Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zED1Y2OlsG4MVRgqIb2JfkjgWoA.roa
File: zED1Y2OlsG4MVRgqIb2JfkjgWoA.roa (raw, json)
Hash identifier: ZM4ZWXLDyh7/kEFtrtWgO3v20jb9mFqNK8sDJWx//Ik=
Subject key identifier: CC:40:F5:63:63:A5:B0:6E:0C:55:18:2A:21:BD:89:7E:48:E0:5A:80
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018AC1896FA000029A7F43464FD6D7A708F5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zED1Y2OlsG4MVRgqIb2JfkjgWoA.roa
Signing time: Sat 23 Sep 2023 10:15:24 +0000
ROA not before: Sat 23 Sep 2023 10:15:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203363
IP address blocks: 2.58.201.0/24 maxlen: 24
45.80.193.0/24 maxlen: 24
45.67.84.0/24 maxlen: 24
45.67.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c1:89:6f:a0:00:02:9a:7f:43:46:4f:d6:d7:a7:08:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 23 10:15:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc40f56363a5b06e0c55182a21bd897e48e05a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:06:05:77:d9:08:c9:60:9c:a3:67:dd:8f:0d:
ae:51:ac:a4:bc:c9:9f:c3:57:09:0e:9c:5d:30:75:
67:9b:35:17:b6:ae:da:76:a4:7f:9b:6b:8d:13:cc:
30:8b:06:09:73:e9:dd:d3:89:1a:80:3b:f7:6a:cc:
b1:ae:6d:b4:e6:ce:56:11:8c:06:a0:05:bb:c7:9e:
75:be:3a:f6:49:d8:ac:9a:b2:b3:e1:37:0a:d0:cb:
c1:04:fe:98:4c:16:b4:41:b9:c8:fb:bf:f3:bb:c2:
80:b0:57:a1:ff:2a:9d:da:d9:17:31:5e:1d:89:16:
04:29:25:52:8e:53:6d:e3:9c:92:2b:4d:ce:2a:18:
fe:b7:fc:e8:b7:33:fa:ac:d7:ec:91:21:b2:f3:48:
72:cc:30:ad:28:f4:d1:75:f8:32:56:ef:a6:69:f7:
97:03:95:c7:46:6e:b8:b8:06:bd:1d:40:df:e1:c2:
a7:83:e2:1f:f2:6e:1a:48:4e:54:d5:27:b6:a5:fa:
4b:24:19:14:bc:7d:ca:ad:8e:bf:9a:03:3a:17:cd:
b1:8e:14:a9:72:41:a0:a2:5d:f5:54:43:67:1f:01:
88:a4:20:ef:40:eb:64:a9:2d:e6:49:a5:76:ab:65:
d9:a6:80:58:13:65:40:18:13:83:1e:c4:6d:3c:91:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:40:F5:63:63:A5:B0:6E:0C:55:18:2A:21:BD:89:7E:48:E0:5A:80
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/zED1Y2OlsG4MVRgqIb2JfkjgWoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0/24
45.67.84.0/23
45.80.193.0/24
Signature Algorithm: sha256WithRSAEncryption
46:33:1f:86:0f:e6:34:f9:d8:a2:53:68:ee:7a:e6:c7:bb:1d:
b7:d6:df:f5:59:b7:46:d6:3e:78:7c:37:ac:48:78:57:cf:e1:
d1:ee:30:d3:61:3b:8c:1f:79:2e:5c:99:f0:7d:f9:e4:f9:eb:
e0:61:f9:22:be:bf:b7:5e:36:69:76:a2:f1:f3:ab:90:7c:b5:
d3:fd:3e:cf:fd:06:f1:5a:b2:d8:92:95:d4:6a:68:2a:4f:ff:
27:e1:e3:e4:14:81:cf:56:ce:34:9d:36:3d:e5:68:12:63:2d:
f3:ae:4b:29:53:e5:52:a6:8d:1c:ec:90:98:ac:f2:93:d7:df:
cc:f4:3d:65:ee:ad:0a:a4:44:08:88:71:95:94:1a:fc:04:0c:
c9:c0:97:d0:98:ce:2a:66:f8:43:62:4c:15:84:b2:a2:41:6c:
13:43:3f:e2:27:e0:48:1b:0f:c9:b8:9a:63:d2:46:79:b0:8a:
d4:fc:a6:fa:8b:cd:10:da:40:f6:fd:bd:63:a9:fa:3b:d7:4a:
b4:9e:6e:18:29:c2:48:0e:24:b0:ad:e3:d5:a5:25:cb:fa:f7:
e8:e0:bf:28:f5:c6:99:6e:c7:eb:75:30:02:a4:4e:ba:17:62:
b0:37:fe:64:e4:e1:d7:f1:14:41:9f:26:09:49:11:01:11:68:
18:73:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 07:32:52 2023 by rpki-client on console-ams.rpki-client.org