Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/ZSlMKZWDJ3_iNPmK4fBxSzf1pO0.roa
File: ZSlMKZWDJ3_iNPmK4fBxSzf1pO0.roa (raw, json)
Hash identifier: 2Gr3rkqtsYf0ufEnpymtMQJHKlaaL+pv76MDwjh7b6c=
Subject key identifier: 65:29:4C:29:95:83:27:7F:E2:34:F9:8A:E1:F0:71:4B:37:F5:A4:ED
Certificate issuer: /CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Certificate serial: 01856D5CFC5F456D532A774287EFACFAF599
Authority key identifier: 3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/ZSlMKZWDJ3_iNPmK4fBxSzf1pO0.roa
Signing time: Sun 01 Jan 2023 12:44:48 +0000
ROA not before: Sun 01 Jan 2023 12:44:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31027
IP address blocks: 193.104.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:5c:fc:5f:45:6d:53:2a:77:42:87:ef:ac:fa:f5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aa32ee01266e018d2365c3bba1772f424179ac2
Validity
Not Before: Jan 1 12:44:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65294c299583277fe234f98ae1f0714b37f5a4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:21:f1:47:d3:10:cd:8e:f4:e3:55:ac:67:e8:
a4:14:2b:8d:31:9a:b0:19:94:0c:a5:a4:b3:f1:e4:
bf:d3:ea:6a:ca:38:c1:94:b2:b0:2e:da:da:bb:5d:
0a:0f:c3:2d:df:71:6d:36:dd:de:57:e7:18:52:43:
b3:7a:d9:65:60:58:67:90:f4:c5:bd:42:fa:26:56:
1d:fa:6f:1f:8f:64:4e:4c:48:f5:52:b0:28:6b:cd:
85:2b:f0:8d:f4:9d:77:55:93:41:ba:1d:76:50:02:
29:38:0f:ff:51:91:ae:ac:c8:1b:64:ad:56:66:b8:
31:89:81:dd:05:56:a4:30:53:8c:85:4a:b0:b4:6e:
41:47:53:2f:ae:3c:68:ca:77:48:71:51:cb:88:58:
45:05:8e:bd:e3:26:ac:40:50:0d:d0:54:01:42:b6:
81:70:12:33:f7:29:47:c6:fc:1d:57:a3:72:db:c9:
ff:99:d4:7d:33:7d:b1:5d:19:59:31:ae:83:12:93:
98:20:3d:0a:49:9e:03:b8:e1:bc:85:8c:b5:cc:87:
0f:32:68:d3:03:28:52:a7:82:c5:62:d8:05:af:9a:
74:cd:09:28:a6:46:0e:e3:03:f8:3a:6c:ac:de:a2:
65:7a:99:70:0a:2c:ad:c1:2f:28:ed:b1:d6:d1:00:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:29:4C:29:95:83:27:7F:E2:34:F9:8A:E1:F0:71:4B:37:F5:A4:ED
X509v3 Authority Key Identifier:
keyid:3A:A3:2E:E0:12:66:E0:18:D2:36:5C:3B:BA:17:72:F4:24:17:9A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OqMu4BJm4BjSNlw7uhdy9CQXmsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/ZSlMKZWDJ3_iNPmK4fBxSzf1pO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/a13a17-6c73-4c78-9752-949dbe9b57fe/1/OqMu4BJm4BjSNlw7uhdy9CQXmsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:3d:38:89:d7:b2:bb:66:47:2a:11:5c:d7:8a:54:d9:56:31:
11:24:36:06:09:3c:cb:7d:6b:db:e1:68:9e:bf:ec:dc:cd:3c:
34:85:f4:37:df:27:b6:25:eb:00:4f:45:39:ee:33:d8:bc:66:
ad:0f:8e:c4:ce:45:46:88:7b:75:f4:ba:d3:35:09:52:4e:d7:
96:e4:63:76:e8:47:c3:db:ff:1b:1e:e1:d5:76:4d:35:1f:17:
44:7e:2b:4e:25:61:13:4f:19:48:57:3e:88:b4:6b:c9:bf:8c:
21:e1:46:36:54:d2:d5:15:0f:96:55:e0:46:bf:99:1f:1b:60:
5a:d5:da:ef:bd:0b:b5:bd:e6:cb:c8:e5:8f:6b:7b:50:68:7e:
1f:ff:78:55:8f:a7:da:47:91:8f:83:c0:3f:62:a1:10:83:92:
97:09:6c:0c:e6:fb:c0:23:d1:ba:61:8f:03:0f:67:fe:3b:99:
9b:5b:98:d4:c4:a5:69:78:db:fe:86:40:38:28:e4:59:f9:d1:
7f:34:ad:10:62:d1:79:3f:1a:1f:84:c7:aa:95:8e:d2:b1:d3:
fc:dc:70:3f:ca:b2:9e:97:9e:79:cd:37:7d:84:31:21:2c:bb:
b4:c6:81:9f:de:ae:db:ec:4d:37:98:b4:dc:f2:c4:4d:ca:d9:
00:e9:a0:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtXPxfRW1TKndCh++s+vWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYTMyZWUwMTI2NmUwMThkMjM2NWMzYmJhMTc3MmY0MjQx
NzlhYzIwHhcNMjMwMTAxMTI0NDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NTI5NGMyOTk1ODMyNzdmZTIzNGY5OGFlMWYwNzE0YjM3ZjVhNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgiHxR9MQzY7041WsZ+ikFCuNMZqw
GZQMpaSz8eS/0+pqyjjBlLKwLtrau10KD8Mt33FtNt3eV+cYUkOzetllYFhnkPTF
vUL6JlYd+m8fj2ROTEj1UrAoa82FK/CN9J13VZNBuh12UAIpOA//UZGurMgbZK1W
ZrgxiYHdBVakMFOMhUqwtG5BR1MvrjxoyndIcVHLiFhFBY694yasQFAN0FQBQraB
cBIz9ylHxvwdV6Ny28n/mdR9M32xXRlZMa6DEpOYID0KSZ4DuOG8hYy1zIcPMmjT
AyhSp4LFYtgFr5p0zQkopkYO4wP4Omys3qJleplwCiytwS8o7bHW0QCAHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGUpTCmVgyd/4jT5iuHwcUs39aTtMB8GA1UdIwQY
MBaAFDqjLuASZuAY0jZcO7oXcvQkF5rCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTIt
OTQ5ZGJlOWI1N2ZlLzEvWlNsTUtaV0RKM19pTlBtSzRmQnhTemYxcE8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hMTNhMTctNmM3My00Yzc4LTk3NTItOTQ5ZGJlOWI1N2Zl
LzEvT3FNdTRCSm00QmpTTmx3N3VoZHk5Q1FYbXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWj2MA0G
CSqGSIb3DQEBCwUAA4IBAQBNPTiJ17K7ZkcqEVzXilTZVjERJDYGCTzLfWvb4Wie
v+zczTw0hfQ33ye2JesAT0U57jPYvGatD47EzkVGiHt19LrTNQlSTteW5GN26EfD
2/8bHuHVdk01HxdEfitOJWETTxlIVz6ItGvJv4wh4UY2VNLVFQ+WVeBGv5kfG2Ba
1drvvQu1vebLyOWPa3tQaH4f/3hVj6faR5GPg8A/YqEQg5KXCWwM5vvAI9G6YY8D
D2f+O5mbW5jUxKVpeNv+hkA4KORZ+dF/NK0QYtF5PxofhMeqlY7SsdP83HA/yrKe
l555zTd9hDEhLLu0xoGf3q7b7E03mLTc8sRNytkA6aA2
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:08 2024 by rpki-client on console-ams.rpki-client.org