Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/zCh7M47n4RqSLUDbWjkajn8dFUE.roa
File: zCh7M47n4RqSLUDbWjkajn8dFUE.roa (raw, json)
Hash identifier: of+yHmLz/U+SBA8xApIVndRuK4d/fRP/HDURkqLlwio=
Subject key identifier: CC:28:7B:33:8E:E7:E1:1A:92:2D:40:DB:5A:39:1A:8E:7F:1D:15:41
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 01918E1629FCF0D31B4900F509B7F28C7242
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/zCh7M47n4RqSLUDbWjkajn8dFUE.roa
Signing time: Mon 26 Aug 2024 09:48:22 +0000
ROA not before: Mon 26 Aug 2024 09:48:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215235
IP address blocks: 193.56.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Sep 2024 18:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:16:29:fc:f0:d3:1b:49:00:f5:09:b7:f2:8c:72:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Aug 26 09:48:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc287b338ee7e11a922d40db5a391a8e7f1d1541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:41:04:3b:bb:55:d0:d8:7b:2b:bb:37:fd:
76:24:a4:75:a0:fd:0b:23:41:24:b3:f6:63:af:05:
59:80:e6:4d:22:22:35:f3:0f:ec:f7:d0:e0:55:2c:
9b:80:8b:5e:3b:b8:42:fb:1b:7e:f6:24:f7:1a:d0:
1f:05:8a:e1:07:d1:d1:00:4d:c2:3c:90:2b:61:16:
a5:d1:4b:2d:e5:a4:c9:e0:0d:75:23:a9:ee:ae:49:
64:fc:80:a9:60:9b:b4:3c:16:14:c5:34:1c:6b:c4:
10:1b:b4:f6:8e:3d:f1:27:74:8d:a1:cc:12:0f:0f:
d4:72:29:95:20:68:69:7b:7b:36:a5:90:de:26:38:
e7:9e:9c:80:62:e5:31:4b:0c:9b:c4:37:9f:a8:67:
10:1e:78:d0:0b:19:4f:dc:21:0c:66:36:a7:16:a5:
30:33:3f:02:48:8b:55:fe:b8:2d:6b:61:ca:dd:80:
55:d6:2a:59:85:c7:9d:c5:e2:36:69:15:9a:3e:4b:
74:ea:5e:70:03:7c:95:35:50:d8:0d:47:03:e9:37:
64:69:d8:75:fc:84:df:45:7c:2f:90:c3:82:d5:22:
22:00:03:2c:9f:7c:2d:6b:36:5b:c6:e5:62:66:ed:
c5:31:0c:70:3a:dc:4b:ce:1d:4f:5b:1d:c2:f4:b7:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:28:7B:33:8E:E7:E1:1A:92:2D:40:DB:5A:39:1A:8E:7F:1D:15:41
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/zCh7M47n4RqSLUDbWjkajn8dFUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.3.0/24
Signature Algorithm: sha256WithRSAEncryption
64:52:f1:f2:53:e6:c1:63:34:6c:c6:20:8c:0d:6a:e6:4f:57:
72:7c:a4:7d:2c:bd:4f:f0:65:f1:48:01:4a:38:c7:95:83:d7:
ef:ff:ab:31:21:7f:5e:29:4d:85:f6:8c:9c:07:f3:f3:15:c3:
93:cc:13:22:e5:06:73:67:5d:d9:e3:28:bb:8c:77:90:b5:48:
e6:7a:c8:cd:bd:de:e7:c6:fb:70:92:27:a8:3d:a0:16:a6:26:
b2:80:0a:7c:95:f9:fe:67:eb:2c:29:14:50:22:f1:7c:57:8a:
67:c2:1c:d6:fa:68:27:3e:91:04:f9:0d:b4:37:bc:be:26:f5:
70:93:a6:4d:29:11:a2:f4:3a:fd:ad:37:48:fe:be:9c:45:41:
3c:7a:9c:37:b2:c0:bf:66:c5:d9:c2:e5:47:fc:16:02:df:5a:
7e:94:79:03:46:bf:36:cc:f0:3b:dd:57:13:d3:fc:d0:74:e4:
91:23:18:37:90:01:ce:05:1f:4f:75:a7:ba:86:e9:71:fc:86:
cf:59:d9:b4:5e:7f:6d:a5:d4:5d:41:82:31:de:47:79:ec:4d:
d9:ff:26:c4:ec:5b:9d:b0:c8:d3:83:46:52:ef:5a:11:17:4a:
19:de:47:5d:45:b4:26:1b:99:ba:4f:6d:a8:7d:87:ee:21:10:
f7:f0:62:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 24 23:07:59 2024 by rpki-client on console-ams.rpki-client.org