Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/ZFyb18PaDHyGPu3i2twzNId0Ko4.roa
File: ZFyb18PaDHyGPu3i2twzNId0Ko4.roa (raw, json)
Hash identifier: WrzkIze8qr4geNnsymUZQyN686oI1a30mRBmmqN0804=
Subject key identifier: 64:5C:9B:D7:C3:DA:0C:7C:86:3E:ED:E2:DA:DC:33:34:87:74:2A:8E
Certificate issuer: /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial: 01856ECB9C2C4551F19D9EC4F0A6BA6CE582
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/ZFyb18PaDHyGPu3i2twzNId0Ko4.roa
Signing time: Sun 01 Jan 2023 19:25:15 +0000
ROA not before: Sun 01 Jan 2023 19:25:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209140
IP address blocks: 193.105.84.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:9c:2c:45:51:f1:9d:9e:c4:f0:a6:ba:6c:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Validity
Not Before: Jan 1 19:25:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645c9bd7c3da0c7c863eede2dadc333487742a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0c:f9:4e:f1:83:bd:47:67:1e:23:ce:b1:a6:
4e:46:84:b5:a2:93:cc:ba:59:05:de:0c:1f:bf:46:
48:3a:9e:98:e6:9a:73:a8:93:cd:48:7e:3a:9e:8a:
b9:ad:bf:85:86:26:8d:33:35:e5:c2:42:48:db:0a:
d8:80:fe:79:14:c9:d5:95:c5:fb:c4:17:81:af:ea:
7d:12:5d:d0:36:01:08:1f:7c:2a:0c:49:eb:99:40:
cf:7c:c9:0b:08:5a:be:88:ff:a6:87:8f:60:eb:31:
1a:20:c1:0c:72:35:ba:d9:17:d1:23:ee:9c:c1:4f:
34:c0:82:1e:54:1b:78:c2:4b:0e:3a:66:41:9a:fd:
68:3f:ed:bd:40:44:49:d0:d4:71:f1:ac:bc:97:58:
e8:6c:46:74:6b:78:40:76:69:c4:af:0d:1e:41:b1:
53:b9:e1:15:71:88:9e:ec:c7:2e:65:a6:ee:d6:c8:
80:20:67:b9:d4:95:55:dd:e1:1f:2e:4e:ec:dd:44:
af:d1:31:84:4e:f3:13:50:97:00:ce:ab:87:79:3a:
3c:a6:25:83:bc:a2:ca:b8:f5:46:93:70:87:29:80:
97:2d:4d:9b:0f:3c:f9:08:4f:38:fe:2e:bb:b7:08:
d3:4e:fd:99:f4:dd:d4:5b:fe:ce:9e:1b:6e:20:67:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:5C:9B:D7:C3:DA:0C:7C:86:3E:ED:E2:DA:DC:33:34:87:74:2A:8E
X509v3 Authority Key Identifier:
keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/ZFyb18PaDHyGPu3i2twzNId0Ko4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.84.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e9:ab:1e:88:31:fd:3c:8b:c5:cd:d0:22:9a:d0:56:be:fb:
d3:d6:34:7e:4e:6a:12:3c:c0:5a:8f:26:45:23:5e:e5:15:fa:
e2:81:f6:5b:f6:46:c9:e6:ac:c5:c6:e5:88:bc:e4:dd:91:4b:
5d:d3:73:fa:a6:a9:3a:1e:47:33:4b:b9:99:46:97:a8:95:33:
f4:60:7c:21:cd:fa:ad:72:e1:85:bb:80:87:b9:cd:ed:bf:31:
6d:0a:34:3d:59:24:ca:ee:71:7b:45:85:73:9f:a2:2d:97:5e:
08:05:d2:41:06:f8:e6:b1:d4:fb:47:2c:24:f1:f3:71:85:ae:
af:27:be:75:82:98:16:ce:02:20:a7:c2:15:17:73:10:d2:04:
1f:a8:bb:c2:3e:90:24:59:a6:ef:88:1e:87:d6:f0:29:ea:67:
0f:12:3f:21:12:50:89:e3:57:e2:39:90:8e:84:a0:3e:ca:b2:
2c:4e:13:00:90:81:47:19:4b:b1:c6:5f:55:e0:0c:79:c9:16:
d4:0c:d1:66:e2:3d:34:ea:c4:62:b3:86:c7:95:fa:e8:fb:6f:
6b:69:ca:80:0f:d5:c7:1d:b1:70:25:15:22:c5:b3:71:fb:32:
5d:92:1f:c3:e6:f6:07:fe:96:19:ad:3d:0d:87:81:f7:74:8f:
34:bc:2a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:04 2024 by rpki-client on console-fra.rpki-client.org