Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/zwlt5v3u-et26rm63mTbPvO1TG0.roa
File: zwlt5v3u-et26rm63mTbPvO1TG0.roa (raw, json)
Hash identifier: yRUBU5t2W6tQxu2VfdcTQjNzPS/DpdkfVy/GXpi/sZw=
Subject key identifier: CF:09:6D:E6:FD:EE:F9:EB:76:EA:B9:BA:DE:64:DB:3E:F3:B5:4C:6D
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0189567E1AD958CA4A487D60BCE19567BB2F
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/zwlt5v3u-et26rm63mTbPvO1TG0.roa
Signing time: Fri 14 Jul 2023 22:20:52 +0000
ROA not before: Fri 14 Jul 2023 22:20:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.148.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 03 Aug 2023 22:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:56:7e:1a:d9:58:ca:4a:48:7d:60:bc:e1:95:67:bb:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 14 22:20:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cf096de6fdeef9eb76eab9bade64db3ef3b54c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a4:fa:78:9a:a5:fc:cd:2a:8c:c0:af:91:f4:
f7:89:c8:53:9a:53:b5:db:e5:87:18:db:62:b7:ce:
ff:6e:ae:c5:8e:19:d2:d3:e1:81:dc:22:aa:bb:46:
6e:c6:26:c8:ce:72:a9:9e:f5:35:4d:55:d5:1d:37:
7b:84:d5:56:3f:ab:65:25:6e:1a:88:f7:86:d5:2f:
1e:96:b9:43:1f:1c:28:9a:8b:44:71:e1:6a:1b:21:
14:84:f6:86:16:e7:e1:36:19:33:fd:88:8f:2a:e6:
ad:d0:1e:fb:c9:00:72:4b:d3:a0:06:f1:e7:ad:6b:
70:5f:7d:93:98:06:d6:59:68:b9:b8:5b:e4:a1:c2:
14:31:04:9b:4b:2d:49:4b:95:98:3d:0d:03:62:93:
13:b5:db:3b:40:06:ff:94:0a:9e:0d:af:57:f9:fc:
e7:24:e5:39:89:8a:e0:2a:53:ee:85:c2:9c:13:12:
31:a3:b8:84:4d:e5:bb:da:fc:f2:9e:26:62:d1:da:
e7:e6:09:07:f3:24:41:ec:9e:d9:c6:be:a4:3d:f3:
cb:e8:2e:9c:eb:13:2d:52:8e:3b:27:21:40:75:60:
b5:94:7c:54:2c:13:7a:76:b7:b1:9a:47:5f:7f:23:
1b:cf:ca:0d:7c:d5:20:b4:1a:0c:a9:2c:1a:eb:f2:
22:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:09:6D:E6:FD:EE:F9:EB:76:EA:B9:BA:DE:64:DB:3E:F3:B5:4C:6D
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/zwlt5v3u-et26rm63mTbPvO1TG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
Signature Algorithm: sha256WithRSAEncryption
32:89:94:9c:1d:14:14:cf:a4:18:2c:0a:57:b4:12:35:96:f7:
83:c9:8d:4d:4d:69:10:a3:a9:b1:74:7f:89:13:75:92:e5:6f:
15:21:16:f1:52:cf:20:93:d1:54:19:e4:9c:c8:c8:b6:18:30:
f3:ce:3f:0a:23:7d:95:99:60:4d:68:60:59:46:fa:0f:27:1e:
7c:48:78:d6:52:1a:73:db:19:65:3c:f8:2b:7f:b5:92:81:7a:
72:fa:f3:e6:fe:0d:b2:9e:ac:df:79:67:53:38:53:e8:7c:d5:
99:a5:1e:82:51:68:52:e6:c9:f0:01:72:ea:86:04:ef:11:94:
64:d6:24:0b:98:13:1b:cd:8e:bb:28:4a:19:e9:70:76:72:85:
c7:9c:98:34:2e:8e:15:6d:6f:8b:90:be:d9:fb:c3:4f:c4:5c:
86:e0:90:60:d4:73:8e:c3:8b:a1:42:86:3b:c8:1c:f6:25:e7:
f2:b0:8e:40:17:2d:97:c9:98:7a:07:cc:a3:ec:03:09:d6:04:
4b:55:ff:04:dd:02:31:50:f3:4a:62:77:19:9a:b0:51:20:29:
b0:ea:d3:dd:36:aa:81:66:18:8a:34:61:56:55:66:72:09:5b:
41:be:ba:8c:5a:4a:4e:d7:d2:64:f9:10:4f:86:5b:8d:a4:46:
5b:2d:f2:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org