Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zeDXEWDg_WbrQtiGReKjfZecLB0.roa
File: zeDXEWDg_WbrQtiGReKjfZecLB0.roa (raw, json)
Hash identifier: 0p84pgl2RLIFO2B6qXYjoYm/XP80W+JEKBcTc8RgedY=
Subject key identifier: CD:E0:D7:11:60:E0:FD:66:EB:42:D8:86:45:E2:A3:7D:97:9C:2C:1D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F44C786E3E1E6450B97F325D4F1FC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zeDXEWDg_WbrQtiGReKjfZecLB0.roa
Signing time: Tue 02 Jan 2024 04:29:44 +0000
ROA not before: Tue 02 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198652
IP address blocks: 45.81.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 12:36:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:44:c7:86:e3:e1:e6:45:0b:97:f3:25:d4:f1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cde0d71160e0fd66eb42d88645e2a37d979c2c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a3:eb:80:50:11:c2:19:3b:5e:49:5e:71:83:
f7:51:60:3c:b7:ac:b9:ae:c2:c9:7a:f8:82:b8:23:
0a:96:16:0c:f3:67:c8:50:77:aa:e5:73:5c:d1:c5:
21:a5:a3:e4:97:e7:e3:69:ee:11:f4:de:1c:fc:20:
63:fb:34:4e:a9:23:e8:d2:5d:c9:b1:77:53:09:4d:
20:30:2a:6a:32:6d:a2:94:fd:94:c1:97:9f:96:ee:
70:78:09:c4:72:e4:4c:bf:42:98:7c:4b:ea:96:62:
f3:f3:49:71:19:3d:e6:b5:d3:3e:4d:99:47:be:8e:
e1:e7:65:e9:1d:d2:0c:bc:96:4c:bd:d1:5e:93:c1:
50:da:08:0b:78:df:b6:5e:49:cf:6b:da:11:2b:31:
60:6d:e1:aa:62:40:46:7b:bc:d0:69:9e:8b:de:55:
d2:5e:f4:c0:25:45:65:60:86:60:15:f7:7c:96:57:
fa:d2:a5:f3:3d:1d:db:bb:e7:4e:86:b4:d5:e3:4e:
4d:b8:82:8b:48:d7:b6:b0:3c:ba:eb:63:7d:57:88:
72:41:62:df:c1:4b:5e:24:5c:f4:71:c3:31:c5:7c:
62:7a:61:f1:d8:e1:e3:68:fd:22:da:ee:c3:10:f2:
83:8e:55:df:c2:c8:ec:78:38:90:52:b4:49:c8:46:
4c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:E0:D7:11:60:E0:FD:66:EB:42:D8:86:45:E2:A3:7D:97:9C:2C:1D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/zeDXEWDg_WbrQtiGReKjfZecLB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.113.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f7:1b:8d:49:d2:e2:21:39:9e:54:27:ac:fb:f3:7f:45:b9:
e7:7e:3f:ec:f7:9c:0a:87:b9:e7:40:1f:34:54:82:84:f9:ed:
9f:40:9a:75:a3:d5:b3:b0:d4:b2:bb:18:94:a6:9d:0d:48:70:
44:a9:8d:02:0a:1b:9d:ab:24:d4:a0:22:c8:42:63:0f:64:42:
ff:75:50:d8:c8:28:7e:dd:42:74:8a:8a:d6:c8:fc:92:7a:b1:
c6:f4:c8:4e:fb:fa:5b:71:a3:59:c1:78:24:0e:ce:35:c2:1f:
ea:f6:d9:3c:59:6e:91:0b:2e:fc:90:a6:cb:ad:50:22:17:e9:
03:44:94:52:14:ba:f0:6e:08:4c:cb:ed:04:98:0a:12:66:3e:
2f:18:98:10:2e:dc:b2:a2:d9:74:9c:6d:06:04:4e:74:f5:7b:
3c:0a:27:58:c3:24:b0:67:4e:d7:33:8f:88:f0:a9:e5:01:d4:
e4:9e:0f:90:bc:e3:4f:10:13:1e:1b:db:09:ce:03:07:d2:18:
d0:df:87:79:4e:76:ba:2a:d6:f1:0e:ee:e2:ca:7f:95:b3:b3:
95:1c:49:a0:7b:1c:56:f5:e8:3e:01:b1:3e:12:ef:f3:84:f9:
b2:c7:7c:f4:9b:69:6a:b9:b3:c6:d8:8e:90:3d:5f:02:6c:f8:
a6:53:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 16:49:32 2024 by rpki-client on console-ams.rpki-client.org