Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/CV4U4Zswtrhax57NQw_lWOwobPU.roa
File: CV4U4Zswtrhax57NQw_lWOwobPU.roa (raw, json)
Hash identifier: H4mUMWVeTbvHF46RoVTSY2hIsmctWalpJ/JKypbErnY=
Subject key identifier: 09:5E:14:E1:9B:30:B6:B8:5A:C7:9E:CD:43:0F:E5:58:EC:28:6C:F5
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018A6CC6FBB2716E2F20DC0A4F2B142E90FB
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/CV4U4Zswtrhax57NQw_lWOwobPU.roa
Signing time: Wed 06 Sep 2023 23:14:54 +0000
ROA not before: Wed 06 Sep 2023 23:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32167
IP address blocks: 45.148.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6c:c6:fb:b2:71:6e:2f:20:dc:0a:4f:2b:14:2e:90:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Sep 6 23:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=095e14e19b30b6b85ac79ecd430fe558ec286cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ab:41:2e:5e:cc:88:91:57:22:e8:da:e6:fe:
78:95:29:63:04:0d:47:96:9d:7e:ca:3d:ba:ec:29:
26:21:f8:d7:0b:dc:04:b5:36:0f:57:57:ff:3e:0d:
a6:5e:1a:e9:09:61:d2:c9:91:71:4b:88:74:6a:88:
5b:d0:c5:8e:99:f1:b4:28:ba:11:29:7e:98:4a:5f:
99:b4:76:40:6d:7b:07:ce:ab:fa:6b:0d:65:f3:de:
52:1d:82:fd:55:e4:05:ae:7b:40:6c:42:a8:84:01:
ab:bc:ae:84:a6:de:0a:a0:f5:00:d7:be:55:da:da:
d8:3b:0e:59:24:3d:eb:d1:ae:44:2a:b8:ee:32:c4:
fc:5e:98:df:38:24:df:71:56:2f:f2:c3:73:14:da:
74:f7:72:b0:91:d0:e2:84:1e:d1:73:0a:83:45:6d:
b0:15:5a:b2:8b:bf:74:3a:91:85:d4:b9:22:2f:79:
38:05:32:b8:6a:5b:3e:84:6f:9e:07:f8:94:e7:62:
92:ad:da:a7:09:27:0d:4c:f7:07:34:47:8a:3e:f6:
e9:5e:15:03:39:24:9c:bf:2b:50:b1:fc:39:1b:a8:
9e:c5:a7:6f:bb:fe:d3:e0:53:fa:0a:ad:40:6e:d1:
68:46:22:cb:df:ae:b5:1e:b2:73:12:8c:3e:b3:b6:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:5E:14:E1:9B:30:B6:B8:5A:C7:9E:CD:43:0F:E5:58:EC:28:6C:F5
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/CV4U4Zswtrhax57NQw_lWOwobPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
Signature Algorithm: sha256WithRSAEncryption
77:5c:59:4c:4c:c8:ce:0e:e4:dc:0a:83:85:54:fd:2d:c7:07:
64:bf:4f:3c:21:ec:23:6c:2e:57:3d:95:5e:fe:14:09:d4:d5:
dd:8b:6b:48:0c:b2:ca:ba:c5:3b:f6:92:f9:92:93:e0:ca:9e:
1c:fd:91:3a:92:b4:ef:36:c1:8a:de:2f:c2:40:b5:bf:be:f9:
33:f8:55:e0:92:25:fd:ed:60:85:e7:c2:10:25:9c:8f:4a:d4:
bd:9f:d4:14:db:fe:40:5f:35:15:1b:da:98:85:09:7a:89:e0:
68:8a:f1:bb:fe:11:d2:f6:6d:0d:15:a1:dd:e0:b4:1c:06:d3:
f1:33:2d:ea:cf:bb:e9:44:d9:bf:fa:c7:3d:ba:5c:ad:27:49:
50:44:49:bc:68:26:f1:70:99:47:b9:7e:1b:7b:2b:33:6e:b1:
ce:ef:a0:d1:ca:7c:ff:db:1c:c5:6f:33:55:05:93:cb:71:b1:
51:e1:2a:c2:1a:17:7d:ca:96:dc:f3:a1:44:0a:c9:99:10:60:
cf:ae:4e:38:4a:06:26:62:3e:7f:55:94:f7:76:fd:68:79:07:
c2:26:6f:fc:87:ca:42:9b:97:a5:87:8b:40:45:ea:5a:be:63:
54:fe:c2:25:63:ee:55:53:50:30:5f:9b:54:d5:2f:b5:2f:f0:
55:e8:ae:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:08 2024 by rpki-client on console-ams.rpki-client.org