b:74:8c:7a:9b:12:31:28:30:82:d6:
8e:ee:2d:12:70:58:59:9b:f2:dc:c4:df:8b:2d:31:c8:b3:32:
68:d2:80:ed:c0:ae:a8:56:57:6b:a4:5e:c4:7a:74:2b:16:9b:
c9:36:05:08:01:73:2a:bb:ed:79:a0:a8:c1:2f:0d:82:2c:36:
92:f3:d8:02:4a:81:e1:d3:48:85:99:4f:f8:37:f9:f8:f6:21:
58:68:06:4f:06:74:09:03:6f:f7:b3:82:3e:20:aa:10:91:68:
52:e0:9d:80:5d:a9:79:8a:08:54:2c:be:03:13:36:73:86:27:
73:21:b2:50:2b:09:53:5d:70:71:85:f8:d6:2b:f2:93:30:e5:
f2:66:96:4d:e3:77:9a:c9:20:c3:8b:98:62:d8:b8:ae:4a:1c:
1b:ff:b6:f2:cd:18:52:fd:e3:5d:3d:b1:2e:e7:94:1d:b6:d8:
b0:e7:ee:1d:39:25:a4:98:60:76:2f:51:34:78:98:78:a2:ee:
00:c4:76:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:06 2024 by rpki-client on console-fra.rpki-client.org