Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/ZAXb3JehAWACtxV1oNaSZKbmkYk.roa
File: ZAXb3JehAWACtxV1oNaSZKbmkYk.roa (raw, json)
Hash identifier: /kOa2V/9Mk/PLehXkZsAU7xHahPc4Tt5ldnN+U8cMeI=
Subject key identifier: 64:05:DB:DC:97:A1:01:60:02:B7:15:75:A0:D6:92:64:A6:E6:91:89
Certificate issuer: /CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Certificate serial: 018703AF7CA7CF7C95753DC71A6BE5C20F46
Authority key identifier: 96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/ZAXb3JehAWACtxV1oNaSZKbmkYk.roa
Signing time: Tue 21 Mar 2023 10:20:44 +0000
ROA not before: Tue 21 Mar 2023 10:20:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209326
IP address blocks: 45.150.228.0/24 maxlen: 24
45.150.230.0/24 maxlen: 24
45.150.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:af:7c:a7:cf:7c:95:75:3d:c7:1a:6b:e5:c2:0f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96124f25246a5409fbee11b5372dd8be24c6e9eb
Validity
Not Before: Mar 21 10:20:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6405dbdc97a1016002b71575a0d69264a6e69189
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5b:08:07:23:f4:29:21:3a:3a:b6:bd:cd:46:
9e:20:93:95:8f:3d:60:37:9b:39:a2:50:6b:a1:82:
34:d9:78:a0:ec:7d:68:1f:f2:b6:aa:19:e3:18:6c:
57:59:45:19:99:04:2c:24:97:8a:13:96:11:6e:2e:
54:9d:1e:6c:f0:51:18:17:61:84:5c:a2:e3:07:01:
28:11:3c:0a:f2:1a:53:6a:84:28:17:43:81:2c:c6:
2e:c8:0a:f9:52:4f:59:11:95:e6:dc:1e:cb:75:49:
76:b9:a4:eb:e4:51:e2:0b:77:5b:de:fd:d0:3a:a3:
91:4c:88:40:34:a8:02:2f:13:ad:e8:00:e7:d6:0a:
21:e9:e0:02:d6:3d:68:83:39:9c:00:cb:14:51:cc:
33:be:3b:bf:33:f4:f0:59:ec:96:1c:de:55:ca:9c:
ca:d4:b0:ac:0e:20:ab:3d:52:d8:35:84:ae:65:89:
4f:d7:65:f3:88:b5:4a:2e:03:f0:45:c0:05:d6:f0:
d3:88:cb:c1:4a:1e:80:3f:2e:6c:ed:d1:3d:27:82:
8b:b9:33:20:38:1d:5d:fe:49:4c:d8:b7:65:80:62:
73:73:65:1a:31:ad:08:c5:79:8d:4d:2f:df:68:af:
49:bb:23:0b:ba:a1:d6:7f:d8:5f:5c:57:05:94:3f:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:05:DB:DC:97:A1:01:60:02:B7:15:75:A0:D6:92:64:A6:E6:91:89
X509v3 Authority Key Identifier:
keyid:96:12:4F:25:24:6A:54:09:FB:EE:11:B5:37:2D:D8:BE:24:C6:E9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhJPJSRqVAn77hG1Ny3YviTG6es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/ZAXb3JehAWACtxV1oNaSZKbmkYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/14b58d-a1a3-46c1-ac62-8eefb952d8c1/1/lhJPJSRqVAn77hG1Ny3YviTG6es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.228.0-45.150.230.255
Signature Algorithm: sha256WithRSAEncryption
28:c7:ca:5d:57:fa:4b:af:7d:ce:d3:48:ba:e4:b0:e1:cb:1e:
de:e4:ee:5b:f7:d5:f7:3c:a1:e0:a2:66:41:3b:1a:62:8f:ec:
80:2a:65:59:af:a3:74:d1:74:c4:ba:29:0a:69:ef:38:35:31:
4e:2d:66:15:2b:43:4a:7e:95:83:c1:2f:6b:5c:65:33:3d:b4:
86:5b:7e:29:6f:f2:6f:8e:ef:86:7d:ab:6f:00:6d:03:cb:af:
a9:2f:ce:dc:32:2a:92:54:88:29:e3:8f:dc:12:dd:b9:e1:69:
73:2b:d5:66:7c:4d:01:45:5b:dd:43:1f:57:41:1e:68:0c:9d:
f4:94:ba:79:04:40:a7:71:43:49:db:f4:0d:55:17:15:91:e7:
dc:97:1a:31:0d:67:79:56:5b:eb:a9:48:3c:5b:cd:00:cc:4f:
b1:55:4c:74:58:ce:79:e6:25:0a:89:d4:85:af:c1:31:e9:34:
0c:67:86:f2:72:95:a7:5d:3b:66:47:e3:1a:6d:01:24:a5:29:
e7:e9:e6:c6:e5:7d:b4:5b:08:14:8e:26:8c:a5:e3:f8:01:17:
9e:53:ff:8f:d0:a3:d8:b0:b6:49:24:7e:87:63:58:1d:35:1f:
68:56:3d:c0:f9:89:48:3d:59:fa:b2:00:a4:55:69:24:ed:ae:
ce:2f:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:51 2024 by rpki-client on console-fra.rpki-client.org