Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/z9Nv18f2KFfsqcBe-Oo6ViCvygs.roa
File: z9Nv18f2KFfsqcBe-Oo6ViCvygs.roa (raw, json)
Hash identifier: uBB7uyoZxyrRxGJ/BNBO85S/VLTHXMlbTM8BU+C7Kas=
Subject key identifier: CF:D3:6F:D7:C7:F6:28:57:EC:A9:C0:5E:F8:EA:3A:56:20:AF:CA:0B
Certificate issuer: /CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Certificate serial: 01856CE62B249ED8393EE69F5AA6DEC2C655
Authority key identifier: A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/z9Nv18f2KFfsqcBe-Oo6ViCvygs.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199341
IP address blocks: 45.85.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:2b:24:9e:d8:39:3e:e6:9f:5a:a6:de:c2:c6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a811a2c9fc8de9679bb158581b10ceaee91ff791
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfd36fd7c7f62857eca9c05ef8ea3a5620afca0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:3a:1d:ef:77:8c:5d:6e:6b:79:f3:7a:1c:
4b:ec:15:95:5b:6f:3d:51:82:8b:5c:49:cc:b2:98:
d0:45:72:e3:2e:3b:82:b4:f6:12:d1:fe:49:11:29:
4e:2d:9d:19:c2:e3:a9:72:f5:ff:3b:69:f1:b4:2c:
d0:21:50:3c:74:df:b1:26:90:05:e9:7d:ca:8f:7e:
fc:70:6b:fb:f8:d6:59:45:35:85:f8:0d:ce:44:6d:
ab:ed:7a:4c:2b:d9:ea:8c:20:51:90:19:62:17:f9:
67:af:1e:56:f3:75:45:cb:db:e2:14:7c:d6:29:f3:
90:f8:e2:bb:9c:42:a5:e7:74:2b:5e:c2:38:72:9c:
9c:44:b2:10:d7:1b:9e:b7:fa:29:79:a0:f1:08:f4:
72:41:47:84:27:af:43:81:fa:6f:1b:ee:7b:2c:ba:
3f:c4:b3:fd:aa:06:d6:af:59:44:c3:e5:5d:1d:b8:
af:70:58:78:c3:1d:20:76:87:94:8b:67:0c:83:2f:
32:54:2c:c4:5f:5e:9d:2a:f9:06:ba:f7:46:07:6b:
f3:7f:e7:77:0a:98:22:91:16:d9:fb:79:6c:69:00:
3f:74:84:7a:61:8d:9d:66:7e:f1:e7:6b:60:15:38:
6a:88:82:86:75:e2:74:22:bf:62:37:e4:51:e3:8f:
7e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D3:6F:D7:C7:F6:28:57:EC:A9:C0:5E:F8:EA:3A:56:20:AF:CA:0B
X509v3 Authority Key Identifier:
keyid:A8:11:A2:C9:FC:8D:E9:67:9B:B1:58:58:1B:10:CE:AE:E9:1F:F7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBGiyfyN6WebsVhYGxDOrukf95E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/z9Nv18f2KFfsqcBe-Oo6ViCvygs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/1decb3-1593-45db-af56-0cc4c0000858/1/qBGiyfyN6WebsVhYGxDOrukf95E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c7:c0:15:79:89:f9:d8:18:00:50:2d:09:2d:2e:4e:f0:cd:
a8:c4:41:35:f2:5a:ae:b8:5c:de:72:11:6a:34:e9:65:0b:29:
bc:76:c9:c6:88:38:ca:d3:70:93:89:7b:56:49:1c:f2:0a:7f:
a1:9e:02:17:3f:f4:5b:de:74:d1:22:36:8e:a1:2b:58:55:ec:
85:f7:71:43:84:57:34:94:53:c2:4f:13:83:e5:5f:81:52:c7:
e0:3f:e6:55:bd:d7:c5:ee:51:ad:33:84:37:b5:ec:a5:55:be:
c7:87:20:ab:0b:1e:9a:bb:f1:eb:ec:88:0c:8b:88:45:7f:fd:
c1:3a:b8:ea:ec:b8:30:e5:75:75:e8:f9:86:32:0a:97:c5:ec:
6f:92:27:55:65:e8:ec:bb:cf:16:c5:18:24:98:3a:e9:b0:03:
7b:ac:da:58:d3:7c:da:82:b0:cf:af:bd:d6:ad:95:de:d8:a9:
70:8d:42:1d:73:0d:8f:ee:47:3e:e0:1a:55:06:65:11:0f:f3:
b7:c9:e7:35:ab:7d:fc:e7:e6:56:44:37:3c:b5:a7:b0:56:5c:
15:7f:8a:80:b7:49:25:15:5b:c4:80:d2:ea:21:d2:6f:b3:d1:
88:4d:06:5d:e7:2c:de:04:a2:13:df:d6:f7:57:03:df:78:b9:
91:82:f5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:59 2024 by rpki-client on console-ams.rpki-client.org