Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/3zhoVLEC8eyqDq0zcSwc8Nkvi84.roa
File: 3zhoVLEC8eyqDq0zcSwc8Nkvi84.roa (raw, json)
Hash identifier: 6sHTXOk9HCvIJbPvZwaiHwM3EMWZkJngJ1N9vE94T4o=
Subject key identifier: DF:38:68:54:B1:02:F1:EC:AA:0E:AD:33:71:2C:1C:F0:D9:2F:8B:CE
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0185724C91730588DD4D89B0F9E5788F9BB6
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/3zhoVLEC8eyqDq0zcSwc8Nkvi84.roa
Signing time: Mon 02 Jan 2023 11:44:58 +0000
ROA not before: Mon 02 Jan 2023 11:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13030
IP address blocks: 45.131.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:91:73:05:88:dd:4d:89:b0:f9:e5:78:8f:9b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jan 2 11:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df386854b102f1ecaa0ead33712c1cf0d92f8bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9b:44:a6:01:a8:36:17:6c:43:ef:25:d2:a4:
91:ad:af:8a:d7:f3:5b:ba:d5:84:db:4c:3e:19:4e:
ca:19:8b:e3:6d:de:6c:9d:26:0b:4d:07:33:c0:f6:
26:4a:24:7b:cd:49:2e:61:5a:f3:6b:be:46:f6:a5:
14:bd:dd:73:5c:00:20:94:f9:3a:4f:9f:f2:4a:7b:
4c:cb:ec:72:32:e0:68:42:9b:32:4b:4f:7e:30:03:
86:51:02:31:6d:77:1b:e8:54:54:ee:76:de:5d:2a:
f8:ac:35:26:c4:73:48:22:f6:0b:53:01:46:fd:02:
32:32:44:f2:1a:7e:5f:8b:c8:4a:7c:83:b3:f2:3f:
51:f3:64:11:7d:03:f7:dd:45:25:f4:81:d5:33:37:
ba:d7:42:93:42:9a:0a:bf:88:02:d2:44:82:36:18:
56:24:97:3e:74:12:28:9f:3f:35:15:2e:5d:fe:12:
7b:3d:d7:30:c4:00:47:e7:88:87:d1:15:59:7d:ed:
cb:ad:aa:16:21:70:1f:c9:68:15:63:61:c1:81:81:
42:a0:38:e0:c9:a2:2c:2e:7b:a9:c4:09:42:ee:11:
c1:d0:a8:9b:85:27:40:0c:be:c0:4c:78:b4:ea:e2:
0b:81:7f:9a:e9:c8:5f:dd:b2:b9:07:c4:90:c5:ec:
fb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:38:68:54:B1:02:F1:EC:AA:0E:AD:33:71:2C:1C:F0:D9:2F:8B:CE
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/3zhoVLEC8eyqDq0zcSwc8Nkvi84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.252.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b1:c0:35:a1:d4:fb:7f:24:90:ae:da:26:a6:ed:87:bc:a4:
4e:5c:cb:de:54:7a:43:ad:38:99:ed:ea:7f:7d:24:ec:2a:32:
78:c0:de:c2:ca:72:42:67:e3:c7:c7:bb:f0:f5:c6:34:5d:32:
5c:5c:d5:b8:8e:b2:4e:ae:2b:a7:4a:89:7c:2d:5c:5e:a4:54:
14:4e:24:b5:b2:ac:b2:09:94:f6:49:f0:1d:a4:e5:06:a4:1d:
bb:b9:fe:3b:09:55:ed:18:fc:f8:09:6e:1d:75:a5:41:3b:d4:
0e:45:79:45:30:b5:8c:3d:05:e5:b5:6b:47:50:df:6a:e7:b5:
ad:f5:47:40:9b:71:e6:79:34:ad:ac:a3:7f:8c:e9:a6:b0:80:
33:4a:41:07:65:df:82:6a:0b:b8:9f:82:89:c9:e3:51:ab:83:
d1:79:90:e3:ac:c5:51:6d:eb:dd:4f:aa:9b:ad:90:35:87:a7:
68:9b:4d:92:fd:d3:49:b9:48:3a:51:7c:a2:3d:ce:eb:da:16:
9e:c5:ca:68:ae:17:b3:a9:01:07:4d:e7:6d:09:c4:3c:47:70:
ec:a5:69:a5:ee:e4:b7:5d:7f:5a:3a:9d:06:ae:b0:c6:e8:e7:
50:55:b5:c5:0d:b8:3e:8e:d2:9e:37:db:69:54:8a:06:b8:20:
d1:a6:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:05 2024 by rpki-client on console-fra.rpki-client.org