Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/A0kJQxRypPywsIfsEZTUCm8LkWQ.roa
File: A0kJQxRypPywsIfsEZTUCm8LkWQ.roa (raw, json)
Hash identifier: ++Le3hMJjLizd8rq3iZjU2KVyp4WBVzHeZEiiKgnDH8=
Subject key identifier: 03:49:09:43:14:72:A4:FC:B0:B0:87:EC:11:94:D4:0A:6F:0B:91:64
Certificate issuer: /CN=661cb5d3f8fc87c16b2df927d7c396626f124554
Certificate serial: 018E0DF1E77F21F5BBFDFE89C5292F0F03AB
Authority key identifier: 66:1C:B5:D3:F8:FC:87:C1:6B:2D:F9:27:D7:C3:96:62:6F:12:45:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/A0kJQxRypPywsIfsEZTUCm8LkWQ.roa
Signing time: Tue 05 Mar 2024 09:29:00 +0000
ROA not before: Tue 05 Mar 2024 09:29:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142019
IP address blocks: 185.45.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Apr 2024 10:32:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:0d:f1:e7:7f:21:f5:bb:fd:fe:89:c5:29:2f:0f:03:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661cb5d3f8fc87c16b2df927d7c396626f124554
Validity
Not Before: Mar 5 09:29:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=034909431472a4fcb0b087ec1194d40a6f0b9164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:64:43:36:33:52:c5:fc:9c:6f:fe:d4:a1:26:
2e:df:5d:f9:88:63:ce:d2:4f:25:59:e2:fd:4c:61:
b3:a4:03:ed:78:58:47:82:b6:24:b7:3a:fa:26:73:
ad:6a:79:e5:e4:cf:1d:31:05:64:ee:47:0a:c5:39:
3c:3c:c9:72:fa:01:d1:67:9b:4f:9b:37:b2:da:4d:
e8:c5:77:f2:5c:eb:47:da:7f:08:2b:1e:ee:1b:36:
56:20:20:11:41:9f:7d:58:d0:5a:f8:78:5e:54:38:
e5:e8:e2:50:a5:6a:e9:67:92:6e:c6:f3:57:87:ce:
00:63:0c:47:e7:0a:0c:68:99:0b:b2:76:15:cd:a8:
57:1f:9e:82:74:70:54:6c:b4:47:d3:ca:dc:9f:6f:
46:f2:b0:12:c0:62:87:38:f1:4d:76:ff:ce:19:74:
ef:d1:a4:6d:15:56:58:5a:d6:01:2b:15:e9:fb:af:
99:70:38:4b:17:43:34:b6:a0:0c:cd:7c:ab:9b:47:
71:50:82:b8:fb:b0:c9:a3:79:29:76:b1:b5:1d:a5:
c2:5b:7c:c7:67:98:e3:f3:28:0f:a3:43:2d:27:be:
8c:87:32:9e:79:d7:47:ce:50:e3:80:95:8d:cd:95:
b5:36:3b:fe:6d:38:ae:21:a4:74:70:2c:51:3e:d8:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:49:09:43:14:72:A4:FC:B0:B0:87:EC:11:94:D4:0A:6F:0B:91:64
X509v3 Authority Key Identifier:
keyid:66:1C:B5:D3:F8:FC:87:C1:6B:2D:F9:27:D7:C3:96:62:6F:12:45:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zhy10_j8h8FrLfkn18OWYm8SRVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/A0kJQxRypPywsIfsEZTUCm8LkWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/49e20f-ffb7-4b6e-9bfe-a798e3df8a88/1/Zhy10_j8h8FrLfkn18OWYm8SRVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.45.253.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f1:44:a0:a6:8a:5e:bb:f9:c6:39:80:06:4c:8a:67:86:da:
96:56:ee:50:97:07:10:00:2c:05:83:4c:04:b7:9c:0d:ad:fa:
f4:33:b5:20:73:d1:26:89:49:52:ed:03:59:49:6f:59:da:75:
30:5a:09:3b:f8:8e:ff:9a:62:76:b1:54:9b:92:d7:6e:c3:d5:
98:f1:e9:8a:27:27:2c:e3:23:92:66:98:96:bf:8b:9f:52:5d:
dc:c0:3f:bc:99:26:9f:03:17:de:06:18:5e:e9:7e:47:e5:83:
c8:00:d1:e8:34:ef:69:4c:45:4d:95:bd:f2:68:d9:a2:66:07:
26:78:e0:09:fd:9d:f6:b5:5c:17:1b:00:2c:d9:ee:df:96:87:
00:ac:73:8d:8f:5b:32:03:b9:d2:ac:9b:cc:03:e8:cb:3c:ba:
10:5b:0c:da:0a:95:e7:36:be:e4:08:85:d0:7e:6c:95:ce:05:
28:ee:e3:ad:97:13:fb:d5:a5:a1:c1:5a:c9:d7:3f:21:3a:2a:
be:49:93:2c:99:57:63:57:2f:92:c3:d8:3e:49:ae:a0:3b:9a:
5c:47:fc:09:6e:8c:a1:3a:65:5e:6a:59:a4:25:0a:4f:37:e3:
94:52:e4:f9:6b:bb:35:7c:96:ea:44:c2:1e:b5:0c:26:ef:95:
12:8b:d7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:37 2024 by rpki-client on console-ams.rpki-client.org