Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pzmL62Sj4xMEk9ergWsrjiCLKfs.roa
File: pzmL62Sj4xMEk9ergWsrjiCLKfs.roa (raw, json)
Hash identifier: dR+GlW+ewwx/XqYN2Fm7icVDMoxVWxl8RqHvp1d2NG8=
Subject key identifier: A7:39:8B:EB:64:A3:E3:13:04:93:D7:AB:81:6B:2B:8E:20:8B:29:FB
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018EB4C46724E98B372D0A17F5D3AC8AC06A
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pzmL62Sj4xMEk9ergWsrjiCLKfs.roa
Signing time: Sat 06 Apr 2024 18:55:54 +0000
ROA not before: Sat 06 Apr 2024 18:55:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.65.113.0/24 maxlen: 24
188.209.132.0/22 maxlen: 24
188.209.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:b4:c4:67:24:e9:8b:37:2d:0a:17:f5:d3:ac:8a:c0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Apr 6 18:55:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7398beb64a3e3130493d7ab816b2b8e208b29fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:aa:a9:40:f2:ac:3e:3c:c6:a5:4c:13:a4:58:
c9:f6:7d:d4:2b:80:5f:11:48:df:95:fb:3e:d0:b8:
b0:49:50:1f:fc:1f:c4:59:c3:dd:5b:a8:41:fe:16:
81:5f:ad:eb:48:ef:54:5c:d2:23:70:8f:5e:78:5b:
79:98:07:0a:5f:d8:12:16:b6:00:12:4d:08:27:f7:
9c:c6:ed:e2:82:5a:83:6b:a9:ab:fe:1e:a1:ca:94:
9d:e5:6a:7c:d0:92:bc:de:9d:bf:37:f0:6d:29:ff:
4f:f8:a6:a3:94:a4:72:88:ef:31:28:2f:65:91:be:
97:b2:1c:20:51:72:f8:14:1e:86:ff:3e:98:0d:d2:
7b:22:29:75:73:f2:2c:7d:25:e3:3f:2f:ca:d1:8c:
f1:4b:07:d4:01:cc:e1:ba:2c:a1:bd:b8:6a:95:fa:
18:72:ba:15:26:76:6e:e2:77:4a:aa:68:98:d8:ee:
43:d5:5d:9c:5e:3f:49:a4:b1:73:cf:21:34:40:c6:
84:6b:e3:bc:32:71:5e:d3:35:37:2e:d9:6c:21:cc:
61:28:c9:43:76:f1:35:a6:ea:13:e3:af:af:ff:bf:
72:a6:47:47:b8:5c:40:97:2d:90:0a:3c:72:88:da:
95:28:a7:a6:0d:b4:2f:94:e2:ca:1a:6c:3b:2c:22:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:39:8B:EB:64:A3:E3:13:04:93:D7:AB:81:6B:2B:8E:20:8B:29:FB
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pzmL62Sj4xMEk9ergWsrjiCLKfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
70:e5:a8:7c:60:c4:6c:0d:a7:96:77:a5:74:1d:89:62:40:f7:
07:33:88:5d:50:fe:57:73:c6:df:fe:4c:78:19:3e:98:c6:0e:
b1:89:bd:74:d8:40:80:90:57:c6:18:ee:51:58:31:6a:37:c9:
a7:8f:31:fe:f9:e6:f2:7a:1a:8e:57:6b:21:60:79:70:b3:cd:
c0:62:93:bb:5b:9a:21:77:1a:1c:17:0b:63:2b:37:fe:9c:55:
45:ec:96:55:be:e7:46:b2:0a:59:03:a5:eb:0b:a2:16:b9:13:
3b:f3:e8:db:a0:a9:9c:88:7a:b5:a9:49:ad:9d:10:9b:c3:9c:
ca:14:7d:d6:b4:b7:13:21:3b:d2:c4:e4:ff:0d:97:f7:6a:da:
3e:6d:7e:ed:f9:0f:c5:62:c3:11:f9:8e:5a:86:6c:cb:89:d5:
c3:3f:93:91:52:58:76:86:92:0e:be:e4:7b:0b:d4:c0:44:38:
47:3f:4f:4a:3f:d3:31:20:16:9b:77:53:1c:c5:70:66:bf:cc:
e7:4a:8f:30:0a:4a:5b:01:90:85:ad:ca:30:a4:5f:7d:1d:51:
b4:b7:f8:57:f8:5f:8b:80:24:d5:cc:f8:94:f0:04:e2:b8:e2:
db:95:80:99:e2:68:6c:87:c0:d4:8c:1b:c6:bc:f0:f4:f4:a3:
6c:5d:de:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 09:34:35 2024 by rpki-client on console-ams.rpki-client.org