Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/zamF2lAQ7PPyQjAL8HyJJMCs43Y.roa
File: zamF2lAQ7PPyQjAL8HyJJMCs43Y.roa (raw, json)
Hash identifier: ribw4gpsBeeYza+P8wA0RwqWjyMF7wcaSmIYfKzPokE=
Subject key identifier: CD:A9:85:DA:50:10:EC:F3:F2:42:30:0B:F0:7C:89:24:C0:AC:E3:76
Certificate issuer: /CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Certificate serial: 01856CB8425836A28AE26CCFFD69F8E61C99
Authority key identifier: 88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/zamF2lAQ7PPyQjAL8HyJJMCs43Y.roa
Signing time: Sun 01 Jan 2023 09:44:52 +0000
ROA not before: Sun 01 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60855
IP address blocks: 143.196.146.0/24 maxlen: 24
143.196.146.0/23 maxlen: 23
143.196.147.0/24 maxlen: 24
143.196.148.0/24 maxlen: 24
143.196.215.0/24 maxlen: 24
143.196.224.0/24 maxlen: 24
143.196.231.0/24 maxlen: 24
143.196.14.0/24 maxlen: 24
143.196.22.0/23 maxlen: 23
143.196.22.0/24 maxlen: 24
143.196.23.0/24 maxlen: 24
143.196.251.0/24 maxlen: 24
143.196.255.0/24 maxlen: 24
143.196.172.0/24 maxlen: 24
143.196.175.0/24 maxlen: 24
143.196.176.0/24 maxlen: 24
143.196.187.0/24 maxlen: 24
143.196.192.0/24 maxlen: 24
143.196.199.0/24 maxlen: 24
143.196.200.0/24 maxlen: 24
143.196.208.0/24 maxlen: 24
143.196.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:42:58:36:a2:8a:e2:6c:cf:fd:69:f8:e6:1c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=881bd1402924ec2a644e8f54e6994cb4ac8e24a6
Validity
Not Before: Jan 1 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cda985da5010ecf3f242300bf07c8924c0ace376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d5:ed:a3:02:ca:25:f9:57:a5:57:8b:66:d6:
ec:72:20:2b:5f:f2:e8:f4:0d:a9:4b:17:c2:2d:b5:
f8:96:77:35:ed:18:ec:de:1d:63:f9:ac:74:5a:9b:
9d:c4:11:36:58:d1:c0:11:4f:63:94:a0:dc:3e:c5:
56:b6:8f:08:5e:f0:32:1e:c5:b7:56:75:54:66:25:
95:0c:4d:79:81:52:4d:51:d7:c1:34:f6:82:0b:cf:
fc:a4:eb:18:ef:73:c6:62:da:86:3d:30:41:83:1d:
8d:6c:c5:99:72:a9:67:7f:1d:7d:16:ab:66:05:d3:
11:33:bc:ea:70:20:5f:f3:cc:88:06:3a:0a:ee:fc:
2e:7d:57:93:66:1e:0f:f1:e0:39:2e:ac:31:7d:ca:
58:06:a1:73:87:91:ff:7a:58:ad:c1:c4:19:28:b8:
87:41:f2:a5:2d:06:b7:fd:1f:82:e4:b3:1b:80:ef:
f9:48:94:67:85:7e:f0:10:ad:05:56:29:c0:e9:b2:
6a:d0:a2:e1:3a:6f:66:8e:1b:69:0a:d8:29:9e:ab:
75:55:5a:bc:9c:8f:e5:1d:c0:7c:1b:c8:1e:35:7d:
59:cd:04:b6:dc:01:02:a2:ad:5a:f1:da:7f:e0:b5:
4b:c6:69:c6:03:b8:60:71:5d:bd:33:f4:70:13:12:
25:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:85:DA:50:10:EC:F3:F2:42:30:0B:F0:7C:89:24:C0:AC:E3:76
X509v3 Authority Key Identifier:
keyid:88:1B:D1:40:29:24:EC:2A:64:4E:8F:54:E6:99:4C:B4:AC:8E:24:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBvRQCkk7CpkTo9U5plMtKyOJKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/zamF2lAQ7PPyQjAL8HyJJMCs43Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/dcd3b7-7cc0-4c49-bab3-7a0b145cf62b/1/iBvRQCkk7CpkTo9U5plMtKyOJKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.196.14.0/24
143.196.22.0/23
143.196.146.0-143.196.148.255
143.196.172.0/24
143.196.175.0-143.196.176.255
143.196.187.0/24
143.196.192.0/24
143.196.199.0-143.196.200.255
143.196.207.0-143.196.208.255
143.196.215.0/24
143.196.224.0/24
143.196.231.0/24
143.196.251.0/24
143.196.255.0/24
Signature Algorithm: sha256WithRSAEncryption
54:83:16:8c:6a:86:af:37:08:4a:91:d8:f7:35:55:6b:cf:4a:
c4:3b:8c:9c:4f:b1:ef:78:b3:ef:8e:37:6d:6f:a2:a0:55:6f:
c2:fb:9c:10:1d:4c:29:85:21:14:0e:9d:e2:41:9a:4d:8a:c0:
f2:ac:b4:b1:b5:01:5c:3a:f3:28:95:53:df:c9:d6:83:50:e5:
68:7a:c4:4c:00:cb:1e:e9:8b:08:ff:00:9e:39:97:9f:87:54:
09:4f:27:a6:f1:ab:1e:43:91:63:73:0b:30:ca:ff:92:b9:3c:
d3:2a:64:e5:d0:f9:2e:78:49:bb:f5:a7:16:7e:80:2b:fe:2a:
85:ae:73:2d:43:00:bd:65:9e:6a:90:ca:16:14:d3:33:6c:ac:
76:4d:fe:1f:4c:ef:41:2a:fc:9c:e0:c3:16:db:25:91:58:5b:
9f:62:6b:b1:3c:d2:51:0d:0c:fb:3f:12:81:d7:18:63:b5:ae:
51:74:c7:e3:cf:17:cb:bf:24:55:e4:0a:3f:61:4e:a1:31:bd:
d9:bc:f9:26:91:ee:4f:da:14:f1:58:1c:de:18:48:08:4b:7a:
55:1a:2e:a5:eb:c7:23:8c:ab:74:ba:4e:da:03:82:c1:61:31:
ab:3c:ba:d1:97:b0:3b:16:a0:6b:2e:46:c5:74:5c:14:1f:5c:
6c:58:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:41 2024 by rpki-client on console-fra.rpki-client.org