Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Z5lrNPCXeT6z4h8z2Kaet5xCYpk.roa
File: Z5lrNPCXeT6z4h8z2Kaet5xCYpk.roa (raw, json)
Hash identifier: SyH0FQh8Khi+YxgQO+KSqEYmhwI2W+xL0PSUpL5v8e0=
Subject key identifier: 67:99:6B:34:F0:97:79:3E:B3:E2:1F:33:D8:A6:9E:B7:9C:42:62:99
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 018E74E986AE5123B0E72A2B1310CB5BDABD
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Z5lrNPCXeT6z4h8z2Kaet5xCYpk.roa
Signing time: Mon 25 Mar 2024 09:20:45 +0000
ROA not before: Mon 25 Mar 2024 09:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 46.182.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Mar 2024 14:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:e9:86:ae:51:23:b0:e7:2a:2b:13:10:cb:5b:da:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Mar 25 09:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=67996b34f097793eb3e21f33d8a69eb79c426299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:7c:09:ff:b8:00:b7:c1:95:89:2c:ac:e8:
8d:4c:17:8d:7b:dd:fb:c4:61:e3:c6:7a:3b:53:05:
1c:f7:10:06:8c:fa:91:75:69:bc:44:64:eb:c2:2f:
e9:58:2e:34:ce:a5:25:00:a7:d8:7c:87:52:4c:21:
55:18:38:03:4c:04:78:55:7c:6b:1a:a3:df:c9:89:
b6:b2:4d:8b:f2:2b:4d:ae:73:04:a0:5a:bd:8e:fb:
39:8a:8d:1b:9e:2e:72:30:be:0f:41:51:39:9c:5e:
c0:f6:71:70:bd:2d:1c:d6:5d:1e:ae:7b:0a:ed:4c:
ee:0c:8a:c6:f0:dd:1b:47:99:a5:7d:44:b7:e5:57:
c7:e1:74:93:59:33:16:5a:d1:50:53:d6:cc:3a:02:
bf:f6:a7:84:22:16:8e:ab:2d:2a:94:dc:1c:f5:d3:
00:73:c1:7e:7b:0c:1a:2a:77:f1:32:cd:cc:da:75:
23:ad:a5:9e:94:f8:9c:9d:76:eb:52:24:72:8f:7e:
73:89:23:71:33:be:2b:f5:90:27:e7:67:de:45:4f:
ac:d8:18:89:58:aa:9b:8d:ec:e1:41:18:e2:77:11:
19:41:d3:76:7b:71:5b:0a:91:cc:ed:07:70:a7:70:
5b:96:67:7c:f8:42:be:9f:04:56:89:12:1c:59:7a:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:99:6B:34:F0:97:79:3E:B3:E2:1F:33:D8:A6:9E:B7:9C:42:62:99
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/Z5lrNPCXeT6z4h8z2Kaet5xCYpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.207.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b9:70:9a:42:ba:4d:b9:68:a8:bb:df:c8:92:d9:f9:64:6f:
02:2f:88:54:c2:e2:33:10:1f:98:30:2e:08:c6:b6:a6:cc:74:
cb:d4:1e:3d:12:26:be:a8:7c:a8:1b:60:25:8c:4b:30:3c:54:
96:c2:2d:79:36:d5:29:39:41:69:6f:ca:98:d6:7f:54:f6:ae:
9d:ee:03:2b:d2:04:73:a0:40:9d:fb:15:12:51:82:e8:6f:fb:
ea:af:b1:67:61:20:37:70:ca:f0:e5:a2:c7:11:cf:c7:1b:cf:
34:9e:6d:c2:89:3c:22:ae:21:53:47:71:58:3d:1d:7a:7e:64:
58:9b:37:58:b5:be:3b:fb:49:d3:d4:e5:20:d7:d3:54:86:61:
25:5f:21:61:c0:98:6f:59:d3:c6:33:bd:28:70:14:df:4a:9f:
53:e4:df:3f:7a:97:08:af:14:a3:27:f0:41:9f:1e:39:37:ad:
dd:7a:cd:93:9c:5b:84:e3:81:29:e6:cf:d3:2d:37:31:02:81:
9c:5d:1e:6c:c6:64:69:8b:88:cb:dd:85:16:f4:7f:53:5e:7d:
fc:84:c0:44:1a:fb:11:19:41:24:f2:8e:72:0e:0f:01:06:23:
83:0d:5c:5f:8e:19:8f:d1:4c:46:1d:4d:81:63:79:aa:cb:a3:
64:98:0d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 28 19:00:54 2024 by rpki-client on console-fra.rpki-client.org