Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/kzgGZrrCit6MaYvhvDq2bHOojVA.roa
File: kzgGZrrCit6MaYvhvDq2bHOojVA.roa (raw, json)
Hash identifier: NYBFNes3T2sbGuNQyQKIlG2ppgFeN84TabH6K+Tc/gQ=
Subject key identifier: 93:38:06:66:BA:C2:8A:DE:8C:69:8B:E1:BC:3A:B6:6C:73:A8:8D:50
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 01856E81F21FBDD64B77C217E271721C448A
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/kzgGZrrCit6MaYvhvDq2bHOojVA.roa
Signing time: Sun 01 Jan 2023 18:04:47 +0000
ROA not before: Sun 01 Jan 2023 18:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 45.90.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 11:55:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:81:f2:1f:bd:d6:4b:77:c2:17:e2:71:72:1c:44:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jan 1 18:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93380666bac28ade8c698be1bc3ab66c73a88d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:28:30:eb:3a:ef:5d:14:dc:53:33:d2:f9:db:
94:f4:97:dc:b1:ad:7b:d2:86:0a:76:0e:f0:9f:99:
67:e4:6c:5f:b9:1f:07:14:1e:c0:0c:84:97:9c:e2:
6d:4b:5c:b8:a7:26:f6:c1:4c:48:3f:85:53:19:ae:
8a:4e:e6:b6:06:1a:0b:62:fd:4b:30:fd:1a:61:bf:
bb:b8:62:0f:df:0c:d1:08:3d:9f:61:78:d0:a1:36:
2b:c9:9b:19:59:5b:33:fa:a3:89:ba:eb:3c:2f:f7:
51:a7:c5:51:e7:0d:5e:b3:79:c6:d1:f1:23:15:d9:
80:bc:f4:8a:f8:f9:bd:88:4e:bc:9b:f8:a8:23:cb:
d5:97:bc:b1:9b:99:38:4a:cc:3e:c1:b5:84:5c:d9:
7a:6c:c3:2b:6c:e5:cd:98:c3:ec:4c:3a:d6:3d:6f:
7a:74:e3:00:8d:e0:c8:87:39:51:6f:32:5c:a2:8f:
05:7c:de:05:17:45:73:48:8e:92:20:7a:fb:fe:1c:
c6:d5:29:a7:35:ec:59:94:5e:ef:11:22:9f:47:5c:
b6:52:5d:41:5d:94:7b:68:0c:9f:27:8f:a1:81:6d:
c3:42:b7:bb:fe:6d:6e:81:1e:dd:89:f9:55:cb:45:
15:a1:df:2b:88:85:d0:dc:2b:01:c8:d5:d2:5a:41:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:38:06:66:BA:C2:8A:DE:8C:69:8B:E1:BC:3A:B6:6C:73:A8:8D:50
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/kzgGZrrCit6MaYvhvDq2bHOojVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.84.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:25:92:19:0c:f1:f3:8a:13:08:8d:10:b7:2e:f8:df:bb:db:
50:9d:18:72:38:08:35:6e:e9:12:ef:75:3f:cd:1f:43:74:ed:
12:cb:8e:83:46:93:05:c8:e8:67:22:e6:da:69:b4:51:c9:62:
99:58:f8:ce:55:d0:0e:2c:db:9a:d0:bb:1e:51:53:b5:d9:29:
9f:18:ed:e6:eb:69:9c:2b:33:13:db:64:d6:5e:0e:7f:94:94:
60:93:0c:41:ec:df:32:4f:8a:e4:17:64:b8:4a:ef:5a:21:f5:
ac:8e:16:ec:7a:cb:20:e5:40:5b:00:26:ab:35:33:ff:c1:36:
62:8f:46:f4:ef:57:0b:60:c5:cf:fd:8d:a2:95:16:0a:45:1e:
69:85:0e:0f:98:eb:b0:30:2e:95:18:2a:4d:c9:ca:42:a8:fd:
dc:7b:b7:65:76:5c:8c:58:81:ea:f2:1e:4e:4e:dd:30:ec:2f:
4e:87:c2:ab:f9:60:e7:cd:0c:8c:85:0d:ec:a2:be:d4:71:64:
5f:af:c9:98:04:67:2c:66:5b:56:ed:b6:6a:72:79:a6:20:95:
58:86:ab:f8:65:d5:dc:80:0e:4f:1d:a3:ae:6c:71:47:3a:00:
de:e8:27:19:15:8e:1c:85:bc:a1:5d:4d:a4:9a:91:90:5a:d8:
ce:9c:61:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:38 2024 by rpki-client on console-ams.rpki-client.org