Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zoGJvaTQWSRMBC3oXkwTOoKocyQ.roa
File: zoGJvaTQWSRMBC3oXkwTOoKocyQ.roa (raw, json)
Hash identifier: chOlC/ZfRCNEnWvn70+Jb0yeNTETryba9Iss5D8JRTA=
Subject key identifier: CE:81:89:BD:A4:D0:59:24:4C:04:2D:E8:5E:4C:13:3A:82:A8:73:24
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0191C6D96A53540158473449807D9F3955C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zoGJvaTQWSRMBC3oXkwTOoKocyQ.roa
Signing time: Fri 06 Sep 2024 10:20:22 +0000
ROA not before: Fri 06 Sep 2024 10:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50053
IP address blocks: 45.128.232.0/24 maxlen: 24
45.144.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 09 Nov 2024 09:34:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:d9:6a:53:54:01:58:47:34:49:80:7d:9f:39:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 6 10:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ce8189bda4d059244c042de85e4c133a82a87324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:ca:c6:5b:eb:27:48:ca:67:bc:36:c5:1b:
45:3e:48:20:c0:37:d6:04:6e:ae:5b:d3:10:f6:4d:
39:6f:65:8d:ec:a3:8b:01:36:d1:8c:27:98:4a:cf:
2f:5a:a5:0f:c4:9e:b0:44:c3:d5:18:5f:67:c8:47:
e7:82:c7:38:6e:e6:6c:1a:89:e6:e2:75:19:0f:39:
48:71:21:61:1e:be:78:4b:51:c6:f0:ae:da:fd:d9:
aa:3e:54:7b:82:c1:23:c6:fb:69:bb:4c:a4:cf:f2:
70:a4:fe:a9:42:d5:5b:c6:89:27:e8:ba:87:94:66:
67:da:21:87:ad:61:de:aa:6b:28:68:a9:22:67:19:
17:ff:eb:09:ca:2e:94:20:d0:37:3c:da:a0:c3:e8:
f6:91:15:91:b9:20:3f:c2:ba:a7:4b:cc:33:b8:6f:
7f:74:96:96:3e:80:1b:59:8b:0a:3d:e5:46:0d:46:
ad:05:6b:76:37:b7:ac:30:8b:fb:c5:9c:89:47:37:
62:fc:f2:df:36:1f:b0:22:33:b7:50:97:76:54:d3:
69:43:29:6f:9e:d7:89:49:02:09:2e:7f:9c:8a:11:
d3:a5:ea:eb:70:9f:4f:de:37:85:ca:74:7f:e5:9d:
58:28:73:45:e5:0e:40:a0:2f:7b:91:6b:17:f6:7e:
89:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:81:89:BD:A4:D0:59:24:4C:04:2D:E8:5E:4C:13:3A:82:A8:73:24
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/zoGJvaTQWSRMBC3oXkwTOoKocyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/24
45.144.154.0/24
Signature Algorithm: sha256WithRSAEncryption
26:36:d4:dd:73:f6:93:fb:6d:cf:ed:27:33:33:3c:4d:f8:76:
a4:1a:11:7a:92:df:28:1b:7d:29:53:47:d9:ce:64:5a:1c:09:
27:01:3a:77:02:15:b9:4f:d1:e7:09:9c:e2:15:84:41:c0:51:
90:a0:9f:44:2e:e2:e2:f0:42:38:b3:79:41:19:dd:8e:e7:e9:
00:7f:f9:a1:99:b2:c4:4a:2c:93:94:df:54:03:26:ca:80:8f:
54:5a:d3:73:a6:01:a5:1f:0b:d0:b9:99:5c:d6:d9:95:b9:a8:
77:e0:2a:95:fe:52:f5:3a:24:ba:0f:90:03:72:dd:19:97:30:
da:d4:d7:42:39:4e:1f:e3:f7:33:54:a4:2e:8a:ba:2c:ab:2a:
5a:83:36:cc:94:75:e4:e7:9b:a0:77:5b:f3:92:2d:07:13:af:
a8:16:49:80:d1:f9:3d:88:55:52:3a:08:87:4d:f4:ee:fd:78:
6e:a1:c7:ec:db:f9:4a:b1:4f:89:73:19:d6:b3:99:31:2a:05:
e6:0b:62:9c:9d:a2:5e:f6:a5:e6:2a:e8:89:d9:c1:48:8d:17:
96:65:ca:09:a1:55:f5:33:ab:a9:93:24:81:2c:a4:7d:9a:ce:
eb:80:60:42:bd:06:72:12:0d:56:c3:5e:b3:ae:9f:7a:b2:67:
07:f6:19:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 9 12:52:35 2024 by rpki-client on console-ams.rpki-client.org