Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/ZCSrNoQU7HAby-jpp67eNsklOM8.roa
File: ZCSrNoQU7HAby-jpp67eNsklOM8.roa (raw, json)
Hash identifier: RUdMDFIp769iib2wWiJtklFjz3Mm4AcNeUjFeAsKQsM=
Subject key identifier: 64:24:AB:36:84:14:EC:70:1B:CB:E8:E9:A7:AE:DE:36:C9:25:38:CF
Certificate issuer: /CN=de05ab283d2b544673b7d7229f32b962cfc68a1e
Certificate serial: 01856D9407C546DEA0755E28EE0BF8B2F14C
Authority key identifier: DE:05:AB:28:3D:2B:54:46:73:B7:D7:22:9F:32:B9:62:CF:C6:8A:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gWrKD0rVEZzt9cinzK5Ys_Gih4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/ZCSrNoQU7HAby-jpp67eNsklOM8.roa
Signing time: Sun 01 Jan 2023 13:44:55 +0000
ROA not before: Sun 01 Jan 2023 13:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.3.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:07:c5:46:de:a0:75:5e:28:ee:0b:f8:b2:f1:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de05ab283d2b544673b7d7229f32b962cfc68a1e
Validity
Not Before: Jan 1 13:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6424ab368414ec701bcbe8e9a7aede36c92538cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:7f:d5:52:35:57:4e:5b:e4:e8:1e:4f:58:
49:90:cd:90:11:96:b4:bb:76:b1:14:e4:e4:cb:f7:
b9:4f:6c:ea:a4:b5:cd:d1:76:7e:58:fb:61:42:9e:
74:21:4a:d9:b2:96:22:61:95:88:35:9d:7d:57:22:
9a:de:8e:3f:e1:83:46:51:a9:c3:d1:d0:9b:01:11:
95:dc:d1:c0:05:86:a2:b5:de:70:5b:de:af:8b:87:
7c:4f:e7:a2:33:d1:a7:1c:85:76:22:e7:9a:f9:84:
3f:8c:95:ee:b0:61:56:1e:ca:b5:ef:41:07:85:97:
74:c2:6a:d1:ad:dc:de:99:e9:05:77:3c:01:65:1a:
9e:82:db:6e:3a:1f:09:02:bd:29:15:84:35:d2:5d:
58:0b:20:e4:a6:7d:b4:55:93:3b:89:76:77:f7:be:
44:63:61:3b:ed:2c:1d:ad:a7:45:7d:88:fb:5d:98:
c7:09:da:3f:e3:dd:b3:e9:a4:57:de:e7:a5:4e:fe:
6a:e8:90:2c:48:e4:53:27:f6:37:c4:0b:62:b4:cd:
a6:b3:2a:f2:62:11:fd:81:33:d4:31:03:65:bf:d6:
03:9e:2b:ba:2c:a0:b3:b6:b6:1f:2f:a2:c3:74:f3:
68:9f:59:46:32:9b:81:97:ec:fb:34:05:54:87:08:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:24:AB:36:84:14:EC:70:1B:CB:E8:E9:A7:AE:DE:36:C9:25:38:CF
X509v3 Authority Key Identifier:
keyid:DE:05:AB:28:3D:2B:54:46:73:B7:D7:22:9F:32:B9:62:CF:C6:8A:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gWrKD0rVEZzt9cinzK5Ys_Gih4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/ZCSrNoQU7HAby-jpp67eNsklOM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d9540d-2ecf-4e0d-ab24-6a737deabb0f/1/3gWrKD0rVEZzt9cinzK5Ys_Gih4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1a:48:c0:43:99:5e:2f:93:2f:b4:ab:3a:a2:f5:3f:6b:a6:
52:4f:b3:45:bb:1f:25:8a:de:f7:39:93:b6:8e:0d:af:dc:c9:
ff:70:ca:b2:32:37:47:e2:e4:bf:63:13:7e:b5:92:08:a1:93:
67:6f:e9:86:3d:8e:b7:cb:3e:a1:c9:91:d0:96:4e:b3:eb:f6:
fe:cb:d5:7a:f8:9f:11:f6:ef:31:5e:27:5c:3b:74:b8:29:56:
ad:22:7c:c1:9b:c3:3e:52:88:03:b8:cb:e2:95:99:75:f5:b3:
36:0f:83:96:74:25:88:94:eb:5d:c3:0c:86:24:f4:c3:11:3e:
22:f4:0f:32:00:dd:59:6a:3a:b3:2c:6a:3b:99:39:ff:d3:96:
4d:5b:a4:04:fb:f8:31:09:22:a4:00:da:21:f7:32:fe:b1:44:
c7:21:8c:b3:5c:f8:dc:e2:cc:99:2f:3e:28:6a:e0:40:82:bc:
bd:b4:4b:cd:83:e6:25:c6:ca:42:4a:75:41:a9:05:6d:e8:ea:
69:65:de:35:65:01:0f:49:17:f7:c6:f4:41:a4:ad:bb:2d:6f:
90:87:e4:81:81:68:ad:fe:c9:98:5d:2f:c8:ea:17:34:7b:99:
de:1c:35:c9:d5:bb:6d:ef:02:51:e6:ba:f5:68:62:0d:4a:5e:
97:88:f4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:04 2023 by rpki-client on console-fra.rpki-client.org