Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ZQer95pihNAZjOADoply3cU6814.roa
File: ZQer95pihNAZjOADoply3cU6814.roa (raw, json)
Hash identifier: FdelAI6mePhI448cQeJR+47fmH8cnxhYgWI8hcQ034Y=
Subject key identifier: 65:07:AB:F7:9A:62:84:D0:19:8C:E0:03:A2:99:72:DD:C5:3A:F3:5E
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018E04B7A622522F3E9D0407294D95D07389
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ZQer95pihNAZjOADoply3cU6814.roa
Signing time: Sun 03 Mar 2024 14:28:48 +0000
ROA not before: Sun 03 Mar 2024 14:28:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.106.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 12:29:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:04:b7:a6:22:52:2f:3e:9d:04:07:29:4d:95:d0:73:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Mar 3 14:28:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6507abf79a6284d0198ce003a29972ddc53af35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:76:cb:11:aa:f2:74:9f:aa:83:b8:fe:b8:
82:f7:47:c2:a3:9a:bc:53:be:b5:91:7c:23:a6:ab:
d6:80:d7:56:c9:93:62:0c:82:92:33:3a:4e:55:69:
ca:21:ef:a2:46:9f:fc:1f:7c:bd:29:bb:4c:26:1b:
8a:c2:a6:f7:5e:fc:18:35:67:ea:dc:5f:74:71:3b:
d3:a5:d5:1d:7f:f7:39:92:ea:c3:61:38:b4:fa:de:
d6:3e:da:ce:d5:b1:d8:65:7e:18:5c:4b:4d:48:89:
e6:cd:5c:86:5c:34:ac:5d:8f:1f:1b:31:aa:b6:d0:
92:61:f6:ae:2a:1b:58:4f:e9:56:b4:c9:4f:a8:2f:
b2:a8:21:55:8a:cb:1f:df:bc:96:e9:54:1a:3e:bd:
98:ec:73:02:5d:29:69:27:88:ca:c5:2e:5a:14:fa:
92:4a:2c:26:4e:77:2c:75:78:0b:17:b5:ec:ea:22:
30:dd:bd:05:52:e4:ae:d3:ed:bf:2f:90:e5:4a:4a:
80:39:a7:9b:9a:f8:e9:3f:92:03:88:6b:f5:d5:c1:
ff:2a:be:0f:d8:82:36:a6:52:5e:ff:05:0b:e6:69:
26:7d:bc:3e:9e:83:45:07:98:14:2c:b7:e7:0c:b5:
f1:26:71:e4:da:57:3c:33:24:97:f6:4b:d9:8e:16:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:AB:F7:9A:62:84:D0:19:8C:E0:03:A2:99:72:DD:C5:3A:F3:5E
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/ZQer95pihNAZjOADoply3cU6814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b0:de:55:15:cb:9b:bf:9f:27:cf:17:72:93:49:a7:eb:09:
be:07:f0:20:b3:b0:bb:c6:ae:fa:e2:3f:9c:2c:a0:dd:38:da:
f3:3a:76:09:2f:ad:a4:f9:39:bc:84:46:42:e5:b5:75:0d:b4:
fa:bb:0d:c2:5d:b1:4b:8d:75:de:65:65:67:28:12:98:bd:21:
2c:3d:d0:aa:9a:0b:42:e0:52:94:fc:33:4c:01:ab:47:fa:bb:
72:6b:97:99:25:fc:4e:e4:f6:e4:e6:46:11:fc:05:6e:3d:18:
bc:fc:31:e3:43:ca:86:a9:ca:c9:95:d0:8e:e2:c6:c4:27:f4:
23:65:b9:4a:93:b9:d1:7e:d3:e4:16:30:58:77:6f:f3:e5:5f:
bb:9c:20:7e:72:9b:fa:b6:c0:dc:0b:2f:eb:47:df:2b:84:87:
4f:78:2d:78:0f:eb:bb:c4:2c:ae:2e:96:cc:b8:d5:8a:b0:a5:
76:5c:9b:12:64:f7:b3:0b:78:78:f2:57:45:d1:c7:b7:59:dc:
41:54:52:a3:11:bf:09:6b:f7:f8:15:b4:f4:3d:c8:17:14:ea:
98:e4:4a:df:fe:4a:34:3c:54:fd:d2:40:9f:a4:50:21:86:7a:
dc:31:82:a3:20:16:7b:e5:ec:80:0d:e0:89:48:86:3f:5e:c3:
3b:a3:6a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:45 2025 by rpki-client