Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zmec8WskLh5seoBOM-b2ByUe7tI.roa
File: zmec8WskLh5seoBOM-b2ByUe7tI.roa (raw, json)
Hash identifier: KYCA6GIdq12/2wHgvX6L8UgwN2wInyzk1paMvruJKDM=
Subject key identifier: CE:67:9C:F1:6B:24:2E:1E:6C:7A:80:4E:33:E6:F6:07:25:1E:EE:D2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE8FDCC640FBA5DE048BD2A0DECA6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zmec8WskLh5seoBOM-b2ByUe7tI.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42675
IP address blocks: 193.182.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e8:fd:cc:64:0f:ba:5d:e0:48:bd:2a:0d:ec:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce679cf16b242e1e6c7a804e33e6f607251eeed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ff:7c:fc:44:9e:bd:99:6c:59:5a:89:4c:45:
0c:b1:6b:c5:35:aa:b2:53:d7:10:6c:08:af:9c:cd:
e9:8c:47:2b:b6:30:ff:bf:69:77:44:4d:5d:b2:c9:
6c:44:ef:5a:93:f2:b8:0a:38:03:0d:3e:1e:75:eb:
79:6e:f6:44:4e:bc:a8:f1:dc:8d:b0:c9:59:40:17:
7f:9c:8b:da:4a:bd:65:9c:17:a5:da:9f:8c:5f:0e:
24:21:88:a7:15:f2:1d:08:66:9f:08:df:33:64:9c:
b6:45:95:aa:f0:12:2e:f3:69:e9:d5:b2:b0:96:6c:
72:f3:f1:38:d8:c8:21:62:e5:e2:17:05:8a:1e:73:
7c:ef:60:02:e1:68:d4:97:dc:ab:d0:77:31:47:3c:
6f:8f:d9:48:bd:e4:1c:58:8f:06:6e:c2:fa:98:05:
6c:2e:e4:30:71:f1:d1:30:65:5f:4b:69:18:9c:de:
a6:73:b1:c0:c3:c5:24:e6:0e:58:d9:f1:bf:90:4b:
7e:d2:ea:6e:0f:7d:88:45:19:25:05:6b:d3:8a:9b:
4d:46:97:e9:87:02:17:da:8f:4e:1c:c4:18:cf:be:
a5:74:bf:1c:cc:a8:7d:09:36:df:72:5f:1c:72:4f:
9c:18:00:9f:7a:e2:20:95:a6:da:ef:e5:c5:af:72:
e8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:67:9C:F1:6B:24:2E:1E:6C:7A:80:4E:33:E6:F6:07:25:1E:EE:D2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zmec8WskLh5seoBOM-b2ByUe7tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.111.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1a:c7:63:5b:15:9f:9f:3d:c7:1f:c0:6a:55:0e:dc:77:d6:
df:f9:b9:e5:c8:c5:ba:c6:93:83:13:ba:32:97:b6:b9:94:11:
c5:02:44:85:a8:7a:b2:0c:6d:9b:98:6e:4e:98:f3:09:70:79:
db:f7:c4:75:b1:01:69:13:59:db:e0:72:d7:e3:f2:9c:48:f2:
1c:d8:0e:42:2e:91:18:42:af:8f:0f:ed:c0:08:3a:c1:af:1e:
e1:c7:38:38:fb:fc:98:dd:30:1f:f4:c5:9f:47:be:52:de:d1:
0b:0f:98:a9:4d:bc:b4:e9:e7:10:7e:cb:7e:fa:dc:f2:1b:17:
c0:5d:57:05:88:d6:03:bb:7d:8a:a6:a8:18:50:61:d0:b5:6e:
62:89:ac:16:b9:61:9e:de:50:f5:fb:bf:c7:ac:8d:17:59:4f:
38:f4:cc:53:ba:9f:f0:bb:d6:1e:fa:28:62:56:8c:49:6f:2b:
d4:07:e5:23:b5:58:0a:ce:62:d2:98:fd:95:00:63:79:5b:4c:
2a:1d:11:e9:63:6d:1d:5f:bb:3b:e4:fc:d1:08:75:fb:43:a6:
b3:62:56:ad:7c:98:3b:ed:c9:6c:a1:ef:c3:6c:c3:d8:e1:3d:
d1:4c:ca:12:f0:27:1c:a6:6d:e4:d8:3a:d3:ce:8a:54:9b:01:
d3:82:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org