Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Zim2UP7VIgqvcDgV2JgIRj5U6cM.roa
File: Zim2UP7VIgqvcDgV2JgIRj5U6cM.roa (raw, json)
Hash identifier: Vgsj8eGliTKhbXWxkN6tnEOmgVdibJb9MKbNeaLTQ4E=
Subject key identifier: 66:29:B6:50:FE:D5:22:0A:AF:70:38:15:D8:98:08:46:3E:54:E9:C3
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CF8181F9F4EB333592F20915759604EC9
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Zim2UP7VIgqvcDgV2JgIRj5U6cM.roa
Signing time: Thu 11 Jan 2024 10:36:19 +0000
ROA not before: Thu 11 Jan 2024 10:36:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59504
IP address blocks: 147.45.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 Jan 2024 19:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:18:1f:9f:4e:b3:33:59:2f:20:91:57:59:60:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 11 10:36:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6629b650fed5220aaf703815d89808463e54e9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:31:e5:eb:5b:04:eb:41:fa:d1:b9:0d:f3:14:
f5:6c:43:ab:5f:b2:b3:68:5e:55:e2:c4:f6:23:bf:
f2:1e:10:14:07:5c:70:75:75:ad:3b:e8:82:1a:55:
0a:61:ee:60:4c:4a:83:2a:61:69:48:ce:e0:9f:5b:
a2:ed:7b:83:6d:aa:19:b2:0c:8c:c6:91:8b:4a:41:
86:a7:4f:fe:72:f3:66:5f:cb:e8:99:f6:9d:f6:74:
08:12:2f:4d:0c:2e:8f:00:5d:df:af:f5:f8:ed:6a:
7f:17:54:62:e8:f4:a5:bc:f7:a6:ee:d6:f5:4a:8d:
b0:df:9e:d2:69:75:0b:6c:c1:bb:ac:dc:79:eb:6a:
07:41:48:f0:4c:24:58:a4:07:34:da:53:98:c7:e4:
3b:e8:10:56:db:79:53:18:c2:d7:8e:a2:d7:2d:ea:
08:2e:1e:4c:df:4d:14:21:ab:ff:25:39:54:8a:f5:
1f:b9:70:63:04:77:22:a5:57:ef:d2:5b:3a:43:e7:
2d:ae:bb:d7:95:76:dc:67:d6:95:5a:54:e5:59:c2:
17:ba:0b:07:4b:ad:54:c0:f6:22:51:80:81:e2:ed:
94:35:0d:0f:d1:d3:52:0c:66:fe:cf:d8:8d:86:03:
cb:fc:12:bc:3b:41:5b:ac:fc:88:f6:32:06:0e:8e:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:29:B6:50:FE:D5:22:0A:AF:70:38:15:D8:98:08:46:3E:54:E9:C3
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Zim2UP7VIgqvcDgV2JgIRj5U6cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.46.0/24
Signature Algorithm: sha256WithRSAEncryption
32:28:a0:69:0c:66:fd:e1:28:8f:87:62:09:d7:2e:59:90:bd:
05:90:b9:39:4c:9a:ea:28:e6:84:ac:fa:a7:d8:57:05:f2:6c:
23:ee:f3:1e:02:be:c8:5b:17:a7:6b:d4:0d:8b:f7:8d:54:d9:
ce:dc:75:fb:da:43:b6:02:cf:37:bf:69:18:ad:7f:4b:7a:5e:
63:db:3d:1a:97:8a:ac:e2:dd:82:f2:57:b2:3b:25:eb:62:f3:
82:7c:37:b4:a4:4e:c6:eb:63:04:70:79:61:bc:d4:05:3d:8e:
ae:c4:a2:b3:f6:be:9d:fc:7e:b3:dd:42:12:e8:2a:65:40:5f:
eb:0b:17:22:70:20:0f:97:a4:2d:d1:33:03:73:b0:fc:5a:65:
d4:db:ff:bc:79:3e:e4:b8:cb:dd:6b:9b:90:b5:a8:39:e4:97:
a1:35:0b:26:ab:3f:20:91:fd:bc:34:08:9c:7f:ce:5d:81:26:
c8:da:39:75:ab:68:54:01:8f:3e:9d:54:fb:78:e8:78:20:15:
18:b5:ff:09:e7:7e:a9:ae:0f:bf:e7:1c:cf:1c:5f:04:d8:69:
82:8a:c2:b7:97:d8:1f:6f:26:c4:cc:f3:40:6d:9d:1b:6d:1f:
2d:40:e9:31:23:4c:94:89:4e:c8:d6:ba:7e:d5:05:17:bc:05:
fe:7f:ef:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 20 22:08:31 2024 by rpki-client on console-ams.rpki-client.org