Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/zjVtwZvqLvQZ3i7DZFGQ6O5zS0E.roa
File: zjVtwZvqLvQZ3i7DZFGQ6O5zS0E.roa (raw, json)
Hash identifier: rjJ0Ws1PL3NYsPSLvaDswqlyti/M5ummaYsP+UkmNXY=
Subject key identifier: CE:35:6D:C1:9B:EA:2E:F4:19:DE:2E:C3:64:51:90:E8:EE:73:4B:41
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 018570673A68724143841E5071A29A3164CD
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/zjVtwZvqLvQZ3i7DZFGQ6O5zS0E.roa
Signing time: Mon 02 Jan 2023 02:54:51 +0000
ROA not before: Mon 02 Jan 2023 02:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21769
IP address blocks: 45.11.32.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:3a:68:72:41:43:84:1e:50:71:a2:9a:31:64:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Jan 2 02:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce356dc19bea2ef419de2ec3645190e8ee734b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:a3:47:cd:b1:4d:c8:75:f7:f4:eb:73:e1:
cb:52:09:6e:26:91:d0:3e:e7:37:10:a6:20:24:e2:
98:ff:ce:5f:a1:04:75:dc:4f:a5:d1:40:b7:37:5e:
98:7e:68:4d:79:e2:eb:8b:40:de:47:1c:25:cf:21:
d5:71:7a:d5:bb:15:36:4d:57:d9:ce:8c:60:31:71:
76:ee:63:f0:1b:94:56:a1:56:47:d9:fa:3e:b4:7e:
7b:fd:66:9a:0d:40:1b:d2:74:78:44:1b:d3:7d:25:
18:24:bc:e6:87:dd:2b:27:f6:53:6e:e6:88:e3:44:
a5:f2:84:c4:a4:ca:90:ca:5f:48:0d:7b:ce:54:e6:
23:14:8d:e5:78:a3:98:83:1d:87:93:62:c6:d0:91:
14:84:0d:6b:97:23:a5:21:d5:39:94:11:51:25:87:
79:ca:c8:5b:d5:38:45:73:a2:62:8a:9f:6f:96:95:
1f:74:38:00:00:58:82:5a:d0:1e:da:7e:44:a5:be:
98:bf:33:ac:1c:8a:a2:3b:b4:28:93:61:39:3e:39:
5f:a3:03:19:0c:41:d6:20:10:58:eb:ac:c3:d7:0f:
e0:57:64:1a:a9:4b:f7:35:d1:e3:af:94:3e:1c:8c:
51:24:ed:da:9d:4e:22:2a:6c:37:e8:3d:55:79:95:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:35:6D:C1:9B:EA:2E:F4:19:DE:2E:C3:64:51:90:E8:EE:73:4B:41
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/zjVtwZvqLvQZ3i7DZFGQ6O5zS0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.32.0/22
Signature Algorithm: sha256WithRSAEncryption
67:b2:ca:92:52:c3:60:16:75:cb:77:af:de:73:48:22:83:fd:
a1:df:ca:02:66:c3:d9:71:13:ba:f0:7a:a3:93:32:5e:ac:13:
bd:1b:a0:0b:94:2f:56:b3:2b:4b:a8:b6:fc:7a:c5:74:62:68:
8c:d9:c0:03:7b:7f:cf:50:3a:ac:44:4c:43:89:36:a9:9d:0f:
5e:73:27:a3:37:4a:a4:4d:4a:d7:f5:0c:e3:86:0f:3e:3a:45:
d6:74:f4:90:01:dd:3a:fb:48:47:86:04:f3:3d:48:17:b0:82:
86:56:68:7f:c4:f9:db:73:b9:83:9d:79:a0:cb:d8:0d:bb:9a:
8f:cd:f0:b5:f2:d9:77:f0:e5:ea:b2:22:75:a6:01:67:62:1c:
eb:b8:66:93:23:fd:fb:90:db:a2:8d:c8:99:a0:8d:87:b6:ae:
11:e0:8e:03:89:d2:3e:65:fc:df:71:68:dc:d3:19:2a:fd:6e:
a0:a7:23:e5:b6:7a:7b:b0:de:de:8a:2f:6b:c9:c0:52:c9:1f:
95:86:2e:59:35:f3:03:5d:6b:5f:e1:92:ef:05:88:24:e9:c2:
6e:19:a8:51:82:ff:9c:17:89:95:6f:82:43:58:1e:24:e0:0b:
49:f8:15:f3:83:df:a3:9f:aa:ca:fd:c3:62:5e:b1:7e:3f:3d:
f9:a5:2b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:13 2024 by rpki-client on console-fra.rpki-client.org