Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Z_cww4Elouzh3QbzZCDiSUYBlLo.roa
File: Z_cww4Elouzh3QbzZCDiSUYBlLo.roa (raw, json)
Hash identifier: G/q4mbz46CMOhwkjHxDIMc/VGzOuyFdUPyo12IuOK8o=
Subject key identifier: 67:F7:30:C3:81:25:A2:EC:E1:DD:06:F3:64:20:E2:49:46:01:94:BA
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0185718C1AF6FC1A8E2521D7B3EAD7A45CDA
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Z_cww4Elouzh3QbzZCDiSUYBlLo.roa
Signing time: Mon 02 Jan 2023 08:14:45 +0000
ROA not before: Mon 02 Jan 2023 08:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 268581
IP address blocks: 45.140.192.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:1a:f6:fc:1a:8e:25:21:d7:b3:ea:d7:a4:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 2 08:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67f730c38125a2ece1dd06f36420e249460194ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:1a:12:7a:6f:ac:81:6d:0a:f0:4e:0b:f1:
83:bd:a2:7a:b3:37:43:fd:fe:4f:e1:01:b7:79:45:
17:e9:a7:91:1b:72:52:d2:ed:2c:84:2c:76:5f:72:
67:57:ee:4d:20:b9:86:15:42:c8:f0:c8:8b:bd:cd:
05:6c:24:cf:e8:a3:3a:d4:42:f7:fe:61:7b:31:8e:
7e:af:55:b2:19:42:d6:e2:f1:e5:f6:c1:e3:68:30:
67:84:7f:b0:e0:a9:04:a2:32:19:5f:a9:9b:91:87:
46:96:6a:9d:8a:42:c3:d6:d6:e1:2b:57:45:ae:48:
64:cd:0f:fa:b6:14:8b:3b:55:5c:be:8e:4d:4b:bd:
7b:ff:a3:d4:44:23:ed:10:ae:db:be:c8:e1:11:d5:
97:98:12:b8:56:c2:92:60:cb:46:85:54:5a:30:14:
03:f4:6c:e1:67:c4:e5:0c:d6:f7:6e:87:09:02:ec:
a3:8d:c0:e7:17:2f:fc:91:ab:96:69:80:e4:34:a2:
0c:af:28:41:ea:18:ce:18:c8:60:cb:8c:51:ae:eb:
3e:8b:79:62:fb:da:35:91:f8:b6:92:16:88:49:f4:
2f:c0:b6:06:41:48:3b:eb:be:05:ac:e1:7a:94:26:
9e:34:8e:6d:2e:8b:17:5a:ba:a7:f2:3a:b3:ee:24:
d6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:30:C3:81:25:A2:EC:E1:DD:06:F3:64:20:E2:49:46:01:94:BA
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/Z_cww4Elouzh3QbzZCDiSUYBlLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.192.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:2c:42:fc:3a:3b:98:27:5a:78:8b:d1:8a:08:a8:51:4d:fb:
f3:6f:9a:34:3b:e5:f2:3d:80:8d:48:29:a9:e7:06:64:d1:e0:
e1:52:bd:7e:f8:66:62:b5:6b:7c:b1:21:e3:f7:19:1a:e1:85:
35:53:50:76:57:ef:d2:6e:63:83:c5:98:fd:c0:92:c1:fb:74:
c7:b8:ca:f8:66:33:0a:11:d3:1d:98:a5:75:30:8d:3a:51:73:
fb:6b:9e:6e:ed:8d:f6:d3:bd:a6:5f:f7:c8:68:2f:2b:4a:93:
94:85:5b:2f:01:9b:f1:d9:53:06:1e:98:76:7a:8d:57:34:d5:
3a:d6:07:46:83:cc:6a:86:6b:4a:75:cb:79:a6:54:55:c8:f5:
f5:d1:50:fe:d9:2a:55:bb:85:05:cc:1f:6f:fe:73:19:53:21:
f3:8b:54:67:e1:e5:fa:cd:2d:df:ae:ca:1b:eb:4c:e1:2a:21:
64:17:11:71:30:df:5b:b4:de:a7:fd:db:23:f2:bc:7b:a5:f1:
81:ae:4c:83:60:9f:19:87:c6:03:e6:f1:98:c8:ca:d4:ee:d0:
a2:5a:7f:39:4d:47:9c:63:a7:17:1f:ef:ed:40:62:dd:8d:e4:
41:eb:9b:c6:a7:52:96:d6:f3:3c:2b:21:02:aa:d1:ba:46:c1:
64:fc:36:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org