Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/ZGDWCR1ysBtt5Auoo7M-X6jSP_g.roa
File: ZGDWCR1ysBtt5Auoo7M-X6jSP_g.roa (raw, json)
Hash identifier: iN3moDaVsqzfGvc0TDZ1Kl3wpVzGJujYeFnXHdMP/NQ=
Subject key identifier: 64:60:D6:09:1D:72:B0:1B:6D:E4:0B:A8:A3:B3:3E:5F:A8:D2:3F:F8
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 01856ECB7F41DE67352FEDF1BAE2AF374B42
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/ZGDWCR1ysBtt5Auoo7M-X6jSP_g.roa
Signing time: Sun 01 Jan 2023 19:25:08 +0000
ROA not before: Sun 01 Jan 2023 19:25:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:cb:7f:41:de:67:35:2f:ed:f1:ba:e2:af:37:4b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Jan 1 19:25:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6460d6091d72b01b6de40ba8a3b33e5fa8d23ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:cf:e5:68:a6:0b:4e:d3:14:f3:73:49:6c:
08:10:65:cc:c3:8c:c2:97:44:db:b6:b2:c7:29:bc:
9e:77:e6:0e:56:c4:20:ee:ba:af:16:1d:43:1a:8b:
24:d4:67:00:18:3e:d9:81:ad:df:2a:da:f4:60:ab:
1e:12:84:71:a0:37:00:b6:5b:9e:af:08:1d:75:a8:
59:3e:bc:66:6b:f8:a6:ba:c3:09:58:48:23:76:32:
62:f9:65:df:aa:f2:79:98:f4:6a:63:d7:81:e2:21:
03:b1:45:53:4c:17:53:2f:b5:50:d0:d1:7a:d8:61:
e1:e4:ab:d9:94:da:66:2a:44:4a:df:fa:6b:46:0e:
40:dc:e5:6a:2e:bf:f3:53:b4:f2:92:a0:ed:51:7c:
42:f3:77:ae:82:76:73:f4:1f:92:25:a7:26:55:0e:
fd:f6:d4:d6:1c:ee:fe:21:b9:22:25:79:d0:26:51:
68:41:71:63:a1:26:75:7b:81:9c:c6:c5:26:83:90:
33:b8:41:75:4d:aa:6c:8d:5c:85:ad:63:ca:0b:00:
7a:29:a9:66:e6:99:22:e8:06:63:77:7d:c4:87:fa:
47:3a:2b:86:64:61:e4:4c:46:05:a7:56:fb:41:b1:
c2:ff:a7:d4:7f:b1:93:0d:97:d3:3c:c4:6d:87:0c:
7d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:60:D6:09:1D:72:B0:1B:6D:E4:0B:A8:A3:B3:3E:5F:A8:D2:3F:F8
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/ZGDWCR1ysBtt5Auoo7M-X6jSP_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.202.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1e:c4:55:21:ea:1e:d2:f9:28:a7:6f:6c:12:e9:9d:8c:76:
26:18:00:8c:b2:ee:dc:c2:46:7a:56:ef:d5:4c:c9:f4:ef:04:
4d:3c:db:64:ed:6e:85:da:5f:4f:ab:60:bb:e6:5a:91:08:06:
99:df:a6:e8:9c:c8:e4:7c:26:4f:49:7b:fd:a4:f1:2f:c5:99:
88:a2:18:fe:ce:79:0f:af:8a:f2:9b:d9:9f:f2:f2:a5:76:5e:
cd:f2:1d:4a:55:8d:c1:d3:fe:10:5b:1e:75:6c:8d:67:9a:8e:
82:bf:eb:80:88:de:68:2e:2c:35:27:a9:42:b9:9d:f5:d4:33:
6f:27:b2:de:6a:77:54:73:d7:8e:4c:b9:d3:92:65:f6:41:d8:
79:44:7e:7b:0b:60:c2:58:5a:d9:07:65:ac:9b:58:6c:5c:7d:
d2:1b:a6:c3:a4:f4:59:53:6b:6b:b5:63:d8:45:8d:64:6f:75:
97:c7:2c:8a:69:ed:75:5d:9c:a3:b5:e8:ab:8b:f1:25:af:12:
a3:c3:1e:14:98:3d:e4:18:e1:24:a8:27:2d:0a:ea:f5:dd:2c:
76:3f:87:61:ec:6d:28:75:a6:99:36:89:43:a6:2f:c0:fb:0b:
8e:68:fb:4b:69:55:65:8b:01:07:b6:28:03:f7:93:a9:e6:0b:
3e:61:c3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:30 2024 by rpki-client on console-ams.rpki-client.org