Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zBs_Vjaucgx647v_-uA_bx4inF8.roa
File: zBs_Vjaucgx647v_-uA_bx4inF8.roa (raw, json)
Hash identifier: ia6atzG9qtUlHxOVGYEsOKlJZSpm3PLzjvmFOz5ughg=
Subject key identifier: CC:1B:3F:56:36:AE:72:0C:7A:E3:BB:FF:FA:E0:3F:6F:1E:22:9C:5F
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018FA43EAFE0537EE16F280401C0C517FD93
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zBs_Vjaucgx647v_-uA_bx4inF8.roa
Signing time: Thu 23 May 2024 06:58:42 +0000
ROA not before: Thu 23 May 2024 06:58:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214869
IP address blocks: 45.133.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jul 2024 15:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a4:3e:af:e0:53:7e:e1:6f:28:04:01:c0:c5:17:fd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: May 23 06:58:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cc1b3f5636ae720c7ae3bbfffae03f6f1e229c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b6:d9:59:33:74:a9:15:3a:be:8f:7e:c3:29:
72:60:f5:11:b7:8a:37:9a:6f:81:16:d3:3e:15:9a:
50:fe:92:7b:b6:b9:af:d9:0c:3a:37:43:49:dc:08:
f1:a5:b2:f4:d9:c4:36:15:ef:50:33:5f:92:99:58:
20:cd:24:1b:21:7a:9c:bc:5c:4e:87:de:a6:0e:70:
32:24:d6:2b:6b:82:2f:ce:6e:d7:43:04:e1:61:6e:
0c:0c:d5:09:32:d6:fa:34:cd:e5:31:aa:1e:6a:ce:
e1:09:89:b2:b5:e9:65:e3:d4:dc:38:e0:72:19:47:
24:ab:92:5a:8d:cf:13:d9:a1:31:f8:6e:08:15:f9:
ce:48:a0:83:b9:2d:ea:22:22:14:98:2f:22:c8:ca:
2a:bf:34:e9:e1:14:f4:0e:9a:3a:b9:16:95:d6:e0:
ad:01:ee:3b:98:fd:c1:59:d5:32:11:b6:66:14:3c:
70:21:8a:a0:a1:41:9d:c8:35:f7:9f:54:91:6d:11:
ee:6c:99:7b:e4:8f:31:59:90:07:93:9e:2e:dd:f5:
af:06:37:05:42:ef:19:1d:b5:52:e7:0f:db:ee:6e:
d7:d4:59:3b:70:80:e4:6f:ed:47:44:19:41:fd:2a:
f2:01:c4:6b:a7:a6:a4:d5:cb:0f:36:72:9e:e4:fd:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1B:3F:56:36:AE:72:0C:7A:E3:BB:FF:FA:E0:3F:6F:1E:22:9C:5F
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/zBs_Vjaucgx647v_-uA_bx4inF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d1:ce:f3:f0:6d:97:b4:bd:a2:55:06:e9:15:89:7f:47:6a:
51:cf:d7:5a:da:40:62:43:90:49:11:56:b6:7e:12:9d:89:8e:
f0:89:2e:2a:d5:9d:bd:53:60:db:b3:c3:b1:5c:12:e7:72:6f:
b0:06:5e:23:c7:a7:6e:83:ad:6b:52:bf:9d:19:9a:a9:03:d7:
dc:43:bd:76:63:c8:2d:03:2e:6f:3e:23:af:c2:9a:83:ef:23:
7c:1b:74:1f:3b:f6:c6:a2:0c:8b:8d:b1:15:a3:45:ae:26:a8:
75:96:77:14:a8:b1:d4:2e:ca:29:a6:2e:f6:e0:9e:fc:19:8e:
cc:0e:47:f9:a2:90:58:0a:48:b3:b7:21:a0:4f:3d:11:f7:e4:
ef:65:5f:c3:a2:33:fc:18:7d:54:bb:e6:5d:3c:1a:13:6c:45:
98:8c:de:43:1c:82:43:bf:33:7d:05:65:5e:5c:f7:ee:d8:2f:
43:de:0b:b1:f9:d4:ea:e3:c0:26:27:dc:21:3c:9f:b5:a9:aa:
05:43:13:94:32:aa:cd:c9:01:da:08:b0:45:70:4d:a2:7f:51:
cd:05:3d:78:4d:0f:91:b7:ec:24:b3:24:34:c1:b6:ce:cf:57:
92:52:f8:2d:d9:3c:86:b8:78:8d:c3:d7:5a:76:f1:dd:d4:95:
9e:a8:7e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:38:36 2025 by rpki-client