Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Z_xg75CNVZA_THjqhtBgfCMQlZY.roa
File: Z_xg75CNVZA_THjqhtBgfCMQlZY.roa (raw, json)
Hash identifier: k2kxU0yPOuGqteM6bDHngR7o8Xzx5G4pTmxWL69LGKk=
Subject key identifier: 67:FC:60:EF:90:8D:55:90:3F:4C:78:EA:86:D0:60:7C:23:10:95:96
Certificate issuer: /CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Certificate serial: 01857169CA15BAD08C41CE621538D8FC5615
Authority key identifier: 25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Z_xg75CNVZA_THjqhtBgfCMQlZY.roa
Signing time: Mon 02 Jan 2023 07:37:16 +0000
ROA not before: Mon 02 Jan 2023 07:37:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8437
IP address blocks: 185.245.65.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:ca:15:ba:d0:8c:41:ce:62:15:38:d8:fc:56:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a879d628fe5ec8a761c4748679993f9c69f8b4
Validity
Not Before: Jan 2 07:37:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67fc60ef908d55903f4c78ea86d0607c23109596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:70:89:21:3a:44:03:93:89:42:5d:8a:09:
96:c1:c2:d1:c1:b1:e9:8f:2b:4d:ed:1b:21:64:b9:
bb:54:6f:fb:3c:b6:6c:1a:20:4d:df:78:8e:df:87:
c7:a3:72:8a:ed:81:95:08:5e:3b:f1:af:af:2d:1f:
6f:4d:fa:27:95:1d:20:32:9b:68:78:fb:3f:a6:61:
63:5f:99:ed:cf:d1:a4:c6:92:2f:6d:2b:a5:cc:c2:
a8:6b:fb:3b:ee:a7:fc:50:93:4f:05:b3:6a:27:f5:
eb:3e:96:85:6a:40:13:7c:0e:51:6f:38:a8:2a:f3:
4b:9c:cf:ca:d6:d3:95:04:bc:72:5e:56:87:5c:3d:
1b:bc:3a:68:22:25:f9:3f:22:3e:d2:47:f7:73:00:
36:ef:c7:a8:de:6d:b1:d5:87:5e:3e:a7:70:15:81:
08:db:bd:18:c1:80:fe:b9:fd:04:d5:ca:ad:d0:71:
8d:c0:f5:c7:45:34:ce:15:7e:ac:24:0b:08:bd:e0:
95:9e:e8:97:f7:83:c8:bf:51:d3:ca:fe:d2:3c:6e:
1f:f8:f1:f5:a1:57:5e:ec:ed:d9:77:dd:fc:a2:f2:
a0:b2:7c:94:af:76:f1:8f:23:ee:47:27:84:85:e6:
6f:40:de:41:b4:ef:52:b8:06:e6:0a:45:c9:fc:d3:
d5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:60:EF:90:8D:55:90:3F:4C:78:EA:86:D0:60:7C:23:10:95:96
X509v3 Authority Key Identifier:
keyid:25:A8:79:D6:28:FE:5E:C8:A7:61:C4:74:86:79:99:3F:9C:69:F8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jah51ij-XsinYcR0hnmZP5xp-LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Z_xg75CNVZA_THjqhtBgfCMQlZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/28d5a7-48f1-4414-a853-d86b4caed11d/1/Jah51ij-XsinYcR0hnmZP5xp-LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.65.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:dc:5e:7e:96:6e:09:50:d9:7e:ed:8a:f8:2c:8c:67:01:f7:
63:c9:85:0d:f4:4f:66:de:70:c0:80:0d:7d:ed:61:36:61:49:
f6:c8:39:e5:9e:fb:ac:f0:cb:5f:4b:f9:ba:4a:e6:62:d3:c6:
eb:bc:70:5c:02:10:e6:f6:88:47:57:55:ce:b0:ef:13:3d:06:
5d:43:c6:f5:dd:8e:aa:95:95:36:36:82:b2:f7:da:eb:8d:d7:
26:91:18:3d:f6:aa:76:c4:f0:84:5c:cd:29:e4:61:c8:62:76:
85:6c:c4:34:cb:db:a8:16:4e:54:71:6a:bb:29:c0:4b:9e:5c:
98:4f:f8:5e:1b:0f:81:00:41:a7:8a:47:a2:db:9e:ca:1a:94:
ac:89:15:8a:e7:5d:06:0b:e6:d7:76:94:72:14:d8:63:00:00:
09:60:a8:f3:73:e0:38:83:75:00:a8:8b:5c:0c:69:03:fd:39:
3c:e6:21:02:ed:25:aa:37:dc:2c:6e:17:8d:49:8a:da:79:d8:
de:09:f8:df:25:e8:13:35:0b:30:a1:12:4b:d2:37:56:ba:07:
ca:8b:86:78:a0:41:cb:42:77:81:3f:27:74:a4:5a:51:b4:89:
6f:da:f3:00:aa:8a:c1:60:5e:65:fb:7a:f8:ba:14:99:67:8c:
9f:04:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:03:29 2024 by rpki-client on console-ams.rpki-client.org