Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/_Zeyjn92N9PE6TtvRKvMuSvIcWY.roa
File: _Zeyjn92N9PE6TtvRKvMuSvIcWY.roa (raw, json)
Hash identifier: msaPZZFXIfwJJBWt8ji7IWcDUMwWPMGdCUVFgsZ3XDI=
Subject key identifier: FD:97:B2:8E:7F:76:37:D3:C4:E9:3B:6F:44:AB:CC:B9:2B:C8:71:66
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 018B1EBC8F2F44504E02F10FE57E7C37CA41
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/_Zeyjn92N9PE6TtvRKvMuSvIcWY.roa
Signing time: Wed 11 Oct 2023 12:35:55 +0000
ROA not before: Wed 11 Oct 2023 12:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198510
IP address blocks: 45.140.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:bc:8f:2f:44:50:4e:02:f1:0f:e5:7e:7c:37:ca:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 11 12:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd97b28e7f7637d3c4e93b6f44abccb92bc87166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f5:80:34:57:a2:84:14:65:17:85:00:59:60:
af:d3:c0:fa:f9:89:b8:04:4e:11:e0:f9:36:61:ef:
4b:cd:e8:8e:c4:22:34:79:41:37:d7:67:7d:c4:84:
7a:9f:cb:de:dc:40:6a:5a:18:32:15:6a:63:35:40:
c2:32:f8:76:f1:1a:28:7d:50:4f:04:f8:bf:c8:4f:
e3:84:ae:f6:6f:33:e2:58:38:e1:20:e8:2b:89:d8:
67:5d:f8:80:62:05:2c:09:1c:87:a3:4d:dd:92:d1:
68:0f:be:fb:9d:20:ef:ad:42:fd:2e:9a:61:50:b2:
a6:fe:f0:db:b8:f2:4c:8f:6c:e7:96:bc:ed:47:be:
70:99:a9:20:dd:e8:06:2f:d6:e5:26:b1:22:89:23:
27:8c:30:da:b2:ac:58:f0:00:56:84:49:01:dd:88:
a8:9e:8c:fb:94:37:e3:3a:7e:41:b4:a6:a8:74:56:
db:e0:d1:8d:a8:bd:e9:bb:41:c2:d1:7e:96:e1:a3:
39:43:7d:98:b6:24:89:6f:c9:09:fd:99:cc:8a:94:
a7:c4:c3:21:cf:49:27:bf:6a:76:11:60:24:1d:ff:
fa:bb:d5:e8:1f:c5:f3:c8:0a:23:1a:08:a5:06:69:
7d:65:d8:d8:ff:8d:f1:7e:e7:99:01:47:87:a0:93:
4e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:97:B2:8E:7F:76:37:D3:C4:E9:3B:6F:44:AB:CC:B9:2B:C8:71:66
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/_Zeyjn92N9PE6TtvRKvMuSvIcWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:b4:87:37:1b:ec:ef:69:94:d7:40:25:a7:fe:9c:3c:6c:21:
ad:7f:ba:ff:bf:d0:cb:62:e3:6f:59:92:35:d0:ea:69:6c:bf:
ed:94:85:f3:d4:3a:b0:38:cf:9a:2a:1e:18:e1:23:fb:eb:f4:
61:3c:28:87:c7:23:5a:6f:be:c9:81:a1:e0:5b:83:c5:83:c9:
1c:f7:03:00:b5:0d:7e:fd:12:e5:6c:98:16:a9:d0:eb:50:f0:
64:ca:33:3e:5c:1f:55:0a:18:e9:3b:e3:7d:88:15:4f:e7:40:
8a:ff:92:ed:10:6c:73:0d:bc:52:e5:44:1b:bc:22:9f:a2:c2:
4a:2b:f4:82:e2:f9:9a:cd:2b:72:ed:de:ab:95:cf:0b:cf:cc:
b8:4f:4f:6f:df:a2:62:ac:3a:6a:bd:e3:63:13:a9:df:64:7d:
ef:a5:74:5c:0c:c5:09:09:87:30:83:c5:a3:3b:60:e5:fa:4b:
95:44:89:d7:1e:6c:00:45:f0:50:89:14:48:8f:25:1f:ff:bd:
dd:26:3c:5e:e2:da:c4:73:67:5c:0c:92:8c:33:a6:af:b6:8d:
7a:8e:37:12:15:e9:1e:f4:dd:e1:d3:a1:a7:1c:73:da:6a:b1:
60:3c:a2:eb:ce:b7:41:42:ef:0d:44:3d:3e:9d:d9:5e:cf:b1:
03:1b:cd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org