Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/zC2p9jtHDvX7-komBLQWF0F59iE.roa
File: zC2p9jtHDvX7-komBLQWF0F59iE.roa (raw, json)
Hash identifier: 2kv1JkvyHkDF02e/bbuGq6EkdXppiG16h/8GEWtTFmo=
Subject key identifier: CC:2D:A9:F6:3B:47:0E:F5:FB:FA:4A:26:04:B4:16:17:41:79:F6:21
Certificate issuer: /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial: 01874B7BC14BB12D478132D4F2AFCCEFBB09
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/zC2p9jtHDvX7-komBLQWF0F59iE.roa
Signing time: Tue 04 Apr 2023 08:56:54 +0000
ROA not before: Tue 04 Apr 2023 08:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211356
IP address blocks: 193.163.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4b:7b:c1:4b:b1:2d:47:81:32:d4:f2:af:cc:ef:bb:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Validity
Not Before: Apr 4 08:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc2da9f63b470ef5fbfa4a2604b416174179f621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:9e:fe:50:37:08:89:a3:a7:85:78:c6:c3:
72:36:48:cf:6d:26:4b:5f:c1:69:88:6f:e5:b7:6c:
25:7d:97:77:9f:e4:7d:87:45:8f:24:88:5f:6a:7a:
3d:be:52:a2:46:3c:03:7f:65:b7:cf:0c:84:97:9a:
bb:88:7d:bd:00:a0:34:cc:a7:30:5c:06:98:05:61:
9c:4e:fd:9b:00:49:55:2c:d0:cf:7a:75:a0:64:8d:
7f:2c:c8:70:f4:bc:0a:0c:a4:52:b0:df:6c:af:fb:
ed:f3:86:77:04:ba:56:cb:8f:33:d0:db:7c:30:0a:
4f:d3:7f:eb:85:7b:e6:f6:6c:32:93:bc:17:df:04:
1c:fd:aa:89:be:e7:f5:2a:e3:0a:1a:ee:1a:9e:25:
ad:11:2f:51:5c:87:2f:23:ad:35:d0:9c:91:de:93:
7f:35:7c:f3:a1:a3:f0:af:dd:90:4a:9d:7a:cb:7b:
a1:5f:0b:cc:ae:4b:ce:d9:ee:dd:36:c5:05:d1:d8:
70:70:44:69:02:e4:5f:e6:ba:ef:b7:65:f7:44:79:
59:b8:a0:91:04:61:1d:6b:32:d6:c2:1c:a8:3f:40:
66:d6:9e:c8:89:bd:4a:a3:ee:25:fe:cf:71:3d:67:
a8:41:51:c0:82:08:ff:51:38:f9:bc:93:f1:21:af:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:A9:F6:3B:47:0E:F5:FB:FA:4A:26:04:B4:16:17:41:79:F6:21
X509v3 Authority Key Identifier:
keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/zC2p9jtHDvX7-komBLQWF0F59iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.187.0/24
Signature Algorithm: sha256WithRSAEncryption
55:3e:d6:89:21:b3:8d:a1:4b:c5:89:37:37:87:a4:80:cf:8b:
d6:cc:9c:be:d3:86:49:1a:f8:d0:96:f7:0f:34:9a:c7:d4:a3:
40:2d:fb:48:ae:bc:74:19:26:fd:71:26:68:68:aa:29:b3:c5:
a6:1c:71:62:91:07:6c:7f:af:c9:dc:f7:96:2a:03:b5:81:9a:
7e:e3:2f:f2:03:dc:04:51:12:be:98:72:2b:98:7f:e6:2b:e7:
4b:b2:61:1f:18:60:c8:e0:a4:3e:2a:1a:d7:69:5d:ea:3d:1e:
f3:7c:7a:6c:e7:94:8a:e6:b6:eb:0d:5c:9d:34:6f:b5:77:67:
2a:ec:9b:3c:4f:c9:b8:6c:e7:eb:27:ad:f0:d3:a9:70:85:cf:
b8:45:7e:2e:d4:fc:8d:62:e4:eb:fe:cd:a6:d6:68:ed:80:44:
55:9f:32:9f:2e:2f:ad:6f:17:6f:95:e7:1c:e8:a8:ed:49:ec:
ea:06:5a:f0:5d:af:27:32:7b:15:80:09:bb:cc:ab:2b:74:2d:
9e:07:58:ed:90:5d:ec:9c:8c:66:1f:3a:06:21:da:5d:06:ec:
f8:9e:43:8e:ec:91:0d:00:ec:c2:a6:25:4a:cc:78:8c:30:81:
b6:42:97:5b:cd:75:59:e5:0e:36:04:d8:3c:7d:d8:1a:9a:db:
91:ff:6f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:48 2024 by rpki-client on console-fra.rpki-client.org