Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zhTdk3XQJvHKB5pZgMY27RBKEJU.roa
File: zhTdk3XQJvHKB5pZgMY27RBKEJU.roa (raw, json)
Hash identifier: zZSjKLa7uj3XDF1etWQO8z76CapY6gVuTXxQPmIsdkk=
Subject key identifier: CE:14:DD:93:75:D0:26:F1:CA:07:9A:59:80:C6:36:ED:10:4A:10:95
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01856E41E6C9FF28A38F2CC736192A3E8E6F
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zhTdk3XQJvHKB5pZgMY27RBKEJU.roa
Signing time: Sun 01 Jan 2023 16:54:50 +0000
ROA not before: Sun 01 Jan 2023 16:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210713
IP address blocks: 93.115.44.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:41:e6:c9:ff:28:a3:8f:2c:c7:36:19:2a:3e:8e:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 16:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce14dd9375d026f1ca079a5980c636ed104a1095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:58:3e:5f:4a:51:28:1f:40:a0:eb:52:81:
fc:d3:b3:92:5b:fd:fc:63:33:63:3e:8b:3e:22:fd:
e0:c9:bf:e4:52:85:54:fd:35:56:f0:c0:91:21:b4:
2f:4b:36:85:c4:b9:c9:a9:91:3b:dc:df:f0:f9:29:
20:4d:51:11:37:f0:d3:7e:5c:88:1c:71:6a:66:9b:
e2:54:ae:43:f1:94:d7:47:ae:72:ed:be:1d:37:dc:
2a:be:de:3f:22:1d:d9:84:0f:9d:f6:ea:a4:06:e6:
48:76:12:6e:42:fd:a0:c5:b1:bb:61:5f:8e:d3:00:
b8:f8:74:66:02:5c:af:eb:e4:c0:d3:a5:d7:48:f0:
2b:57:aa:8b:6b:d9:76:06:cb:7c:4a:b5:dc:f2:ae:
9c:0b:69:15:8e:cc:d1:89:a5:60:de:eb:b5:b9:4a:
14:fb:4c:87:3d:94:b9:4a:12:39:59:d3:6c:4f:9c:
41:06:9c:a1:f1:38:58:d8:0a:74:6a:e4:8a:2a:8f:
0e:85:4e:c7:95:82:11:34:3e:f7:2a:a6:53:93:85:
36:43:44:8c:ef:f2:21:85:b2:5e:c9:cb:85:24:79:
94:f0:b2:6a:e1:59:69:81:62:35:7f:cb:da:d0:60:
7e:b5:89:e4:0b:5c:18:ba:cc:f8:1e:cc:51:d4:77:
47:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:DD:93:75:D0:26:F1:CA:07:9A:59:80:C6:36:ED:10:4A:10:95
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/zhTdk3XQJvHKB5pZgMY27RBKEJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.44.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:bf:76:af:c6:27:af:67:88:e0:01:8e:71:fa:5c:a2:d7:fa:
33:30:74:b3:86:34:16:7d:92:aa:54:a7:0e:77:7f:b9:a0:15:
66:f1:d9:5c:56:53:4f:72:ae:15:6b:68:14:4d:57:09:5c:4f:
20:08:f0:a8:32:84:b3:b2:1f:9e:bd:63:9d:cc:fa:4a:81:c4:
5c:23:17:e8:ff:cd:68:59:47:af:12:f3:68:4a:aa:22:20:e0:
55:c0:40:75:cb:87:b2:03:ff:1d:1d:03:ab:36:7a:62:77:03:
55:c5:80:3e:3a:0c:07:ad:c2:8a:19:10:88:aa:24:1b:4b:25:
fc:fc:85:75:2b:29:10:a4:56:61:e4:64:b1:e2:6f:e9:3a:65:
34:c7:2b:6c:77:73:fa:dc:3c:48:ea:24:5a:eb:31:c3:8a:80:
4e:29:b9:d8:40:d7:47:8e:51:5e:82:ab:ee:b9:43:21:93:1e:
5b:5b:37:bc:86:ca:0e:0b:58:87:fe:47:d6:c0:66:d7:a0:f6:
f8:41:82:d9:39:df:d9:bb:88:3d:01:bc:66:8f:15:ef:9b:d5:
f5:35:76:1b:35:d0:ef:d2:01:8e:e7:78:01:cf:21:51:1a:eb:
9b:c8:12:5f:3c:af:38:03:99:1f:29:8c:12:93:b3:60:c5:22:
37:53:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:41 2024 by rpki-client on console-ams.rpki-client.org