Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/zAULZ41QmTLCubwx9jstnt2K1cg.roa
File: zAULZ41QmTLCubwx9jstnt2K1cg.roa (raw, json)
Hash identifier: UBeHk6y4n+30dpklSZSgY+Fup5itxJbY15aOpysNNKM=
Subject key identifier: CC:05:0B:67:8D:50:99:32:C2:B9:BC:31:F6:3B:2D:9E:DD:8A:D5:C8
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1883A97870A62A7C785E0BDDAC56
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/zAULZ41QmTLCubwx9jstnt2K1cg.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 45.139.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 05:55:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:18:83:a9:78:70:a6:2a:7c:78:5e:0b:dd:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc050b678d509932c2b9bc31f63b2d9edd8ad5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9a:29:6d:e9:ba:48:34:42:c0:00:2d:4c:55:
39:dd:0f:0f:5e:dd:71:7f:74:e3:58:90:f2:28:ef:
58:dd:1a:af:ba:c3:e9:c7:db:0a:68:8e:87:1e:a4:
bf:bb:97:11:41:79:86:e5:8d:61:0d:0d:93:41:2a:
11:63:7f:46:ed:98:47:16:d2:17:ac:d8:1a:02:1d:
9e:e0:dc:18:45:1a:40:fa:63:11:df:f1:ce:b1:55:
a4:27:e1:97:a5:4f:aa:5c:18:60:d9:3c:1e:d7:6e:
7b:58:cf:78:00:e7:84:99:f9:77:3e:d9:11:3d:e1:
a1:63:c2:45:50:28:74:ea:fb:bf:e7:35:53:c0:ea:
fb:c5:15:a8:ed:bc:d0:0c:09:14:d4:cd:ac:32:f7:
08:34:0f:23:34:30:77:f1:69:fe:3e:7f:ad:36:5f:
39:d8:dc:de:34:60:b4:0c:3a:86:f6:cf:df:1c:87:
5a:24:64:c8:27:4a:7d:5c:83:82:3b:2a:74:6d:4c:
72:37:5b:77:9a:c4:01:02:f3:c4:17:0e:53:18:70:
10:7e:98:29:4a:99:d8:fd:76:ab:e9:f4:d9:66:33:
7e:7e:cb:ff:a0:25:22:4d:17:52:16:e4:b0:7a:12:
51:63:98:41:13:d4:3a:16:fe:28:48:a8:95:66:1c:
f7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:05:0B:67:8D:50:99:32:C2:B9:BC:31:F6:3B:2D:9E:DD:8A:D5:C8
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/zAULZ41QmTLCubwx9jstnt2K1cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/24
Signature Algorithm: sha256WithRSAEncryption
37:a1:34:c4:fb:4a:16:4a:e5:2e:16:b7:15:53:97:a1:b1:45:
aa:82:5e:47:4c:5a:3c:cf:78:86:c0:49:19:e9:46:87:d3:2b:
42:07:c2:8b:1a:9a:34:c4:80:94:30:08:cc:21:eb:a3:f3:ee:
b0:08:a4:41:e1:a4:de:cb:59:40:ac:67:a7:88:1d:5d:01:8f:
ff:02:cf:e0:35:dc:75:84:1c:da:63:d2:38:cc:f1:61:41:f4:
13:83:69:6e:d1:46:a0:0e:af:e5:af:f2:78:1a:b3:60:ee:32:
50:44:52:bd:fc:9f:3b:d6:50:97:b8:0e:59:4c:68:3d:90:5c:
54:93:d3:99:1f:64:fc:f1:73:ef:c7:2f:38:11:bb:c0:73:85:
13:1a:6c:66:ce:c2:7a:3d:cb:9d:60:e5:3b:77:a6:98:e6:ae:
c2:9c:f3:48:8a:5c:e5:01:99:b2:3e:57:aa:46:55:05:0c:db:
be:27:ea:60:9e:a6:b4:d0:13:84:27:f7:60:f6:d1:b1:c4:f5:
75:5c:da:74:d4:a6:44:f6:f3:c7:48:39:37:17:5f:48:84:ef:
36:2a:dd:d8:1e:12:1d:c3:cd:ac:3e:60:c3:c4:1c:25:51:07:
9f:80:76:ca:05:5e:7a:15:6a:c7:37:aa:46:c9:0e:dd:09:5a:
4a:7b:2d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:47 2024 by rpki-client on console-fra.rpki-client.org