Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/05ZrnULriLirZURrwTHDspPnq-g.roa
File: 05ZrnULriLirZURrwTHDspPnq-g.roa (raw, json)
Hash identifier: 3aytXWeykGkwctwoAAwfQsuFjKp2722OHgWU3AVdpuQ=
Subject key identifier: D3:96:6B:9D:42:EB:88:B8:AB:65:44:6B:C1:31:C3:B2:93:E7:AB:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0185E48AD011AEC1EB79D2AA5A7A8CDE04F1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/05ZrnULriLirZURrwTHDspPnq-g.roa
Signing time: Tue 24 Jan 2023 16:09:40 +0000
ROA not before: Tue 24 Jan 2023 16:09:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202827
IP address blocks: 45.148.117.0/24 maxlen: 24
2a0e:b107:1ce1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 01 Mar 2023 08:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:8a:d0:11:ae:c1:eb:79:d2:aa:5a:7a:8c:de:04:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 24 16:09:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3966b9d42eb88b8ab65446bc131c3b293e7abe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:0f:8e:ed:e8:bf:fd:7e:e2:25:d3:11:84:
0d:63:26:28:4f:79:fa:3a:65:7a:bf:e6:2c:08:b9:
ce:80:93:bb:cc:e4:ec:81:57:d0:aa:47:10:ba:2c:
af:a8:1e:94:e1:43:f9:e5:96:98:37:19:b3:9f:82:
26:af:6d:a3:26:25:27:f6:f1:df:97:ba:2d:ea:aa:
36:50:eb:7d:eb:22:8c:af:74:ce:40:d0:bb:8f:50:
ac:84:32:9a:8e:95:2d:52:75:ee:a2:6e:3d:08:30:
9a:f8:af:06:37:29:4d:d6:4b:cb:f4:b4:00:8f:3f:
66:da:a8:9e:c6:75:a8:a1:b8:a5:fd:4f:9c:6e:d2:
36:8a:dd:ad:e6:de:91:bc:51:dc:83:ef:a9:08:38:
79:51:38:94:c8:92:17:36:9b:68:e8:cd:88:9b:9b:
f6:b2:2a:4d:1d:d2:2c:55:6e:e6:5b:4f:cf:a8:80:
ff:88:8c:7d:14:5f:bb:47:43:28:d1:7d:ed:02:72:
0d:78:9f:a3:9b:b8:9b:92:57:3e:a0:b2:61:cb:aa:
83:68:5e:fd:0c:99:37:81:e8:ad:4b:85:e0:48:d0:
85:03:2c:53:66:85:87:54:03:f7:3e:64:12:e1:e5:
36:56:77:44:91:fe:74:33:30:b0:72:fd:8f:43:0f:
ea:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:6B:9D:42:EB:88:B8:AB:65:44:6B:C1:31:C3:B2:93:E7:AB:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/05ZrnULriLirZURrwTHDspPnq-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.117.0/24
IPv6:
2a0e:b107:1ce1::/48
Signature Algorithm: sha256WithRSAEncryption
c7:19:53:3c:52:b9:96:23:80:ec:05:9d:7d:1f:d9:16:d9:1d:
b6:da:21:ff:73:2d:7d:6d:3d:e2:4e:45:a3:37:a5:ab:9b:8e:
71:eb:c6:6f:49:23:a6:df:4e:bd:37:f5:50:f5:3f:c1:62:47:
68:2a:ec:81:a0:b8:2e:65:42:e5:9c:6c:be:8a:f8:e0:45:5e:
b4:26:40:ff:52:7c:c4:2b:57:0e:ce:01:b6:b9:77:08:54:ae:
2e:90:f3:51:c4:a1:fd:34:68:9d:3b:e2:64:ae:ac:9e:a3:dd:
39:75:c7:60:7a:ec:fc:d6:71:01:35:c2:4d:b6:ef:30:e3:91:
31:7a:35:9a:ac:4f:ca:63:09:67:ad:b7:c9:66:5b:63:46:51:
06:3d:7b:8d:6d:b6:68:3b:72:fa:42:fe:34:21:65:5c:ed:fa:
97:50:ad:ff:3e:58:3e:e9:81:e9:d6:84:4a:f4:c9:0c:22:23:
46:0c:2c:21:b3:f0:74:0e:eb:93:d4:00:3f:c0:52:30:73:0a:
07:d5:75:c5:22:74:15:96:f5:a9:71:7d:f4:d4:1f:32:94:ff:
46:c4:57:2c:9b:a7:e2:92:4a:6a:7d:0e:8b:0a:7f:01:02:02:
d9:11:6a:4e:9b:c2:0b:88:ce:34:1d:4a:bc:04:c6:b6:fa:b1:
7c:02:42:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:20 2024 by rpki-client on console-fra.rpki-client.org