Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZqGdjtsqpkYk-I-625zPxmJUu-8.roa
File: ZqGdjtsqpkYk-I-625zPxmJUu-8.roa (raw, json)
Hash identifier: ZqcMZzU9cROO3h7E+BtYHI6fZSGk0dAf+myHWl8A5i4=
Subject key identifier: 66:A1:9D:8E:DB:2A:A6:46:24:F8:8F:BA:DB:9C:CF:C6:62:54:BB:EF
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0187107B44AE35E7CFC0CC5FD634DF0D68E3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZqGdjtsqpkYk-I-625zPxmJUu-8.roa
Signing time: Thu 23 Mar 2023 21:58:46 +0000
ROA not before: Thu 23 Mar 2023 21:58:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:10:7b:44:ae:35:e7:cf:c0:cc:5f:d6:34:df:0d:68:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 23 21:58:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66a19d8edb2aa64624f88fbadb9ccfc66254bbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:49:ac:6f:e8:ff:87:6c:40:6e:a9:61:45:
65:0c:ec:57:cb:aa:8d:56:12:ac:d9:12:fb:e2:5c:
d4:aa:a8:3c:e2:d6:9b:5f:09:57:fe:82:86:de:9d:
57:7e:73:67:05:0e:16:d9:28:c4:e5:2c:0f:84:9b:
fd:d1:5d:6b:67:bd:d0:4a:0f:09:06:ae:2a:cf:61:
68:17:75:ed:8f:18:21:4b:c3:70:ea:d2:5a:89:78:
13:e0:75:c1:0a:94:d3:b4:53:fb:16:a0:1e:f6:6e:
bd:e1:3c:e3:42:5d:3c:d6:96:77:ec:25:13:16:01:
fa:ef:b4:d4:56:07:18:92:22:ec:ff:71:13:a4:cd:
0f:c7:94:ae:73:f9:a7:46:08:d6:5c:18:57:de:3b:
00:f2:5c:04:5c:ba:21:11:d1:b5:d7:c1:bc:6b:da:
ab:f6:20:1a:88:f7:df:40:57:aa:49:ab:88:82:03:
fd:9d:d5:1a:85:ef:63:da:e2:dd:ca:0d:f7:fc:75:
e2:52:bd:ed:ad:71:a7:1e:f4:36:9d:15:b0:7d:bb:
31:48:84:ab:73:6e:45:17:55:5a:d5:4b:63:2e:84:
68:98:e6:20:20:64:43:1d:de:99:1d:72:72:b9:4f:
d0:81:95:31:07:cd:fa:43:3f:b8:5b:53:81:a6:39:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:9D:8E:DB:2A:A6:46:24:F8:8F:BA:DB:9C:CF:C6:62:54:BB:EF
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ZqGdjtsqpkYk-I-625zPxmJUu-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
99:18:2c:ea:5f:fc:e6:80:34:08:0f:aa:1b:e4:12:93:02:45:
40:5c:3d:a4:e4:f2:84:2e:ec:60:fd:ef:da:1b:e7:09:76:e1:
44:a6:a4:d4:78:bb:19:fb:cb:28:96:49:ba:98:b0:a3:77:42:
15:61:b1:a2:80:f4:73:54:bc:6f:46:a7:e9:5f:dd:e1:b9:19:
76:c4:83:6c:75:de:fa:f4:5a:c2:7c:5e:81:f8:7b:d3:66:e7:
8e:d6:e9:a7:5a:22:01:9c:06:72:d1:f6:52:c7:74:8d:c9:60:
2e:8e:73:0b:63:e4:63:dc:fb:38:67:d3:2c:ab:7e:23:a2:17:
e1:b3:bc:0f:a6:1d:8d:41:24:ca:bc:cf:6b:17:f3:52:e2:10:
da:41:1a:cd:37:88:17:5f:74:ad:bc:a7:dc:92:64:8e:fd:d5:
4d:ad:82:f3:72:92:a4:5e:7a:f9:a4:aa:c9:73:1d:6c:42:aa:
f5:95:c2:91:81:25:76:8e:e0:b7:e6:ff:22:03:bf:c7:0e:4b:
1e:67:d4:41:de:8e:0e:90:bc:3c:08:29:e9:9e:9b:63:1b:f5:
eb:45:a2:8d:1b:b6:ab:45:85:19:18:17:8c:a7:82:9b:f6:96:
b5:ec:50:15:0f:e6:d4:83:35:bf:e1:5c:57:3c:f1:ed:08:29:
ea:a2:3b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 10:52:02 2023 by rpki-client on console-fra.rpki-client.org