Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zObxW-Z85Nw8ZeatcKZ6Swf_XT4.roa
File: zObxW-Z85Nw8ZeatcKZ6Swf_XT4.roa (raw, json)
Hash identifier: VlYlvUSa1drgm1Ct3QZSV36yrjoxSyRm1yCMybjqTZ8=
Subject key identifier: CC:E6:F1:5B:E6:7C:E4:DC:3C:65:E6:AD:70:A6:7A:4B:07:FF:5D:3E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 0187800014024F8D2C53F97C17D06CD73077
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zObxW-Z85Nw8ZeatcKZ6Swf_XT4.roa
Signing time: Fri 14 Apr 2023 13:41:41 +0000
ROA not before: Fri 14 Apr 2023 13:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48430
IP address blocks: 45.155.52.0/22 maxlen: 24
45.91.52.0/22 maxlen: 22
45.140.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:80:00:14:02:4f:8d:2c:53:f9:7c:17:d0:6c:d7:30:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 14 13:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cce6f15be67ce4dc3c65e6ad70a67a4b07ff5d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:51:19:46:95:c4:6c:dd:33:14:cc:2a:88:
b1:2e:4c:7b:b7:69:d3:5e:bf:ce:41:f3:49:2c:3b:
74:3e:24:b0:8d:50:10:ed:93:ed:1b:d1:a3:d4:0b:
bc:b6:e3:80:3f:c0:89:7e:14:41:54:2f:58:68:93:
f1:4a:55:e5:ae:d2:c3:c7:2a:f3:5e:af:17:24:5c:
5e:87:be:41:fd:63:1a:fc:d5:2c:06:bc:fa:03:cb:
6d:87:d0:2b:66:ef:a9:19:f7:27:ca:99:85:e5:19:
73:03:26:9e:88:b9:83:bb:11:46:29:67:63:3e:49:
f8:14:3e:7e:ec:a0:a9:96:ed:be:71:78:64:32:f6:
d0:ae:85:f8:96:60:da:a3:18:7e:a3:c0:0f:a3:74:
c3:0a:50:09:45:a8:4b:7e:0c:9e:67:fd:15:a7:57:
a1:03:69:5d:aa:80:e3:b3:06:7b:3f:e7:16:f7:09:
31:79:a5:96:ab:3a:f2:2b:a3:aa:50:e7:47:09:39:
52:8e:b9:a1:30:48:b4:6c:04:14:da:c8:ed:4d:14:
32:22:b7:21:34:15:bb:5f:0a:06:a1:92:2b:3c:b3:
20:4c:82:46:0e:c4:4a:4f:2e:75:cc:6d:f8:74:3b:
29:c1:63:66:1f:dd:fd:b4:a3:24:9c:1d:e4:de:29:
68:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:E6:F1:5B:E6:7C:E4:DC:3C:65:E6:AD:70:A6:7A:4B:07:FF:5D:3E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/zObxW-Z85Nw8ZeatcKZ6Swf_XT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.52.0/22
45.140.166.0/24
45.155.52.0/22
Signature Algorithm: sha256WithRSAEncryption
26:a6:63:95:c3:8d:5e:47:eb:27:d8:49:75:fd:e8:0e:a9:74:
24:5b:7d:7a:f5:6b:82:de:7f:3e:80:1b:a1:bc:e1:65:a8:0b:
22:49:75:7c:ff:9b:5d:79:9e:4c:14:5c:b3:ca:ca:f1:e0:c9:
5f:56:c0:41:8c:5a:0c:5c:d4:b4:eb:ea:e8:98:bf:7b:5c:8a:
52:ef:eb:7d:29:b6:11:40:f5:88:65:0c:c9:85:4f:d2:4b:a4:
a9:df:c7:4d:32:6a:65:c7:e5:ff:a8:f0:48:d8:0b:7f:ac:18:
fa:eb:38:fa:cf:ba:b2:a6:3e:45:80:aa:68:0a:f5:d2:4a:c4:
87:ee:78:2e:fa:30:9d:b0:6a:8a:fd:b6:15:2d:c5:f3:96:eb:
78:23:a5:75:15:ac:1a:d3:3f:63:be:ad:6e:2f:59:1b:ee:0e:
00:3b:eb:19:f4:95:b9:b8:0c:9e:32:59:3a:ee:4c:45:89:42:
5d:1a:3f:f9:61:27:e7:db:fd:f4:a9:75:ef:e9:a9:5a:b9:3d:
34:e0:4b:9d:10:d0:b9:1c:ec:86:db:4b:e7:7c:f0:60:f4:94:
3f:6d:aa:36:9b:2b:87:8d:41:b6:4c:28:ff:d4:5c:35:45:4a:
d9:2a:39:3e:b3:37:dd:d5:eb:03:cb:c3:51:e9:d3:43:b4:cc:
7a:09:ea:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org