Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/z-SzwskBCGYbOpXp62tKI4RxLXo.roa
File: z-SzwskBCGYbOpXp62tKI4RxLXo.roa (raw, json)
Hash identifier: sQUxVFohRyklARgQ8z/Cp17e/nXPLRGpk9HLCgq8m6w=
Subject key identifier: CF:E4:B3:C2:C9:01:08:66:1B:3A:95:E9:EB:6B:4A:23:84:71:2D:7A
Certificate issuer: /CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Certificate serial: 01856DCACF6770C14600BA76D02CC993053F
Authority key identifier: 72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/z-SzwskBCGYbOpXp62tKI4RxLXo.roa
Signing time: Sun 01 Jan 2023 14:44:45 +0000
ROA not before: Sun 01 Jan 2023 14:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208451
IP address blocks: 45.132.116.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ca:cf:67:70:c1:46:00:ba:76:d0:2c:c9:93:05:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277a02aa546dd1a0a6a82d05d90b0917e1545ed
Validity
Not Before: Jan 1 14:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfe4b3c2c90108661b3a95e9eb6b4a2384712d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:15:12:28:ed:d0:db:af:cf:18:f7:55:04:5f:
2b:fa:f5:82:a6:48:ba:18:46:3b:31:56:7e:fa:f2:
f4:ec:35:82:95:55:02:03:b8:97:cd:9e:4f:77:41:
fe:ea:75:03:f3:4c:0a:f3:65:f7:54:a7:27:3d:55:
27:b6:3a:d7:c9:ce:76:60:b5:a1:ad:31:37:af:8c:
1c:20:28:1a:20:5f:cd:df:aa:87:e8:16:07:a0:75:
c3:65:e0:26:c4:ce:0b:b3:22:02:58:41:b6:5a:66:
08:33:69:f1:46:a4:c7:cf:89:7a:8e:d2:45:23:e5:
02:c6:7c:9a:68:46:ae:ae:a0:ba:ed:d8:fe:88:1e:
fe:ba:b9:b6:dc:46:46:ab:9a:e4:06:ea:2d:ca:3c:
34:6f:31:2a:e5:7b:ae:74:99:ef:a7:71:1a:46:2b:
1b:0b:49:b0:fc:52:8e:2e:be:2b:17:23:10:79:01:
98:de:b5:15:84:2d:9b:fb:84:a1:3d:ad:06:66:34:
59:35:a4:10:b1:f9:ce:9c:54:22:9e:25:ee:ea:54:
5d:3d:50:54:d8:d5:0b:06:eb:14:65:04:47:e7:50:
83:f5:17:68:06:88:ca:9e:ad:82:82:44:ab:4a:e4:
fc:d2:16:12:dc:b1:e9:19:b8:2c:83:9f:b6:ea:40:
b5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E4:B3:C2:C9:01:08:66:1B:3A:95:E9:EB:6B:4A:23:84:71:2D:7A
X509v3 Authority Key Identifier:
keyid:72:77:A0:2A:A5:46:DD:1A:0A:6A:82:D0:5D:90:B0:91:7E:15:45:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cnegKqVG3RoKaoLQXZCwkX4VRe0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/z-SzwskBCGYbOpXp62tKI4RxLXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/97ad7e-fcbe-4fcc-9c3f-f48930e42641/1/cnegKqVG3RoKaoLQXZCwkX4VRe0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.116.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:e2:40:cf:bd:4d:b4:c6:3e:33:a7:bf:51:5b:c0:71:bf:b5:
13:34:d9:97:55:74:df:57:62:b6:0e:07:c6:18:c0:45:89:57:
fe:1c:93:5b:0e:e8:3b:fd:90:d7:cd:bb:9a:5d:d7:bd:bd:d8:
9a:cc:b7:61:41:7e:ae:1c:a4:a9:cd:ab:65:67:85:26:df:e6:
dd:18:c5:81:ed:e2:f3:b1:71:1f:ca:0c:55:32:ea:49:b2:48:
ad:2e:55:c8:5e:9c:99:bb:33:43:33:22:b4:2d:c5:85:ec:73:
f8:66:b5:f2:67:ee:bb:6b:08:e5:1e:89:10:44:da:bf:75:84:
1b:e3:12:bb:e6:a0:b7:91:8d:9d:77:23:e0:1e:9c:ac:fa:ea:
8b:a8:dd:3b:dc:69:64:99:36:74:ee:16:ea:60:7e:ea:2e:4a:
7b:7c:5e:29:fc:d0:87:59:72:4c:e2:86:0a:9a:6d:52:66:21:
1f:5a:35:1c:f4:27:a8:be:51:df:7e:07:d7:c4:45:0d:92:50:
e6:28:38:75:8f:0e:f7:9a:c6:d9:24:6f:d5:d1:b1:a3:e7:07:
7c:66:6f:53:bc:35:9c:e1:91:8b:07:c8:25:0b:d0:54:7c:4e:
96:df:00:32:93:27:ae:77:51:a3:a9:1a:b2:4c:c9:ab:7c:3b:
5f:f4:fd:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:09 2024 by rpki-client on console-fra.rpki-client.org