Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/CZfJlzbNUKM4lR2N4w8Ag-4YgUk.roa
File: CZfJlzbNUKM4lR2N4w8Ag-4YgUk.roa (raw, json)
Hash identifier: cL5agSh3eofQqk7BP7VGW2JUm5bbkZvbUuPc0E4j40U=
Subject key identifier: 09:97:C9:97:36:CD:50:A3:38:95:1D:8D:E3:0F:00:83:EE:18:81:49
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01856EAA24F9F1B1ED9055F6F45F1D13F7B8
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/CZfJlzbNUKM4lR2N4w8Ag-4YgUk.roa
Signing time: Sun 01 Jan 2023 18:48:42 +0000
ROA not before: Sun 01 Jan 2023 18:48:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 45.139.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Oct 2023 04:06:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:aa:24:f9:f1:b1:ed:90:55:f6:f4:5f:1d:13:f7:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 1 18:48:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0997c99736cd50a338951d8de30f0083ee188149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:00:a7:64:eb:5d:07:d0:74:6e:6b:1c:3e:40:
4f:de:0e:df:e5:82:34:01:b1:05:1f:93:5f:f8:6b:
e9:46:5a:28:ca:da:aa:2b:7a:03:b2:58:1f:6c:49:
42:4c:0f:7f:9c:b9:dc:24:76:b6:cc:00:f6:2a:4f:
b0:f6:7e:2b:2b:22:44:0f:9f:1a:75:53:dc:b6:da:
aa:f2:21:62:1a:ee:81:33:d4:6c:2d:83:94:5b:83:
c1:8c:b6:c1:33:b8:bb:da:0e:a3:13:5e:6b:2c:4e:
b1:cd:d9:99:24:cd:15:e3:d8:e0:13:93:37:33:95:
b3:84:70:5a:5b:f1:d2:d9:54:0b:1f:6e:d2:98:78:
49:8d:2f:dd:f1:7b:db:4a:d0:b4:c8:80:b4:58:a2:
d2:75:1e:dd:7e:e1:f1:c6:27:f8:73:c5:3d:d1:e9:
b4:81:6b:06:65:64:15:36:d1:b2:d0:0a:ac:3c:06:
15:c5:b2:a4:b8:8a:9d:0c:28:e9:65:af:64:ce:eb:
73:e0:6a:d6:84:19:3f:23:5b:61:08:8b:f8:0e:3b:
48:ac:b8:89:85:e9:40:a8:81:2f:c3:33:3b:03:40:
8d:43:9c:96:15:90:80:06:fe:41:68:a7:54:ec:88:
91:20:1b:ef:6a:b0:53:78:41:b7:31:a3:33:4f:6d:
5b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:97:C9:97:36:CD:50:A3:38:95:1D:8D:E3:0F:00:83:EE:18:81:49
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/CZfJlzbNUKM4lR2N4w8Ag-4YgUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:57:83:a6:dc:ad:b4:8c:b2:17:f6:a7:a1:3e:23:e1:ff:6f:
d6:a3:54:26:f7:39:f6:d8:f0:0b:56:27:93:fc:63:db:f3:ee:
a4:8a:93:7f:e1:c2:71:95:3c:f2:fc:a8:2c:a5:f8:d9:0d:10:
3c:38:f7:ca:b0:6d:e5:0e:b5:8c:cd:86:8c:b1:b8:56:53:35:
ab:b4:63:9c:b1:38:77:3e:5e:fd:2c:56:7e:93:e9:b8:60:f4:
f2:6d:af:8e:14:e7:3a:b6:f2:53:dd:6d:ed:c2:51:8e:28:c5:
38:86:57:6e:42:74:cf:ad:ad:ff:5a:87:4c:60:33:b2:22:23:
0b:e0:e0:d5:a7:cd:d7:bd:18:10:95:71:2c:91:ce:fe:a3:41:
77:ea:9e:d9:59:92:99:aa:ba:da:1a:fc:2f:d1:1d:b0:a8:cd:
83:e4:e9:c6:d4:28:25:eb:c5:7c:92:de:43:cc:b7:17:a8:4b:
44:38:78:9c:95:32:a8:83:e5:04:56:5a:7d:79:68:51:ed:d4:
21:79:35:dd:a5:f7:1f:54:b4:c8:5e:9a:96:26:de:b0:12:ac:
0e:1b:b3:29:d9:20:41:0f:61:1f:df:86:9c:bb:63:09:cf:3c:
d7:59:4a:53:b4:4f:db:45:a0:85:3f:eb:f4:93:8a:bd:9d:47:
ce:e0:7f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org