Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/zadAul6NsyNCLcBUqvRcx89CrzA.roa
File: zadAul6NsyNCLcBUqvRcx89CrzA.roa (raw, json)
Hash identifier: nfhjGasTXG0/bXuJ10wc9FdOgEEpTTc17dWe/rc24u4=
Subject key identifier: CD:A7:40:BA:5E:8D:B3:23:42:2D:C0:54:AA:F4:5C:C7:CF:42:AF:30
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 018CC3B72CE78841BA47EBDE51032CAE8802
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/zadAul6NsyNCLcBUqvRcx89CrzA.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5511
IP address blocks: 45.151.252.0/22 maxlen: 24
45.129.90.0/24 maxlen: 24
45.129.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 Apr 2024 05:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2c:e7:88:41:ba:47:eb:de:51:03:2c:ae:88:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cda740ba5e8db323422dc054aaf45cc7cf42af30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1a:31:6c:ae:35:4c:fa:c0:71:f7:7c:69:68:
3f:da:4e:7e:2d:ca:d2:c1:55:92:fc:6d:98:e0:80:
90:e8:be:74:66:a4:a7:63:ae:4f:57:5c:fa:c2:33:
23:cb:ad:50:88:a3:a4:64:63:35:2d:d6:48:1b:3b:
c3:a0:f2:f9:1e:35:13:53:39:df:9a:75:61:69:14:
58:2f:fb:08:25:9d:59:60:09:b8:e0:e0:e7:7f:c1:
6a:5f:a5:78:01:97:74:eb:dd:ec:32:b3:f2:1b:29:
0e:b9:f4:48:a7:57:2b:72:90:f9:c0:6b:3d:8e:a2:
76:2b:2d:98:a4:e8:57:1e:b2:9e:b3:82:15:7c:ce:
2b:74:e2:1b:b0:68:e0:ad:00:7e:97:69:24:3e:b1:
f2:8b:ae:c5:9f:30:f3:33:be:1a:1e:18:df:8a:6a:
00:cc:74:1a:b9:2b:09:bb:b3:27:e5:a4:ea:e8:9c:
35:1b:26:a4:7c:07:6d:c2:8a:4c:3b:5a:b7:f1:bc:
20:ff:ef:87:0f:1a:e4:67:7d:fd:42:f8:dc:ae:bf:
37:61:68:5f:29:94:46:b5:95:95:05:95:e6:3e:b9:
2c:d6:cb:8f:e0:fc:0f:53:94:4b:fe:fb:ab:82:67:
36:f6:7f:32:30:81:d3:cb:a6:64:4f:1d:04:25:8b:
59:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A7:40:BA:5E:8D:B3:23:42:2D:C0:54:AA:F4:5C:C7:CF:42:AF:30
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/zadAul6NsyNCLcBUqvRcx89CrzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.88.0/24
45.129.90.0/24
45.151.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:e2:db:5b:b9:0a:32:2b:db:dc:3c:06:b8:7e:e6:a8:aa:a4:
d0:7b:25:c0:0a:e1:56:24:aa:05:7d:f8:64:30:57:c5:26:b6:
c4:0b:eb:c3:7d:6c:c7:7e:5e:1d:b5:94:cd:7c:40:af:27:ac:
92:ee:17:b0:23:31:e1:a2:86:3a:9b:38:86:1f:60:97:1c:ce:
7c:78:23:7a:4b:11:70:1f:59:6e:78:76:58:8f:30:f7:71:71:
11:a9:19:94:96:a7:43:5f:34:be:87:8c:59:f1:51:35:db:dc:
51:1a:29:60:c1:48:e1:68:28:c9:96:b8:2d:5b:a3:ce:15:f2:
57:01:15:8e:5c:45:49:c4:33:3f:f8:9e:d7:40:3b:8e:d3:fa:
5a:3e:db:70:9b:72:14:4b:ef:81:3c:af:5f:89:18:99:4a:be:
22:c6:b3:34:ba:1f:b3:86:ec:ca:1b:e2:4a:08:b4:53:03:30:
9b:6f:db:e2:6d:52:50:30:62:71:d0:7d:b8:98:6a:a4:3e:67:
e7:61:95:4e:7f:09:3c:c9:32:4c:69:b3:c9:17:d4:61:25:25:
3b:2c:72:03:d3:73:e4:34:91:4f:f3:7f:8c:2e:75:5d:c7:45:
3d:2a:be:72:0b:08:51:bd:05:c9:49:ce:58:33:fd:4e:4d:78:
cf:ed:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org