Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tzVdH3p4vnY4tEP1aSjH8bl4ZQE.roa
File: tzVdH3p4vnY4tEP1aSjH8bl4ZQE.roa (raw, json)
Hash identifier: ZfIZ217XMi+K/IbNDHRlQh75Fyr+3345E+Sj+5b2gho=
Subject key identifier: B7:35:5D:1F:7A:78:BE:76:38:B4:43:F5:69:28:C7:F1:B9:78:65:01
Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial: 0185710C32BBC1547E9D9A87D9D1FB2FC721
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tzVdH3p4vnY4tEP1aSjH8bl4ZQE.roa
Signing time: Mon 02 Jan 2023 05:55:02 +0000
ROA not before: Mon 02 Jan 2023 05:55:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 193.148.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:32:bb:c1:54:7e:9d:9a:87:d9:d1:fb:2f:c7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Validity
Not Before: Jan 2 05:55:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7355d1f7a78be7638b443f56928c7f1b9786501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:e7:83:78:8a:b2:38:f6:ec:88:72:18:df:
38:43:d1:8a:03:c1:54:21:7b:43:12:3b:51:71:e2:
bd:a3:5f:f3:b7:52:42:d8:5c:43:c9:6a:e9:b4:b0:
b5:b7:fa:9c:7f:66:20:30:1b:66:9d:7d:ba:12:86:
b5:cc:86:23:7c:22:12:73:e0:13:10:68:a7:e4:5b:
cc:4d:c8:8b:13:4b:df:51:bf:a4:10:d5:27:58:55:
22:26:be:ad:5d:a9:74:cb:08:45:8f:79:01:e4:fb:
92:82:cb:70:99:25:9a:1c:82:60:d9:82:14:58:4e:
8e:a8:a5:8d:7e:0a:cc:1e:d6:e3:69:34:ca:c1:a8:
29:4d:96:08:05:73:ed:41:54:45:d9:0f:1b:3a:47:
f0:8a:63:f9:0c:5e:51:ba:cd:02:2e:b5:f2:e9:c9:
d3:19:59:1b:39:36:0f:37:54:30:f4:d1:56:2a:db:
e2:d4:93:da:a3:db:16:b9:ce:09:74:c6:38:b9:e2:
a1:cd:f2:ab:5b:09:6b:22:50:4c:47:c1:2a:78:29:
0c:5e:1c:5a:cd:fb:3e:7f:20:99:8a:35:a8:ee:64:
a5:ca:d2:7b:e7:2a:4e:7b:39:7f:71:f0:cd:f8:ac:
a4:83:7a:7e:11:06:ba:a5:c5:83:ed:19:3b:36:b1:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:5D:1F:7A:78:BE:76:38:B4:43:F5:69:28:C7:F1:B9:78:65:01
X509v3 Authority Key Identifier:
keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/tzVdH3p4vnY4tEP1aSjH8bl4ZQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.148.95.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:71:6b:6a:02:6d:ff:db:e6:99:ae:10:af:54:02:49:57:8a:
a2:9e:87:bd:e6:da:06:1b:46:00:4f:b2:c3:29:8b:20:c5:3c:
d8:9e:7f:37:d7:48:50:34:52:fc:a6:cb:f0:e4:d9:95:7a:cb:
b3:9d:60:0a:32:c2:e7:4f:05:d7:01:5b:bb:3d:b2:9c:96:0a:
e4:4e:3e:e8:b2:00:b6:70:61:e0:1a:37:65:f1:f6:65:27:14:
30:c8:f1:3b:16:dd:15:f2:15:ae:d0:cb:54:da:b3:13:1b:96:
89:58:1d:bf:37:4a:a7:92:72:7c:f5:01:ff:a4:70:af:ce:f4:
08:0f:ce:93:bc:a6:99:be:20:28:4f:8d:5b:3b:62:b0:3b:64:
68:61:79:6b:84:fd:67:a0:0f:c3:0a:31:36:8c:bb:66:02:a6:
02:0e:5e:30:e7:ba:81:22:fd:96:34:07:24:26:40:bf:49:4e:
26:36:44:ca:5e:16:f4:59:74:de:b7:fc:61:4c:e5:2e:3c:d3:
a9:5e:62:dd:76:35:a5:8c:4c:19:8e:db:36:8b:66:17:51:fa:
f5:2e:5d:37:10:35:2b:69:b2:37:ff:33:06:a0:40:1c:25:92:
d3:53:af:ab:94:72:92:1f:43:00:5f:41:c2:60:ad:62:3f:a7:
49:96:c8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:39 2024 by rpki-client on console-ams.rpki-client.org