Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/deopTz_z8Iegkhpi1HePj2F2MBI.roa
File: deopTz_z8Iegkhpi1HePj2F2MBI.roa (raw, json)
Hash identifier: EkHypLfuaYxAh8ZC77Bqrruc8I8pJzsrCxbFFsNE4X4=
Subject key identifier: 75:EA:29:4F:3F:F3:F0:87:A0:92:1A:62:D4:77:8F:8F:61:76:30:12
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 01857014F75B0D11F0546285CCC9E4CF4785
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/deopTz_z8Iegkhpi1HePj2F2MBI.roa
Signing time: Mon 02 Jan 2023 01:25:00 +0000
ROA not before: Mon 02 Jan 2023 01:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.149.108.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:14:f7:5b:0d:11:f0:54:62:85:cc:c9:e4:cf:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: Jan 2 01:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=75ea294f3ff3f087a0921a62d4778f8f61763012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:43:27:e3:46:df:d2:03:0f:37:ca:3d:a9:
d3:93:29:27:7d:05:9d:43:91:40:af:a8:af:6f:9b:
bf:27:d4:80:5e:f3:c8:de:5d:b7:a7:f4:c0:b2:88:
d1:68:d9:8a:96:9e:77:56:e8:7b:82:c7:7b:95:f9:
72:c8:8d:5f:fa:f8:fe:df:5f:14:de:94:92:7f:e4:
12:1c:a3:c0:c5:93:f7:c1:65:ef:65:1a:4a:5a:03:
ae:a1:66:c8:14:15:f3:63:4b:d1:38:07:4f:5e:a6:
c4:8d:df:e0:27:68:85:18:c2:d5:0e:71:e0:d9:57:
45:06:94:fc:63:a9:7e:85:b4:a1:94:0e:ed:a3:f2:
ea:1c:cc:59:23:7c:ba:c8:8b:30:46:f6:a1:2b:07:
7e:87:fc:3d:3f:f6:fc:61:30:d7:2d:34:e0:aa:a6:
e8:da:ee:1b:a9:42:b3:90:32:35:54:86:62:d2:7b:
53:ec:b1:be:95:ce:34:e0:ba:82:cb:97:04:3d:bd:
f2:3d:7d:b5:38:48:b6:59:d5:87:a6:f4:cd:dd:04:
79:5c:9a:62:12:bc:da:eb:71:b7:93:cd:fe:f9:25:
e8:78:60:bc:cf:bf:17:f0:3f:1e:3c:ee:4c:b5:5b:
8c:d3:84:48:13:c4:06:05:0a:3d:47:9e:a9:ba:39:
8e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:EA:29:4F:3F:F3:F0:87:A0:92:1A:62:D4:77:8F:8F:61:76:30:12
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/deopTz_z8Iegkhpi1HePj2F2MBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:8c:56:ee:c3:e4:fe:43:04:64:e3:52:f7:5a:41:e2:64:1b:
3e:05:4d:14:bb:d1:cb:3a:02:38:5b:6e:86:2f:54:3f:a9:a3:
85:f1:5a:37:da:26:1c:86:70:f4:6b:e3:3a:a8:2b:23:08:1e:
e3:82:cb:a6:2b:40:1d:69:1d:3d:8d:3c:c1:a2:46:52:f0:71:
29:41:c9:0a:7f:c9:fa:85:b9:80:d7:65:c9:21:fb:2a:62:1e:
e8:32:93:62:4a:d1:c6:9e:bc:9d:4e:6a:39:e8:2f:74:c4:49:
92:b7:47:9d:ca:1e:d1:21:af:6a:74:db:8f:bc:9a:6a:02:4b:
ac:62:2b:d4:1f:a2:58:ba:5a:c9:1d:04:d5:9d:f4:b4:b0:8d:
5f:38:01:56:da:c9:f5:b8:32:e2:33:b6:5b:d3:77:ac:8b:39:
c2:63:97:10:df:50:df:9e:72:37:73:0e:4f:00:d2:61:50:eb:
bd:5d:96:d8:77:dd:65:08:89:e2:25:22:79:7e:b4:0f:db:29:
6d:7a:ff:36:2a:42:04:e6:1b:de:46:e2:33:f4:97:76:f2:3e:
13:f2:c9:0f:49:5d:5c:04:da:81:4f:20:02:51:24:c7:47:8f:
b3:d9:9a:89:f0:70:0f:f6:1d:12:97:82:fc:28:d4:74:e6:3b:
f3:ee:44:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:13 2024 by rpki-client on console-ams.rpki-client.org