Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/ZM9SPYWMwZ_TJz9IlIFZgqvc0Nk.roa
File: ZM9SPYWMwZ_TJz9IlIFZgqvc0Nk.roa (raw, json)
Hash identifier: e1Qgq20jt9MynNvtQxKSw80H6coKuKn5WFxjotlM1Ho=
Subject key identifier: 64:CF:52:3D:85:8C:C1:9F:D3:27:3F:48:94:81:59:82:AB:DC:D0:D9
Certificate issuer: /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial: 0191FEF92DDE06AC9383FA1422BBD5DCD5CF
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/ZM9SPYWMwZ_TJz9IlIFZgqvc0Nk.roa
Signing time: Tue 17 Sep 2024 07:53:48 +0000
ROA not before: Tue 17 Sep 2024 07:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.31.60.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 06:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fe:f9:2d:de:06:ac:93:83:fa:14:22:bb:d5:dc:d5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Validity
Not Before: Sep 17 07:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64cf523d858cc19fd3273f4894815982abdcd0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:90:d7:de:07:25:0f:66:4b:08:48:3a:cf:
93:d7:11:6b:90:35:a9:28:a4:c6:1f:d0:b2:61:c4:
33:8e:82:ec:e5:c3:c0:2e:3c:f5:b4:99:b8:78:18:
8a:71:9c:0a:f6:87:21:60:d0:fe:1f:fd:cd:24:45:
11:17:37:d8:af:f3:f2:1d:cc:3d:82:27:4f:27:d2:
03:3f:4e:4f:ff:80:e6:d0:1b:f7:17:a4:12:0a:d8:
91:64:51:e7:73:c6:72:b0:cb:e2:54:dc:54:fc:50:
b4:e5:9d:de:9d:dc:12:94:ff:f7:fd:22:b9:c3:c6:
fc:0e:87:00:d5:06:f3:6d:65:91:85:8d:d5:50:2f:
b3:3a:41:b0:a8:f3:04:bc:42:4e:75:f0:66:33:2b:
03:62:d6:d7:ea:83:a8:40:7a:ee:5b:97:9a:24:54:
b9:b8:02:48:f9:31:93:08:b1:63:cc:47:f5:c2:9d:
b7:e7:c0:8a:2d:92:43:e0:65:50:1e:60:b2:95:aa:
c4:fa:7b:62:3a:21:9b:1a:2f:7e:74:2d:d0:49:33:
57:85:27:fb:5d:e7:e8:b7:8d:d6:83:ee:23:bf:9b:
ef:d6:dd:2b:68:f4:b6:db:dd:04:99:db:f4:ad:59:
d9:8c:6d:c2:cc:1d:a6:38:b0:bd:e5:4d:fa:7f:a4:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CF:52:3D:85:8C:C1:9F:D3:27:3F:48:94:81:59:82:AB:DC:D0:D9
X509v3 Authority Key Identifier:
keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/ZM9SPYWMwZ_TJz9IlIFZgqvc0Nk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.60.0/24
Signature Algorithm: sha256WithRSAEncryption
80:89:b7:7b:32:78:26:bc:61:ea:ae:84:b1:07:31:dc:3b:d9:
94:97:f2:b9:35:18:97:03:38:85:38:dc:97:59:2d:87:a7:32:
5e:95:43:cb:71:97:8c:fe:0f:03:ab:44:2c:68:6f:a9:90:ef:
28:cf:b0:88:d5:c5:71:f4:ae:7c:a1:3d:e5:a3:77:13:45:6b:
87:d3:2b:5b:15:82:05:bc:e4:08:7c:f5:f6:3f:fa:37:62:18:
d3:6b:ae:9c:c6:c2:3c:89:bc:33:3b:09:bf:11:e8:d5:2e:81:
28:eb:46:df:c7:a4:c5:d4:a5:f5:11:ac:e3:49:80:6f:8b:44:
78:4c:d2:8b:b9:66:82:9a:b3:83:58:6e:dc:a0:75:82:be:72:
e2:b3:5c:53:62:66:4b:ab:fb:f6:ee:fa:57:77:00:98:d6:42:
57:61:4f:27:97:7e:7b:8d:de:dd:23:9d:82:f0:81:95:8b:99:
ea:40:29:23:e6:2e:f1:2f:24:d5:68:a7:ac:b9:24:38:89:fb:
31:20:15:b5:8e:8b:2b:c0:55:9f:a6:28:e8:04:81:71:f1:44:
22:e7:ac:e1:e4:61:d7:02:66:c9:92:09:23:1e:4d:6d:ee:77:
3a:c5:62:c7:41:8c:21:45:ef:84:a9:40:39:38:03:80:22:42:
e4:ea:b8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 09:37:22 2024 by rpki-client on console-ams.rpki-client.org