Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Ezr_Q0hLTER2np4n6jASMfnS__I.roa
File: Ezr_Q0hLTER2np4n6jASMfnS__I.roa (raw, json)
Hash identifier: VR70kTQZamcq1Te5mo2vAFZ1NOxmz0RXWvBwpWr/NdY=
Subject key identifier: 13:3A:FF:43:48:4B:4C:44:76:9E:9E:27:EA:30:12:31:F9:D2:FF:F2
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570028B387EB3E033B57668EDFB06FDA1
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Ezr_Q0hLTER2np4n6jASMfnS__I.roa
Signing time: Mon 02 Jan 2023 01:04:52 +0000
ROA not before: Mon 02 Jan 2023 01:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 65544
IP address blocks: 45.156.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8b:38:7e:b3:e0:33:b5:76:68:ed:fb:06:fd:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=133aff43484b4c44769e9e27ea301231f9d2fff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:12:0c:82:e1:2c:1b:e5:a0:39:5b:a8:ee:af:
6a:b9:24:23:57:89:bc:9d:46:fc:7e:7b:38:cc:67:
1d:aa:68:77:70:9e:7a:3f:f9:b9:13:4b:e1:0b:c1:
64:fc:40:10:41:48:4a:4f:b8:52:d5:7f:e6:c1:99:
2e:66:d3:70:d1:3d:be:a9:5f:cb:b6:05:cc:24:b2:
d4:a2:a2:ff:a9:ba:f3:a5:63:b7:6a:1e:7e:56:47:
45:b7:26:92:8e:82:de:8a:bc:bf:ef:f9:93:8e:b9:
87:2d:04:5d:52:c6:08:5b:4a:d9:f4:4a:24:98:59:
56:2c:48:ef:4a:33:8a:98:ee:62:77:c9:16:53:36:
3c:3b:ad:4a:0c:63:c8:44:5c:22:6c:50:bb:0b:bf:
2e:61:47:17:eb:4a:86:9d:9a:da:e7:57:f9:22:e9:
b9:a4:cf:ae:40:ec:29:63:41:00:4e:0d:6c:1e:cb:
73:ab:c3:93:29:d5:b3:18:16:b9:20:bf:23:3a:c1:
19:95:ed:c1:d9:e4:f3:86:55:dd:65:0b:6d:a6:1b:
05:86:86:63:e7:f1:c3:12:0a:02:f9:28:a5:86:ff:
c9:e8:70:f0:6e:1a:45:1b:6a:ed:50:58:4b:ce:99:
e8:ca:7d:1a:3f:e2:4d:3f:b0:6e:17:57:bf:9f:08:
3c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:FF:43:48:4B:4C:44:76:9E:9E:27:EA:30:12:31:F9:D2:FF:F2
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Ezr_Q0hLTER2np4n6jASMfnS__I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.15.0/24
Signature Algorithm: sha256WithRSAEncryption
35:6d:21:5d:c4:86:2e:ae:48:8e:4b:2e:0c:7f:8b:0a:3d:6b:
f3:d4:55:03:f4:3b:64:0e:fa:8e:56:9e:19:4a:4a:e3:71:e1:
92:3f:6c:aa:25:e5:aa:80:5f:c8:28:99:d9:d6:44:3a:02:8b:
4a:42:99:fb:32:e7:3d:3a:56:ea:cd:e6:a7:e3:74:4d:5d:62:
f1:45:38:f0:50:02:2f:e2:cd:a9:dd:e7:6b:a5:9d:dd:13:f8:
36:f0:22:b5:63:4d:87:02:f7:5d:25:92:ff:0d:e9:cc:47:9c:
00:64:28:5c:c9:b4:9d:65:90:c0:63:95:ed:0f:d4:38:7a:0e:
e0:a0:95:52:31:b4:c2:df:95:3b:2f:3a:a3:6f:08:ed:06:76:
23:81:34:56:bb:d8:e8:fb:fb:b3:04:81:92:a8:8c:64:28:ba:
ce:e4:ea:4f:69:d7:15:b0:53:e8:da:9c:46:ca:f1:71:39:db:
85:a5:ef:1f:1d:ce:49:b4:8d:2c:c5:8b:f8:ab:29:a4:65:07:
b0:d1:ad:3f:8d:55:46:c7:33:99:54:09:28:96:6b:83:c1:fb:
01:d6:ee:bc:ab:65:e3:4d:67:fe:67:e8:fe:0c:a3:0f:0a:b6:
cb:28:ec:31:91:dc:27:0e:c6:18:c5:35:a6:9c:31:ee:68:40:
15:9e:7f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org