Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ZY8jgGcPWLxQpif1fuwMYHW5NJw.roa
File: ZY8jgGcPWLxQpif1fuwMYHW5NJw.roa (raw, json)
Hash identifier: 4XieWJBe81IDJpCmpm8nYDtU9Fi+ca8p+Lh3FqV2TRY=
Subject key identifier: 65:8F:23:80:67:0F:58:BC:50:A6:27:F5:7E:EC:0C:60:75:B9:34:9C
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018CAD9C1C2A7E7C4FDD1A2B84EC8E2C2D0A
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ZY8jgGcPWLxQpif1fuwMYHW5NJw.roa
Signing time: Wed 27 Dec 2023 23:28:58 +0000
ROA not before: Wed 27 Dec 2023 23:28:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.153.0/24 maxlen: 24
45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ad:9c:1c:2a:7e:7c:4f:dd:1a:2b:84:ec:8e:2c:2d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Dec 27 23:28:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=658f2380670f58bc50a627f57eec0c6075b9349c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:92:6c:e2:1a:a7:d5:b9:f2:c7:61:d7:80:
31:48:b5:de:05:d6:e0:b6:bd:f9:16:f0:24:47:e9:
39:0f:22:ce:5b:f7:1c:8f:68:d9:d0:7b:84:e8:bf:
3d:8f:20:66:ba:39:35:6c:8a:8e:4d:f3:39:dc:c6:
ea:62:1b:9c:2d:91:14:0a:23:ec:49:77:24:90:15:
71:82:a4:25:78:74:29:b7:82:b1:0f:32:d8:16:63:
2b:b4:b7:43:9b:d0:82:19:cd:d2:60:35:6b:6f:21:
f2:b9:af:6a:35:c6:b7:1d:23:10:9a:da:e2:69:a3:
ea:ba:e7:8c:e5:1c:a6:31:02:28:8d:06:d7:86:99:
a4:6f:ad:ce:8b:83:85:7d:70:ea:ed:dd:91:49:47:
a2:59:e9:82:25:b4:0d:78:a7:04:b4:50:19:21:b3:
9c:d6:10:8a:7b:88:7d:c5:95:4a:67:ec:c9:83:75:
5d:17:37:80:16:d1:ee:21:6b:e3:6f:28:61:6f:01:
f8:94:b7:67:a5:92:04:e7:7c:ca:f9:f2:a5:9c:31:
6f:2e:de:de:2f:3f:43:53:b3:68:01:aa:93:61:2b:
64:7f:c9:10:5a:02:f7:56:b8:0d:02:85:38:b0:9a:
d6:90:8b:1b:b8:60:76:7a:e4:38:6f:b4:8e:f8:39:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:8F:23:80:67:0F:58:BC:50:A6:27:F5:7E:EC:0C:60:75:B9:34:9C
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/ZY8jgGcPWLxQpif1fuwMYHW5NJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0-45.145.155.255
Signature Algorithm: sha256WithRSAEncryption
79:59:5f:dd:0f:63:0a:bb:44:2c:c8:30:ec:21:96:de:a2:70:
38:7d:66:85:e4:79:a2:35:fd:9b:ee:4b:38:ab:8e:db:3c:e5:
48:3b:c0:89:5c:a0:58:83:05:fd:28:64:7b:b2:43:8f:16:78:
a1:a0:8b:6a:ad:b2:83:b0:c4:ef:a0:43:d5:d6:a2:c8:9b:41:
30:c1:65:7b:9c:aa:be:c8:3d:81:2f:a0:57:eb:dd:07:34:0a:
50:cd:5d:24:c7:98:42:66:00:50:8c:9a:77:a1:f2:a8:79:30:
a1:1c:b5:74:f0:7e:85:16:47:8f:65:33:34:d8:d2:a8:d1:17:
08:5d:aa:31:eb:bd:11:a9:05:fd:76:67:6a:61:d5:79:6c:fc:
1b:36:1d:e3:a5:60:5f:0d:ee:26:15:7b:8a:e5:d4:62:f2:d3:
ef:02:7a:4b:1e:5c:e7:27:e9:30:22:2a:35:51:ff:a0:50:76:
2e:44:2f:42:13:6a:9b:8a:5b:58:d8:70:e0:d1:1e:d1:5d:be:
fd:63:ac:ac:a9:39:13:87:7b:56:cd:28:11:d8:1b:cf:cc:56:
ea:d3:d0:be:74:3d:48:4a:aa:c8:93:2a:eb:4e:a0:3f:6f:0f:
58:9b:61:99:b5:be:88:81:e0:36:ae:17:6f:47:84:ff:82:e6:
1a:47:50:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 30 11:30:27 2023 by rpki-client on console-ams.rpki-client.org