Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/ZQP6brsMZZ8pIiplCSUs077C4lI.roa
File: ZQP6brsMZZ8pIiplCSUs077C4lI.roa (raw, json)
Hash identifier: iC9x/4o59wbWevbjCqHp0d8kjqDDeAweHAmJjdC9xfg=
Subject key identifier: 65:03:FA:6E:BB:0C:65:9F:29:22:2A:65:09:25:2C:D3:BE:C2:E2:52
Certificate issuer: /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial: 01856F024D1545DBCA18393D6E1F576699B5
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/ZQP6brsMZZ8pIiplCSUs077C4lI.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.159.224.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4d:15:45:db:ca:18:39:3d:6e:1f:57:66:99:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6503fa6ebb0c659f29222a6509252cd3bec2e252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:d0:94:48:dd:d0:a0:79:72:cb:4e:de:a8:
61:c0:06:1c:8e:d0:3a:26:54:f0:4f:6d:71:3a:6f:
20:14:70:91:75:b8:3e:90:ca:2d:8a:e8:5a:12:b7:
54:8a:9c:f9:0f:10:79:d2:be:c0:b5:35:5e:d8:1a:
a8:71:05:a9:b5:6e:88:2e:63:a4:2b:3e:3e:12:9a:
a1:1f:c1:3d:2f:ee:94:86:ce:4a:5b:09:3e:7f:92:
c9:ce:8f:9f:94:f0:75:ef:c8:62:49:e3:13:ef:0b:
56:2c:26:8d:5b:eb:0b:d4:1a:cc:0f:1d:69:df:a0:
81:54:b3:70:94:6d:a6:26:84:c2:2a:a5:e4:8e:e0:
a0:20:c1:58:a9:66:16:86:a2:b0:3c:aa:33:00:ec:
37:b6:75:27:1e:36:f3:00:cb:c8:b6:95:0c:22:63:
8c:44:d5:2f:05:0b:d9:26:a0:b4:68:2d:75:21:98:
cb:6e:25:98:da:dc:f9:a2:10:84:e0:33:21:53:2f:
45:ed:c1:9b:92:fa:e2:37:58:98:dc:e0:ba:13:1f:
15:84:11:42:0c:d5:52:ab:ac:e6:5d:a6:e6:67:e4:
ac:e4:11:1b:7a:fb:70:5f:55:1e:5c:c9:ca:b9:37:
58:35:f4:ab:69:a5:f4:5f:70:fa:08:11:6c:95:53:
d7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:FA:6E:BB:0C:65:9F:29:22:2A:65:09:25:2C:D3:BE:C2:E2:52
X509v3 Authority Key Identifier:
keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/ZQP6brsMZZ8pIiplCSUs077C4lI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.224.0/22
Signature Algorithm: sha256WithRSAEncryption
75:13:d9:18:28:c1:ff:a1:aa:f4:e6:de:53:4d:7f:48:c9:4d:
87:eb:7c:da:0f:1c:22:32:69:7f:f9:54:20:a0:92:72:6a:fa:
d2:e6:3a:71:0e:47:dd:79:da:86:16:02:c2:54:f5:9d:6f:63:
eb:16:ec:2a:19:97:20:e8:da:94:e7:96:8b:c1:f0:4f:35:97:
5f:72:8b:03:05:3f:a1:7e:48:8c:c1:d6:11:5b:55:2e:99:cb:
2c:9b:b6:33:c3:df:f3:d0:f5:b7:f8:6e:02:c5:d9:68:c2:aa:
38:55:9f:f3:68:9f:7e:69:77:16:79:a7:95:23:39:27:fa:9f:
59:dc:67:e1:f1:da:30:e7:9b:78:d6:7f:2b:31:41:75:88:c7:
16:9f:16:a6:5d:b4:ee:e2:c9:5e:46:9e:cd:89:26:48:0d:a3:
f1:d9:dd:1e:2b:c1:88:7c:c8:8b:64:d3:cc:a1:2d:40:c7:9a:
4e:cc:a8:48:a4:67:a1:6a:de:48:66:0d:fc:0e:f6:8d:76:63:
35:21:35:d5:41:dc:85:98:e4:15:70:ec:c9:05:eb:cb:8e:56:
aa:70:ec:98:45:df:0c:01:85:ba:59:b4:60:dc:27:92:97:33:
6b:d4:d3:85:b3:d3:98:0d:2d:bc:5c:b8:39:21:92:9c:15:d1:
0f:35:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:40 2024 by rpki-client on console-ams.rpki-client.org