Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZKx9_wf1153hT7X36acTar8lMeo.roa
File: ZKx9_wf1153hT7X36acTar8lMeo.roa (raw, json)
Hash identifier: L81jXCB+Rgmx+MTMRcG7AMHbepj0tOYdtm9SUmYGcSQ=
Subject key identifier: 64:AC:7D:FF:07:F5:D7:9D:E1:4F:B5:F7:E9:A7:13:6A:BF:25:31:EA
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018CC50115A529D3385963D8852683F5B941
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZKx9_wf1153hT7X36acTar8lMeo.roa
Signing time: Mon 01 Jan 2024 12:30:31 +0000
ROA not before: Mon 01 Jan 2024 12:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.152.56.0/23 maxlen: 23
45.149.90.0/23 maxlen: 23
45.141.204.0/23 maxlen: 23
195.88.190.0/23 maxlen: 24
195.88.210.0/23 maxlen: 24
45.148.51.0/24 maxlen: 24
45.148.66.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 08 Feb 2024 15:15:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:15:a5:29:d3:38:59:63:d8:85:26:83:f5:b9:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jan 1 12:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=64ac7dff07f5d79de14fb5f7e9a7136abf2531ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d9:55:73:81:78:2a:60:b8:19:04:76:12:2b:
0d:5b:18:17:dd:1c:52:31:79:72:22:57:b5:23:76:
fd:1f:11:2f:66:00:1d:39:e0:ac:06:91:36:16:9b:
96:e4:a6:1a:7d:de:64:f1:12:ae:e6:ab:f3:43:24:
80:20:2b:ca:9a:f5:a5:30:d6:1f:18:28:8f:13:b3:
f1:35:20:5d:ef:8a:32:71:fe:64:f6:30:fc:ac:38:
31:ea:8d:2d:56:59:b4:40:5e:5d:e9:d1:07:6b:9f:
b8:ff:5c:74:86:0f:26:f5:5f:22:04:c8:9b:24:37:
00:f0:12:90:a4:42:10:ae:12:25:0d:e7:ff:2c:d5:
37:16:be:68:2c:b3:42:b9:0b:dc:61:f3:ba:38:ad:
57:f3:27:21:0a:80:d7:af:d7:41:d4:f5:ce:ab:39:
b7:9d:84:1f:78:db:ac:97:24:c5:7a:87:9b:37:f9:
73:10:63:ca:1c:d5:05:1e:c5:7f:48:81:ca:ff:e9:
b6:de:57:06:1a:9b:f1:31:3a:b4:c0:63:6d:29:61:
1b:ae:d3:46:37:6f:40:16:e6:e6:c9:fc:e7:f4:ec:
ec:2c:76:f8:d0:dc:37:cb:f5:35:e3:ef:f3:fc:f9:
0d:36:aa:e3:07:f1:99:92:74:96:9d:83:75:33:83:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AC:7D:FF:07:F5:D7:9D:E1:4F:B5:F7:E9:A7:13:6A:BF:25:31:EA
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/ZKx9_wf1153hT7X36acTar8lMeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
45.148.51.0/24
45.148.66.0/23
45.149.90.0/23
45.152.56.0/23
195.88.190.0/23
195.88.210.0/23
Signature Algorithm: sha256WithRSAEncryption
42:51:24:cb:bb:f0:59:d1:a6:33:78:65:dc:6b:90:81:b3:13:
13:92:0a:52:be:d7:9c:28:c6:cd:d9:b7:51:a8:20:9b:a7:64:
e2:d7:34:90:3b:1e:b9:52:5b:0e:d0:6f:21:2d:b4:8e:01:a5:
be:e5:f5:8d:f8:34:b5:ca:7e:f3:dc:7b:96:b8:40:22:54:d0:
d6:44:07:57:d8:d9:9b:2d:75:89:6d:f7:a5:e9:23:df:3c:dc:
81:9b:4d:79:2f:19:c0:e8:a6:f1:49:04:82:93:e9:57:91:b1:
4e:b8:54:34:21:b9:9a:6b:48:ab:7f:9d:e5:76:f4:72:f1:c7:
ef:31:71:2d:30:70:0b:49:22:48:0c:51:b9:93:7f:66:f0:0e:
58:74:bd:50:29:98:bb:4e:39:54:2c:2d:71:d3:ee:f1:ef:1a:
dd:20:37:89:95:08:17:80:fd:5a:c6:c7:92:93:5c:98:1c:43:
b6:82:31:7d:a3:9d:02:6c:df:5c:ee:18:f1:35:a4:9b:38:d3:
f8:1c:a4:29:b0:e0:bf:a0:ed:63:e7:32:2d:15:0b:a2:8e:f1:
31:d1:11:c5:ea:9d:7a:46:d5:bf:8c:df:af:7e:28:56:7e:20:
7b:f7:13:60:9b:0d:6f:6b:6a:9f:47:d8:6e:f3:d1:0f:ab:c5:
ae:8d:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org