Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ZOuRfYtYG4SdtTM8eh5nND3NfhY.roa
File: ZOuRfYtYG4SdtTM8eh5nND3NfhY.roa (raw, json)
Hash identifier: KQDjKv9UU00oiWFbPMb3xQDYITr1fQz3/e/2UTs2xA0=
Subject key identifier: 64:EB:91:7D:8B:58:1B:84:9D:B5:33:3C:7A:1E:67:34:3D:CD:7E:16
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7992C9996B77CF5371A9D5636CCCFF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ZOuRfYtYG4SdtTM8eh5nND3NfhY.roa
Signing time: Sun 01 Jan 2023 22:35:16 +0000
ROA not before: Sun 01 Jan 2023 22:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206286
IP address blocks: 45.137.207.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:92:c9:99:6b:77:cf:53:71:a9:d5:63:6c:cc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64eb917d8b581b849db5333c7a1e67343dcd7e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:12:2b:f7:7e:28:2c:1f:0f:28:72:c6:eb:
ca:6d:1d:58:79:e2:5a:b9:b3:c0:59:f4:c3:78:e5:
99:95:d7:f5:d0:3d:c5:d4:e5:aa:e9:1b:2f:83:7a:
93:11:1d:4c:38:fc:b7:ca:5d:a8:02:c7:2b:f3:c4:
89:46:80:e5:c9:86:39:4c:4d:39:34:6d:03:28:1e:
56:78:72:bf:20:79:13:7a:38:bb:08:51:48:a9:2b:
1a:e7:37:f0:08:b9:10:ca:ba:6b:49:fb:f1:f6:8d:
da:f2:ba:ff:e8:46:99:5c:d5:43:40:1a:63:ae:47:
22:6a:b5:b8:b0:fd:0b:05:59:05:7b:5a:b7:96:8a:
8c:21:35:97:b9:33:75:3b:48:66:8e:34:41:e7:cc:
fd:d8:9c:2a:cf:74:97:7f:93:d2:d5:24:52:21:5f:
c9:39:8b:97:c2:d5:42:eb:32:d0:b7:bb:e8:51:5e:
7c:9f:34:35:d5:2e:8a:34:d2:65:44:66:53:2f:bb:
13:53:18:4c:e2:e1:ce:a3:50:ac:3b:7a:4a:9a:f0:
f5:b8:20:23:80:9a:c7:52:16:d5:cd:a4:92:1a:d3:
e4:80:64:57:b6:f7:19:b4:61:21:17:84:44:15:95:
ca:38:b3:cb:72:3c:a5:0c:3f:94:f7:ba:7e:ac:5e:
f1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EB:91:7D:8B:58:1B:84:9D:B5:33:3C:7A:1E:67:34:3D:CD:7E:16
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ZOuRfYtYG4SdtTM8eh5nND3NfhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.207.0/24
Signature Algorithm: sha256WithRSAEncryption
60:81:3c:6c:02:fb:e7:a3:23:94:45:f5:b1:05:20:61:5d:0a:
e0:fc:e6:05:86:02:ae:bf:a0:23:2d:16:88:f9:4c:83:88:63:
14:b9:2d:e0:af:e5:26:8d:05:c3:f7:0b:f8:03:ab:50:02:17:
93:d8:7f:03:0e:3e:dc:9b:46:e5:4b:0d:ea:7c:27:21:7f:dd:
21:e8:65:b4:50:1c:77:f1:d5:70:33:87:41:0a:89:35:6d:fd:
50:56:fb:f5:e6:ec:66:90:d8:89:cd:b9:52:35:ce:ec:f8:57:
d2:12:3f:de:e5:f0:0d:65:36:48:fa:3b:8f:59:4a:f6:af:ed:
ba:32:44:cb:9a:9f:45:b0:3e:44:52:49:c3:ec:70:d1:6c:b3:
44:ae:a6:02:2d:08:5b:c1:52:8f:6d:24:91:09:e6:2f:fb:9b:
00:ea:fa:5d:05:2d:89:64:fc:c0:8e:95:3e:1a:e2:fc:0e:fd:
36:d6:3a:6a:67:53:a6:34:c7:f9:39:4c:8f:c9:62:a3:84:08:
f1:30:de:bb:03:9f:98:c6:13:9f:43:0b:66:63:e9:30:4a:71:
ac:b6:a5:80:06:6c:33:8b:b1:42:8b:91:c1:e9:a7:6a:36:a7:
10:14:a5:a4:f9:43:91:67:7d:c3:02:96:c5:1b:e5:3a:8e:ec:
d5:6f:16:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org