Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ZlZF8Sv7fi17QqlkuAENEXL_KaM.roa
File: ZlZF8Sv7fi17QqlkuAENEXL_KaM.roa (raw, json)
Hash identifier: rPqs71nhU0sKux8zTAW+jx6rbbhA05wjyuR5S9ud5pY=
Subject key identifier: 66:56:45:F1:2B:FB:7E:2D:7B:42:A9:64:B8:01:0D:11:72:FF:29:A3
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 018A855B55B16AFA502D22A60E5E0257C42A
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ZlZF8Sv7fi17QqlkuAENEXL_KaM.roa
Signing time: Mon 11 Sep 2023 17:47:50 +0000
ROA not before: Mon 11 Sep 2023 17:47:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 45.156.28.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:85:5b:55:b1:6a:fa:50:2d:22:a6:0e:5e:02:57:c4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Sep 11 17:47:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=665645f12bfb7e2d7b42a964b8010d1172ff29a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5e:a9:c0:8c:7a:3c:ca:57:51:58:24:91:52:
00:72:56:3a:71:f6:90:ee:97:de:ae:ff:fb:4c:96:
45:28:6c:66:bf:98:da:12:33:d8:02:98:89:52:7c:
dd:4b:93:ee:06:ab:65:40:63:5b:06:74:8e:37:02:
f3:a9:a3:dd:42:56:ab:28:c5:03:d6:a9:49:b2:24:
11:2b:76:19:8d:7f:c0:bb:cc:9b:7a:45:a7:d8:89:
20:cb:54:cc:83:00:bc:6e:1c:36:d1:08:8f:19:b6:
b9:ae:ac:38:38:17:c8:fa:a7:15:df:79:a6:84:18:
0f:ab:a0:5f:99:33:91:53:a6:7e:21:c5:0d:fa:b4:
ab:6a:7f:af:a4:58:57:50:7e:62:0e:4e:fb:60:34:
86:6f:02:e5:8d:ff:53:86:a6:8e:ae:14:83:39:25:
59:98:5c:a0:12:a5:0e:ef:f3:f8:41:91:b3:0b:97:
89:c9:19:83:5e:8c:20:05:15:a3:26:68:87:55:13:
5a:30:f0:37:32:94:f9:40:f2:a0:22:2a:de:a5:93:
9d:fc:ef:04:c9:ed:1b:2e:c6:38:e8:23:bc:c2:14:
ff:c7:91:6f:6a:08:12:d4:1b:60:36:21:63:6a:a9:
f4:ad:68:e3:8d:fa:0f:60:9d:ae:7c:02:f3:a6:23:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:56:45:F1:2B:FB:7E:2D:7B:42:A9:64:B8:01:0D:11:72:FF:29:A3
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ZlZF8Sv7fi17QqlkuAENEXL_KaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.6.0/24
45.156.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:e6:66:7e:82:9e:f1:d6:85:02:7b:5b:b5:99:71:a9:9d:a1:
5b:e7:1a:9b:58:28:47:12:8c:8b:38:34:c6:b6:ec:15:aa:23:
33:0e:c5:cf:05:7d:af:3f:0c:56:66:95:24:11:40:07:08:78:
41:01:05:af:d7:3b:07:87:ad:dd:6c:79:fa:84:41:01:f9:e0:
be:00:00:f9:8b:f0:cf:a4:56:e6:b9:57:a3:82:1a:92:e3:92:
72:e2:c9:26:45:e8:67:31:63:eb:4d:ee:6a:6e:a3:ba:39:fc:
99:33:e1:50:b6:ed:d4:23:7b:79:7c:47:f9:b7:b2:6d:b3:d9:
fb:81:4b:c4:19:bb:8d:27:6f:0e:0c:1f:53:6f:d0:6d:0b:71:
07:6f:b1:93:7e:7a:10:55:be:84:88:0b:8f:db:74:09:ff:3d:
20:e1:ea:af:32:32:fb:35:94:29:c9:b6:26:b7:c1:9c:af:74:
12:e8:ac:43:2e:f8:be:24:26:aa:96:10:27:71:af:41:ca:f0:
67:f2:b1:a4:18:26:b6:fd:b9:8f:94:b8:40:ae:cf:f2:e2:a3:
28:41:b3:64:50:9e:4c:5a:25:b0:d5:30:1c:36:3a:19:e6:65:
ec:0f:2a:7f:0d:7f:31:66:38:a3:c5:a9:c9:7a:34:ec:86:ae:
a7:56:3d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org