Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/ZE45F4k1M3o4n-q4Hj83y2YjytA.roa
File: ZE45F4k1M3o4n-q4Hj83y2YjytA.roa (raw, json)
Hash identifier: XyE9UnmGp2kmpg1Zp1JYGV2z8KJLPWBADPyWG+E3ARA=
Subject key identifier: 64:4E:39:17:89:35:33:7A:38:9F:EA:B8:1E:3F:37:CB:66:23:CA:D0
Certificate issuer: /CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Certificate serial: 0189A66AD7E11CBDC058036AC2E930359782
Authority key identifier: AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/ZE45F4k1M3o4n-q4Hj83y2YjytA.roa
Signing time: Sun 30 Jul 2023 10:49:27 +0000
ROA not before: Sun 30 Jul 2023 10:49:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60453
IP address blocks: 195.62.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:6a:d7:e1:1c:bd:c0:58:03:6a:c2:e9:30:35:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2464ecc946f292e404f2c351922ecf4c590fd8
Validity
Not Before: Jul 30 10:49:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=644e39178935337a389feab81e3f37cb6623cad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:59:bd:c6:c8:12:c7:46:06:ea:2e:be:15:4e:
87:0c:6c:60:0d:65:b7:df:ec:05:a1:58:13:08:52:
ab:6a:e4:a2:b6:3d:1a:3d:bb:4f:c8:6e:20:e7:7a:
f0:d1:f8:3e:d7:59:9e:27:90:61:37:b3:ad:a5:8d:
5c:da:98:a6:b3:11:45:2d:6a:3e:da:08:d7:a7:6e:
cc:2c:3f:35:6c:d5:08:48:57:c5:18:8c:60:55:c5:
ec:be:97:b5:15:b7:6c:ce:b9:eb:1e:6b:45:94:61:
54:38:1a:0c:f7:c4:c8:6a:56:ea:8e:49:4d:c6:d6:
d9:18:a3:5b:f4:50:7b:d9:4b:c0:49:9a:26:34:c0:
a2:36:f9:4b:9e:c8:87:db:f8:de:7c:0b:f3:df:36:
40:93:1a:75:e6:1d:0d:ef:fc:86:8c:81:36:3b:a4:
e6:97:43:c7:ac:37:50:15:3e:ff:b1:1a:62:19:f9:
b2:25:58:d3:d3:52:fe:34:11:72:9a:48:7f:3d:d4:
ce:f5:ae:c3:25:88:fa:76:83:e0:08:68:5b:07:41:
ab:78:79:70:96:f1:f5:5a:ab:6c:5e:73:6a:13:c2:
47:c6:37:62:72:f0:3b:c0:70:85:78:88:bd:97:e3:
fc:c4:ae:b8:05:a0:7b:86:a6:3a:0c:b7:77:30:fc:
17:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4E:39:17:89:35:33:7A:38:9F:EA:B8:1E:3F:37:CB:66:23:CA:D0
X509v3 Authority Key Identifier:
keyid:AD:24:64:EC:C9:46:F2:92:E4:04:F2:C3:51:92:2E:CF:4C:59:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSRk7MlG8pLkBPLDUZIuz0xZD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/ZE45F4k1M3o4n-q4Hj83y2YjytA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/b26859-9b14-450f-bb85-592ed73761ca/1/rSRk7MlG8pLkBPLDUZIuz0xZD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.62.51.0/24
Signature Algorithm: sha256WithRSAEncryption
71:12:33:25:93:ef:a2:55:8b:c4:7d:34:1e:ba:68:6e:e0:58:
33:c1:dc:dc:86:63:69:d0:84:4a:0b:62:af:d4:6a:ca:85:16:
ad:e6:65:78:d1:19:97:61:c1:90:d3:3c:fc:1e:3a:16:41:e0:
df:a9:b2:cc:78:d4:5b:f4:d5:4e:b5:d0:85:0c:9f:94:f3:c5:
69:43:52:a5:e9:c1:1e:b3:aa:b4:7f:16:9a:91:16:93:b1:52:
37:d9:b0:5b:05:37:97:4f:08:17:ae:66:76:be:c9:8e:ed:9b:
5f:18:df:82:d0:34:57:dd:0d:2b:bd:00:02:4e:ae:88:d4:10:
e6:72:2e:de:14:2d:78:1a:81:f4:27:b9:71:85:3c:9e:6c:4b:
88:f5:3f:d4:88:02:16:77:67:16:c9:39:c4:f7:30:28:eb:7f:
d8:56:7d:21:02:19:db:07:67:e4:34:a1:4b:7b:01:76:f2:d9:
e0:af:45:05:92:c2:06:9e:8a:43:f8:d7:db:e8:14:ff:cd:73:
61:bc:83:b0:3b:0d:39:f4:4a:05:1a:11:81:39:74:fd:75:01:
c9:cb:bf:9e:74:f8:63:78:cc:3b:34:08:c3:c7:ae:05:a6:f7:
ad:0a:6b:22:32:c9:88:f8:81:8b:3c:d3:d9:43:ac:6b:d0:da:
60:01:71:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:01 2024 by rpki-client on console-ams.rpki-client.org