Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/xZ7TYI5Ya8qXXQuEzEp6gXmZdnM.roa
File: xZ7TYI5Ya8qXXQuEzEp6gXmZdnM.roa (raw, json)
Hash identifier: 0e0Ch2fJWRN8/B+Ux9BgY9C13xAwKvh2SSEMYyBLqOs=
Subject key identifier: C5:9E:D3:60:8E:58:6B:CA:97:5D:0B:84:CC:4A:7A:81:79:99:76:73
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CDAB954FF27EBE8069041AAB5253F5948
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/xZ7TYI5Ya8qXXQuEzEp6gXmZdnM.roa
Signing time: Fri 05 Jan 2024 17:43:48 +0000
ROA not before: Fri 05 Jan 2024 17:43:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200080
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 21:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:da:b9:54:ff:27:eb:e8:06:90:41:aa:b5:25:3f:59:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 5 17:43:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c59ed3608e586bca975d0b84cc4a7a8179997673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:16:bd:60:57:4e:d5:44:76:df:e5:d3:1e:8e:
cb:65:30:c6:e0:5c:aa:eb:61:6f:72:62:d7:48:66:
ef:db:4b:b6:21:e8:f9:b3:2d:35:4f:b8:d4:06:1f:
0a:64:92:00:8e:5a:80:0c:35:76:33:3e:24:bb:48:
b0:aa:ae:cc:2f:c5:ef:70:5f:45:f2:c3:e4:b2:50:
e0:9d:b1:fc:af:8e:f3:b8:38:8c:76:2d:87:67:31:
64:c3:23:8e:9e:42:c7:01:5b:af:4e:ac:89:c5:5d:
1a:6d:78:78:f3:c6:ff:59:e2:80:32:a4:ae:e8:91:
a0:27:27:32:66:15:c1:c6:ef:61:cb:01:de:28:8c:
a3:da:c5:80:4c:05:73:8f:a2:a0:bc:40:52:29:3c:
fc:3c:03:57:02:12:6d:04:65:ca:36:d0:1d:0b:78:
72:93:e6:b9:6f:23:a3:d5:77:cd:48:65:8f:06:26:
27:39:a6:fe:02:73:c9:c0:e2:72:0d:92:e9:fb:77:
18:a3:3d:3b:e2:79:5c:94:1c:a1:1f:48:52:38:e1:
54:e4:11:e8:83:45:ba:1c:43:e0:a3:e8:aa:ef:9d:
59:1e:d5:33:05:f1:95:3a:61:f5:3b:ef:bd:db:50:
ed:e1:5e:82:9a:7c:5e:15:a9:46:ac:46:bb:d4:86:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:D3:60:8E:58:6B:CA:97:5D:0B:84:CC:4A:7A:81:79:99:76:73
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/xZ7TYI5Ya8qXXQuEzEp6gXmZdnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
56:d7:28:d2:eb:14:ff:37:26:2b:f5:9c:59:ca:db:17:df:34:
bb:02:00:62:57:32:d0:ca:9f:bc:91:c3:70:01:1e:34:ab:ff:
49:ca:c4:d9:d3:0e:bd:56:5a:02:e4:fa:c5:2a:44:3e:6f:a0:
dd:c2:88:5a:e8:b4:91:49:b7:5f:8b:91:74:56:4a:ea:ed:a3:
9c:f0:60:bb:1d:92:c5:94:d6:67:de:8b:96:19:40:d8:e4:c8:
fc:89:86:6a:af:08:93:f7:f5:a7:55:8a:2d:8e:30:e5:c7:96:
ef:b3:40:dc:ce:0b:72:e2:a3:ca:5f:bf:5c:b7:25:1f:36:c4:
6d:ba:6a:d6:80:bb:a1:20:79:0b:08:19:60:2f:98:e2:8a:f5:
71:6f:0f:b7:be:ae:92:79:d8:95:a8:af:35:38:2a:d0:75:a3:
9a:00:d5:84:4e:96:cb:08:24:d1:ac:ec:fa:ba:fb:82:a4:00:
c2:ac:c9:7a:f5:33:97:f7:fb:7d:aa:98:97:e2:e3:6f:d2:e5:
a9:bf:71:b4:78:5d:51:08:04:e2:d0:f7:49:bf:6b:a4:45:b8:
d0:1d:2a:27:43:f4:5c:79:83:d2:2d:8b:40:a4:35:39:ff:41:
ae:76:e5:57:29:86:8b:51:ee:10:1e:aa:5a:38:20:4a:4a:08:
b1:c0:02:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 6 01:03:51 2024 by rpki-client on console-fra.rpki-client.org