Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/zuidz5tV8yYOpReOVGzlAGTkhV4.roa
File: zuidz5tV8yYOpReOVGzlAGTkhV4.roa (raw, json)
Hash identifier: 5aUbKBNZviQv8LVdlcRe/+5GgbCu+KjHWTmRrij/lzE=
Subject key identifier: CE:E8:9D:CF:9B:55:F3:26:0E:A5:17:8E:54:6C:E5:00:64:E4:85:5E
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0187EA088CBB1C50DFE99F2591441297A9A9
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/zuidz5tV8yYOpReOVGzlAGTkhV4.roa
Signing time: Fri 05 May 2023 03:50:41 +0000
ROA not before: Fri 05 May 2023 03:50:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:08:8c:bb:1c:50:df:e9:9f:25:91:44:12:97:a9:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 5 03:50:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cee89dcf9b55f3260ea5178e546ce50064e4855e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4a:42:c1:0b:04:40:8a:e9:d7:ac:df:5f:10:
4a:bc:ff:55:a0:2b:2c:b4:cf:3a:b9:c8:f9:cc:e4:
19:3d:f8:99:08:68:a9:30:c8:ec:b4:31:5c:7a:dd:
b1:c7:17:4d:ef:05:f2:db:e1:2a:a2:ab:24:cb:bf:
e2:43:af:b1:c0:35:c4:b1:f2:be:8c:82:b2:df:a2:
7e:9f:c6:99:e6:1e:35:46:9c:4f:fa:58:9c:11:41:
e5:94:33:4e:fc:1d:b2:ae:ea:4a:6a:1e:23:62:3b:
06:02:21:82:e9:d5:1c:cf:1d:fb:30:24:da:0c:39:
1d:b6:96:91:5d:60:3a:6e:ed:5f:0b:82:7f:3f:5d:
e1:6d:b1:d4:9c:3b:67:08:07:d9:26:df:1c:12:c4:
2e:20:db:2d:32:20:28:13:b5:de:0d:69:cb:4b:15:
9c:b7:87:d1:3c:ad:1b:52:c4:33:67:9a:c8:50:30:
f4:ef:1a:3c:f5:20:70:f3:49:54:9d:ed:ab:df:ab:
d8:69:12:7d:bb:a6:fc:66:2e:2d:bc:bd:83:f5:59:
19:fd:9d:c1:d5:f6:e5:85:e6:2c:46:62:a0:eb:60:
46:ac:87:2b:31:87:44:bf:ca:45:92:9f:bb:d6:bb:
59:a9:3e:30:0a:53:93:84:2a:29:b8:be:e0:90:bb:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:E8:9D:CF:9B:55:F3:26:0E:A5:17:8E:54:6C:E5:00:64:E4:85:5E
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/zuidz5tV8yYOpReOVGzlAGTkhV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
95:58:a3:23:db:e5:11:b6:12:b3:5b:8d:14:de:96:de:5b:b3:
28:95:ab:80:f9:90:e8:26:8e:03:56:f9:5c:63:1e:96:03:2d:
fe:73:ce:61:1f:e4:58:24:e3:a0:e8:8a:f2:85:5c:c1:5a:8a:
89:30:20:62:3f:08:67:9c:0e:9c:0a:26:8e:2d:02:11:52:7c:
1c:56:68:4d:e9:f5:f7:c2:75:a1:48:a7:24:89:2d:9a:eb:58:
86:64:55:09:e6:fd:91:d7:8c:7d:c0:74:8f:b8:87:a9:0a:1c:
91:7c:22:2c:97:bf:a6:51:58:97:a3:cb:5b:76:a4:09:21:69:
54:d6:c9:ba:20:ff:08:7a:a1:9f:ff:e7:11:6c:7c:64:c1:1d:
0c:fe:b8:0f:d8:ce:2b:da:47:c0:46:12:67:83:15:86:98:fd:
9c:42:89:48:df:93:ae:05:4a:ef:d4:05:bf:fb:18:75:82:3c:
22:fc:5e:93:f7:52:ed:66:3b:f2:bf:9c:83:93:bf:bf:a1:25:
78:a7:66:02:be:95:65:f1:0d:ec:9c:02:0d:ab:f3:25:cd:f3:
62:61:4c:7b:6b:7e:39:83:79:2f:ef:8f:79:71:c9:b2:22:d4:
38:3c:18:7b:b2:80:4f:0e:c5:f5:50:c9:20:54:53:ca:0f:e7:
32:35:5a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org