Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/zxMlh_PSnwS-MBrOWVhsUqrAgmI.roa
File: zxMlh_PSnwS-MBrOWVhsUqrAgmI.roa (raw, json)
Hash identifier: xySjKOxyTdSGmEYK3McHTt15HI1HshXTdXoRUwSe0kc=
Subject key identifier: CF:13:25:87:F3:D2:9F:04:BE:30:1A:CE:59:58:6C:52:AA:C0:82:62
Certificate issuer: /CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Certificate serial: 0185715525A65EC23C51D6F36DA1CF46D4B0
Authority key identifier: DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/zxMlh_PSnwS-MBrOWVhsUqrAgmI.roa
Signing time: Mon 02 Jan 2023 07:14:43 +0000
ROA not before: Mon 02 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28788
IP address blocks: 62.133.192.0/18 maxlen: 18
193.16.234.0/24 maxlen: 24
2001:4128::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:25:a6:5e:c2:3c:51:d6:f3:6d:a1:cf:46:d4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbcc2bbaf3e0d4342a014f8b70f873cee9a8cac5
Validity
Not Before: Jan 2 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf132587f3d29f04be301ace59586c52aac08262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:8d:bc:b0:40:59:2d:fe:35:b5:a8:41:d3:6e:
86:01:d8:e7:5b:f0:17:93:4d:98:19:e1:72:89:37:
be:64:4f:89:ee:cb:40:3e:1e:29:a9:19:72:c6:2e:
93:c5:78:3c:1a:3a:5d:60:9d:53:34:15:71:15:1b:
9d:2f:2b:38:54:39:72:97:1e:1f:7b:3e:8a:c1:e6:
0a:ce:22:f4:9c:ed:e8:bc:6d:e1:6d:78:36:2e:06:
93:bf:1b:a6:ea:de:b4:12:d9:d3:a0:e6:07:c0:b0:
18:94:55:d5:64:6a:06:93:c9:a7:aa:07:20:4d:c8:
43:aa:7b:82:b8:b5:29:13:12:68:7a:ce:0d:08:cc:
d9:f5:ad:33:2f:d6:5c:fa:a7:a8:80:9e:86:9b:22:
ca:90:21:37:05:75:52:f5:b3:f7:bf:5d:2f:ba:d7:
64:70:0f:a1:dc:86:1a:60:1c:ff:88:db:ae:49:1e:
3d:8c:42:76:dc:88:b7:aa:09:e4:f2:40:af:ab:dc:
8f:da:45:c0:84:be:7e:1b:fb:ba:d0:7f:08:d3:39:
ed:6d:f3:4e:7e:16:5e:9c:12:7c:ef:e0:14:7f:00:
35:dd:0e:2e:51:b6:9d:6f:90:bd:0a:b6:95:8a:61:
37:83:7e:36:b5:eb:db:9f:b8:cb:b6:d7:47:a6:99:
3f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:13:25:87:F3:D2:9F:04:BE:30:1A:CE:59:58:6C:52:AA:C0:82:62
X509v3 Authority Key Identifier:
keyid:DB:CC:2B:BA:F3:E0:D4:34:2A:01:4F:8B:70:F8:73:CE:E9:A8:CA:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28wruvPg1DQqAU-LcPhzzumoysU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/zxMlh_PSnwS-MBrOWVhsUqrAgmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/414ef4-4c1f-4256-88c9-f4d5e84ac1dd/1/28wruvPg1DQqAU-LcPhzzumoysU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.133.192.0/18
193.16.234.0/24
IPv6:
2001:4128::/32
Signature Algorithm: sha256WithRSAEncryption
31:34:95:67:b8:d9:d7:39:16:2f:15:4d:8a:53:3a:ab:e1:3f:
05:5b:b0:ac:29:12:18:82:63:f1:6e:bb:06:0a:68:7b:59:a1:
eb:d6:8e:f2:4a:16:6b:98:90:d4:9a:26:3c:14:72:c1:95:fd:
fc:6b:4f:70:10:7e:04:de:6e:31:c4:dd:3c:1d:01:c0:6d:46:
d9:f4:c7:cd:47:4b:73:e0:b7:66:47:4a:94:de:f9:8d:69:2f:
b5:74:51:ea:d7:bb:5b:37:d1:6e:ea:39:a0:e7:2c:a0:f3:02:
46:98:f1:44:22:3e:25:dc:c8:1f:54:c1:a2:9a:68:1e:69:62:
65:22:8e:57:90:54:f0:e8:aa:79:93:79:81:45:be:58:7f:fd:
45:8c:89:fb:e3:88:dd:fb:4d:42:18:99:67:ce:ed:9c:50:57:
2d:0c:7a:89:3d:a6:ab:54:a7:80:f4:1b:97:60:73:18:c9:34:
5a:ae:31:9b:b3:e7:7e:e7:69:44:08:d0:23:1c:ad:03:e2:7f:
a5:28:6b:38:11:e6:b8:1d:32:8c:a0:8c:f7:5e:7d:9d:b0:6d:
d6:b4:a5:02:9a:35:ac:d1:30:56:5f:9a:30:08:58:87:04:6f:
33:16:1f:1e:87:26:51:31:69:39:cd:ff:c0:a9:4d:b3:54:94:
69:b0:e8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:12 2024 by rpki-client on console-fra.rpki-client.org