Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7ZETotVRNBvo4cp37MGUpnCo9t8.roa
File: 7ZETotVRNBvo4cp37MGUpnCo9t8.roa (raw, json)
Hash identifier: D6jYA6hGRTXsJZf/NLy+q86zsU98Ft9zdChUN4fluUM=
Subject key identifier: ED:91:13:A2:D5:51:34:1B:E8:E1:CA:77:EC:C1:94:A6:70:A8:F6:DF
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018CC794FC5FAF4108490776BF1A14AAA471
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7ZETotVRNBvo4cp37MGUpnCo9t8.roa
Signing time: Tue 02 Jan 2024 00:31:18 +0000
ROA not before: Tue 02 Jan 2024 00:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 45.84.240.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 15:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:fc:5f:af:41:08:49:07:76:bf:1a:14:aa:a4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 2 00:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed9113a2d551341be8e1ca77ecc194a670a8f6df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4b:40:47:e4:82:f6:b4:8a:88:49:b5:98:0b:
34:7b:e8:1b:27:1a:f6:27:a9:6c:67:27:a2:3a:66:
59:b9:8f:55:1f:e2:a2:09:f0:74:a1:8f:fb:aa:9c:
37:48:cf:f9:80:c3:fb:8d:5a:b6:82:02:83:70:be:
c1:a8:b6:51:3a:e8:df:ce:c2:89:8c:5a:4d:ef:e0:
57:ac:b0:16:16:41:0a:04:25:a3:cb:45:b9:ec:54:
9f:29:8a:f0:e9:d6:07:8b:1d:11:78:98:67:09:50:
41:c4:0f:2e:80:11:8c:f7:d1:f8:1a:31:e5:66:60:
95:d0:68:ad:40:92:3a:8f:00:8c:6d:e2:a6:92:9a:
28:89:78:4e:b7:4e:ab:b9:64:7a:85:a0:17:a9:b1:
e2:3c:f1:d9:a5:86:16:37:37:cf:b1:bb:89:d4:1b:
69:93:82:0e:9b:40:02:5f:34:f5:f3:64:1e:79:89:
f5:46:2b:e2:39:e6:00:49:9a:d0:1b:f6:1d:da:4e:
b6:99:c3:5b:e1:74:ee:c6:e5:37:38:54:96:ab:f5:
6e:25:55:ce:df:e4:d2:9b:1b:9f:6c:9e:97:b3:d9:
76:29:2f:e1:ff:22:49:71:38:a2:44:a5:85:2f:b1:
5a:a2:eb:4a:a1:b8:c3:c1:53:33:9b:69:79:52:65:
c1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:91:13:A2:D5:51:34:1B:E8:E1:CA:77:EC:C1:94:A6:70:A8:F6:DF
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/7ZETotVRNBvo4cp37MGUpnCo9t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:7b:c0:e3:03:ea:3d:41:40:32:9d:2c:2e:6c:4f:a3:9d:c4:
37:db:2e:54:a1:45:8c:3f:2d:a3:f8:c5:68:3d:bc:eb:02:3f:
1d:09:02:99:1a:59:df:a6:92:81:9f:e3:0b:6f:1e:0b:ac:13:
c3:72:77:a0:5d:c8:13:46:0a:fd:97:2d:2d:9c:2d:78:06:5a:
62:72:0f:a7:d8:39:99:17:2f:3e:cf:e6:72:fe:a8:9f:1f:78:
5c:59:fe:c0:94:66:d5:8a:f6:70:ae:e5:37:28:da:c3:28:05:
8b:23:8a:f5:b1:22:52:a8:ee:92:29:f2:f3:8a:27:86:a7:59:
de:c2:76:15:01:96:e6:1b:e4:07:6a:38:cf:12:4f:4f:56:0a:
22:e6:98:89:9e:eb:f7:21:41:2e:a4:f9:f9:46:dc:7d:88:41:
60:99:86:b8:98:bd:35:ca:06:4f:3b:bd:8e:b2:f2:af:68:dd:
2b:32:38:7a:e6:fd:c4:d6:74:f6:11:3e:1a:d1:34:9c:3b:f5:
eb:6b:25:87:66:5c:b0:49:b7:14:f7:01:4e:b8:d9:5f:2a:f0:
13:33:64:5b:f5:d8:e4:89:09:24:f9:93:81:e3:4d:f9:ea:54:
82:01:7e:7e:63:a4:36:8e:02:2d:2d:67:77:28:70:fd:07:39:
36:52:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 19:37:27 2024 by rpki-client on console-ams.rpki-client.org