Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/ZosU-S20ddn0AITGl6X7N3a0UDE.roa
File: ZosU-S20ddn0AITGl6X7N3a0UDE.roa (raw, json)
Hash identifier: sqIZpoe9v9l79O96yo59ASaOaauVu4hp/dTjWuhYBAk=
Subject key identifier: 66:8B:14:F9:2D:B4:75:D9:F4:00:84:C6:97:A5:FB:37:76:B4:50:31
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 0186556991FC9C024A392E1FBD86D538AE7A
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/ZosU-S20ddn0AITGl6X7N3a0UDE.roa
Signing time: Wed 15 Feb 2023 14:10:27 +0000
ROA not before: Wed 15 Feb 2023 14:10:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.85.204.0/22 maxlen: 22
45.134.92.0/22 maxlen: 22
45.90.48.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:69:91:fc:9c:02:4a:39:2e:1f:bd:86:d5:38:ae:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Feb 15 14:10:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=668b14f92db475d9f40084c697a5fb3776b45031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1e:ae:39:39:46:89:00:93:af:30:7d:2a:8d:
f3:f9:f9:06:bd:0c:d4:d7:bb:82:de:25:bc:31:73:
a5:33:e1:40:6a:03:87:86:31:ca:39:4d:98:39:09:
fd:61:21:b8:75:6c:6e:ff:db:bb:21:34:5e:7c:cd:
f3:a4:80:74:f5:3e:ec:16:d5:54:f6:2d:13:a5:5a:
d0:3d:39:fa:ab:69:c9:98:6f:36:c7:d8:84:76:35:
31:17:48:86:4d:13:e3:e4:fc:ac:ba:1d:70:d2:82:
01:cb:7d:a7:1b:1a:3c:ea:b8:ee:98:ca:f5:a4:b3:
aa:dc:fb:27:42:93:85:8c:1d:f5:5b:12:04:cd:08:
5f:ab:4c:b9:6f:f8:19:eb:a9:c3:19:d2:36:f2:9b:
14:57:7b:97:d5:34:3e:17:d3:d0:c2:0c:7c:9f:19:
29:c2:3b:48:b6:2a:c3:1b:66:d4:d3:1b:6f:8b:2f:
64:94:f1:15:61:6e:d6:22:0d:3b:b4:e3:cd:eb:63:
29:a2:1f:1c:74:2e:3e:a8:68:7a:b0:2b:a8:ae:6a:
b9:91:06:f0:24:73:f0:ef:23:f2:b4:ed:6d:ec:93:
f7:5d:e3:11:0d:bf:ae:44:f0:58:fc:c6:b7:73:65:
74:2b:df:1d:58:8f:72:9b:c7:39:9a:89:f1:60:95:
60:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8B:14:F9:2D:B4:75:D9:F4:00:84:C6:97:A5:FB:37:76:B4:50:31
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/ZosU-S20ddn0AITGl6X7N3a0UDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.90.48.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
04:09:f8:ec:ef:60:25:7a:8d:2a:c2:4d:87:e1:78:7e:3a:fe:
06:3d:bc:90:2e:88:54:71:5d:8b:ca:e4:01:bd:85:56:bf:27:
94:ea:7e:bf:19:9a:2f:66:42:9c:78:fb:88:81:f4:67:1d:28:
1c:d1:25:21:70:42:13:58:20:99:48:55:53:19:fe:e1:95:90:
87:0c:ff:14:80:02:02:69:45:4a:f3:47:e3:83:a7:0e:bb:5e:
c2:5c:9d:ec:dd:df:f5:9f:b4:3c:e1:4b:2e:3f:c1:b6:c0:90:
82:6e:ee:dd:fc:4b:e7:1f:ab:e0:b7:60:11:b1:89:f4:2d:98:
91:25:9c:bb:5b:28:36:51:ba:60:67:35:7e:6f:04:2e:e0:eb:
31:70:3f:f0:cd:57:3e:5b:f4:f1:f7:e8:0b:97:17:2e:db:0b:
68:da:40:36:0c:d0:42:64:dd:bb:99:3d:3c:a2:e3:c6:a8:2f:
76:f3:7f:58:91:e0:49:9f:42:6f:bd:21:54:cc:e4:ff:97:0f:
36:b2:c1:46:44:c4:8f:e8:4d:5e:be:21:a3:90:8f:8c:69:95:
af:fe:f9:56:2e:e6:b9:86:55:ea:7b:3e:0f:12:77:48:95:24:
78:d3:b9:36:6b:ef:67:cd:af:4a:f2:90:63:fd:d3:3e:cf:bd:
1f:c9:1a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 12:38:12 2023 by rpki-client on console-ams.rpki-client.org