Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ZZmgB9tyZFB0iren71Uxd17XHyc.roa
File: ZZmgB9tyZFB0iren71Uxd17XHyc.roa (raw, json)
Hash identifier: P5XVF2BnD1xhz2ScGzLas2XG+XAh8P13p+3J+87EXho=
Subject key identifier: 65:99:A0:07:DB:72:64:50:74:8A:B7:A7:EF:55:31:77:5E:D7:1F:27
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42CCCBB7DDC220E015FA4F6D11A803
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ZZmgB9tyZFB0iren71Uxd17XHyc.roa
Signing time: Sun 01 Jan 2023 21:35:26 +0000
ROA not before: Sun 01 Jan 2023 21:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206238
IP address blocks: 45.83.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:cc:cb:b7:dd:c2:20:e0:15:fa:4f:6d:11:a8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6599a007db726450748ab7a7ef5531775ed71f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:77:c1:e3:1f:29:49:4a:f6:c1:47:85:48:e6:
2a:ff:71:ca:fe:e8:f0:6a:3a:08:f2:e5:8b:bf:4f:
da:62:22:56:b4:e6:e6:7a:19:67:dd:2e:9d:78:9c:
dc:29:ce:59:99:fb:c3:32:e0:c2:64:1b:84:19:78:
7c:f4:44:c6:0d:0d:7d:ac:ac:3a:b7:93:e5:8f:87:
fa:5b:12:6f:73:de:1c:21:58:36:de:ae:f2:11:e0:
17:99:ac:23:c3:e4:88:98:1a:0a:27:f7:c6:37:48:
99:ac:07:9c:71:1a:5e:05:a4:e8:2b:13:2d:57:c2:
93:c5:95:e8:3a:ed:55:0f:ad:45:65:69:0c:5e:0c:
6b:e6:45:0c:2f:bd:3f:ba:11:29:82:2f:c7:53:bf:
55:e6:7c:2e:c3:c7:e2:d9:16:77:55:8c:19:b8:c7:
a0:d1:8d:af:ab:10:26:04:39:27:09:86:e7:c7:c0:
a2:8c:9e:89:6b:fc:ed:27:c6:93:08:d8:14:95:fc:
e2:43:7b:2a:dc:33:ff:58:63:2a:ff:ae:b4:54:af:
26:ea:06:fd:a0:5d:11:40:0e:5c:3e:23:2a:48:45:
a3:ff:e3:f7:a6:27:19:25:5e:d6:8b:19:a4:c4:39:
55:6b:81:87:ac:ac:65:a1:df:68:33:d6:c2:c3:20:
11:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:99:A0:07:DB:72:64:50:74:8A:B7:A7:EF:55:31:77:5E:D7:1F:27
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/ZZmgB9tyZFB0iren71Uxd17XHyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:8a:74:2c:56:c5:09:8b:cb:83:48:7b:fe:94:b8:94:65:49:
e8:3b:64:98:e6:31:ba:bb:70:1c:af:bf:94:dc:16:df:b9:f9:
61:75:7e:d5:57:9a:cb:f2:9b:16:b5:4f:d8:73:49:d0:1a:f4:
0e:fb:90:80:ca:de:60:fa:26:fa:87:ba:60:03:d7:e6:1b:19:
de:96:b5:9c:be:cf:97:36:2b:9a:62:b5:7d:42:66:48:3d:0e:
b4:af:15:82:74:cc:de:73:da:90:c9:8c:21:10:58:17:24:c5:
c2:03:85:08:f7:79:5b:81:a0:01:f8:cb:8a:ef:b0:61:d4:b3:
18:5f:8e:57:cf:25:a6:5a:6e:0e:27:23:0c:b4:27:fb:9a:29:
57:55:e7:02:29:dc:1f:64:d4:12:f9:a8:bd:ee:0a:7f:87:2d:
15:11:54:25:1f:b5:c8:72:07:8b:88:9e:57:c4:a6:52:7b:fd:
14:23:de:40:d2:11:c0:e2:34:54:23:a3:d2:92:92:bf:c2:5c:
00:5e:9f:11:dc:58:30:d2:51:76:98:1d:46:fd:11:20:de:5e:
b8:3f:d9:74:59:2b:cd:e8:b4:b3:40:00:a1:bd:ea:d2:92:bb:
4c:7f:5f:29:0d:a9:0f:0a:fc:f7:ac:37:ae:3e:18:ff:1b:0b:
3b:2f:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:58 2024 by rpki-client on console-ams.rpki-client.org