Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/zpbH00jKIDaMQZrRSY2pVe8Ud7o.roa
File: zpbH00jKIDaMQZrRSY2pVe8Ud7o.roa (raw, json)
Hash identifier: J2rezOOfVaVKF1w7iM/c/UOllbNDFeYh8NSTFqCd6Ac=
Subject key identifier: CE:96:C7:D3:48:CA:20:36:8C:41:9A:D1:49:8D:A9:55:EF:14:77:BA
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01881948ECB27CF36F74F81DA2349CE17F8B
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/zpbH00jKIDaMQZrRSY2pVe8Ud7o.roa
Signing time: Sun 14 May 2023 08:03:09 +0000
ROA not before: Sun 14 May 2023 08:03:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 31.193.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 06 Jun 2023 08:04:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:19:48:ec:b2:7c:f3:6f:74:f8:1d:a2:34:9c:e1:7f:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: May 14 08:03:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce96c7d348ca20368c419ad1498da955ef1477ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:95:5d:d0:6d:fa:81:e3:0e:04:02:f8:da:
b1:83:7c:e9:22:e6:c0:72:78:0a:fd:a7:f2:4c:39:
9f:f4:fb:59:8c:1f:7f:24:01:a0:91:f9:b2:78:9a:
2e:f3:ee:fc:e9:8d:3f:15:96:6c:4e:45:b3:f6:10:
d3:9c:ce:9e:d9:df:2e:ab:5d:9a:93:ad:d2:a2:19:
d9:81:ff:f1:6f:f8:aa:76:20:a5:12:47:43:1b:ab:
4a:75:2d:07:6b:ad:b6:de:bc:67:f9:34:5a:b5:08:
22:fe:7d:84:bb:b9:c4:da:ae:82:17:a7:45:bc:d4:
47:93:49:e2:35:48:cd:41:56:78:f8:76:59:cd:d4:
fb:ea:d1:d0:7e:f7:17:f1:ae:b3:2d:af:ad:94:ea:
c7:16:7e:5e:18:20:29:e6:1f:f9:e5:f1:d2:5d:3b:
47:ef:4d:2e:02:9f:e9:e7:be:26:47:4f:aa:5d:2a:
e3:3e:30:71:83:87:66:5e:a0:c5:f5:fd:c0:5e:50:
27:70:1a:f6:5a:37:8c:75:ca:c1:89:fe:b1:95:2f:
e5:e8:07:80:32:d9:26:a8:4c:7f:bc:4b:a6:64:ea:
60:45:a5:8e:07:b9:b8:c7:a3:45:50:23:88:cc:10:
6a:95:cb:0b:4f:77:63:21:79:45:67:72:37:04:8a:
ec:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:C7:D3:48:CA:20:36:8C:41:9A:D1:49:8D:A9:55:EF:14:77:BA
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/zpbH00jKIDaMQZrRSY2pVe8Ud7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
Signature Algorithm: sha256WithRSAEncryption
60:c7:38:c2:7b:05:5b:65:b9:b8:33:41:e1:39:fc:75:d0:ca:
c7:a9:88:1b:d4:ea:ac:81:90:d6:ba:76:2d:e0:bb:e5:49:19:
25:f6:33:f3:ac:16:10:11:a5:d0:78:ec:6e:1e:45:b1:09:70:
06:48:20:7c:bb:49:9a:05:81:96:15:02:b7:f6:c3:40:30:b3:
34:4b:28:d6:15:a8:b4:57:a5:a3:2d:37:c6:f0:15:ea:55:8e:
db:12:3b:0d:0c:be:f8:8c:5e:70:19:a2:f6:48:5d:df:a8:09:
f6:46:b1:7a:1f:9b:a9:6d:09:dd:d3:3d:1e:a9:48:bc:e1:25:
f8:aa:a8:80:99:38:a7:4b:e2:57:90:3f:68:3b:8e:4c:71:9a:
5a:ff:d4:dd:e8:11:1b:47:2b:18:e3:b8:7a:1c:c3:74:e2:ef:
48:a2:66:f0:40:55:e1:5b:3e:15:e7:a3:d5:03:82:fe:fe:9f:
95:2a:ad:7c:02:db:a3:86:62:c0:f8:e5:fd:14:64:20:80:31:
4b:7d:5b:fb:a6:33:76:19:c4:bb:c2:57:65:57:20:06:cc:24:
6a:6c:1e:c5:55:90:b9:6f:b2:43:43:ad:ac:71:17:fe:21:db:
18:0a:05:ba:77:4b:2d:34:e2:ca:e0:d0:ca:d5:7b:b4:2c:24:
d4:e1:4e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org