Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/zrQczqY0opOe3WD_PBRfynKvatk.roa
File: zrQczqY0opOe3WD_PBRfynKvatk.roa (raw, json)
Hash identifier: 6bIeIQbdBNn6HKF/C6SpMjHESYyGrY5jtmqTQTLiAb0=
Subject key identifier: CE:B4:1C:CE:A6:34:A2:93:9E:DD:60:FF:3C:14:5F:CA:72:AF:6A:D9
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 018CC86F81D0D35E7E4D5C7A2DC0727EC4F3
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/zrQczqY0opOe3WD_PBRfynKvatk.roa
Signing time: Tue 02 Jan 2024 04:30:00 +0000
ROA not before: Tue 02 Jan 2024 04:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.132.112.0/24 maxlen: 24
79.143.130.0/24 maxlen: 24
79.143.128.0/24 maxlen: 24
45.152.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 14:22:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:81:d0:d3:5e:7e:4d:5c:7a:2d:c0:72:7e:c4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Jan 2 04:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ceb41ccea634a2939edd60ff3c145fca72af6ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:12:a9:3f:7a:80:77:9c:c1:eb:64:98:ef:3f:
0f:8f:10:b0:06:05:94:3f:dd:49:85:32:96:c5:18:
31:7e:1d:7d:c6:a0:77:b1:ec:b0:3e:10:d3:b9:87:
b5:19:69:4e:da:f0:8e:ed:a3:01:50:8e:9c:d9:3c:
69:c0:22:28:7e:4c:3f:33:54:41:fb:a8:f6:d5:02:
00:72:d0:60:14:ec:81:c0:4c:48:9b:a8:cc:21:a2:
b1:fc:3e:c9:c8:f4:90:75:2b:c4:7d:31:a6:92:47:
3b:e0:46:65:dd:19:01:99:6c:57:a8:b3:bd:70:47:
d6:62:26:f2:3b:bd:10:18:9f:9d:b2:65:ed:4f:81:
38:14:31:c8:31:79:bb:9d:a6:fc:de:d1:92:09:ec:
74:9d:57:b3:87:ad:8e:fb:cb:55:ab:10:44:d4:c8:
9f:57:6b:3c:cd:25:dd:63:ad:3e:82:08:4c:25:8b:
7b:db:3d:02:7b:49:ff:1a:2f:0b:70:ad:ef:cf:16:
e1:33:3f:2d:bd:10:5c:65:61:fa:d8:8b:f2:60:e0:
40:47:9e:8e:77:76:25:46:23:06:70:9c:cb:a2:f9:
1b:2e:30:0f:2d:16:2a:63:fd:18:c9:fd:9c:a6:f2:
36:d3:bd:35:1d:2c:2b:8a:7d:3b:11:b3:a0:e2:cd:
96:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B4:1C:CE:A6:34:A2:93:9E:DD:60:FF:3C:14:5F:CA:72:AF:6A:D9
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/zrQczqY0opOe3WD_PBRfynKvatk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.112.0/24
45.152.34.0/23
79.143.128.0/24
79.143.130.0/24
Signature Algorithm: sha256WithRSAEncryption
90:3e:49:83:d6:88:c0:3d:78:f0:d7:e6:f6:08:91:cf:a9:c3:
82:f1:55:bd:84:cb:76:7b:b9:e3:f4:01:e8:a4:3a:5f:16:9c:
96:3c:74:fa:37:75:01:8d:c1:80:70:93:4f:92:26:48:e0:a0:
03:f4:46:f6:45:3b:37:31:73:99:75:bc:40:03:90:ee:46:97:
8f:e3:6b:d5:71:ad:88:32:84:29:a6:cd:46:6c:71:8f:54:19:
52:fd:ec:4a:1c:ff:5b:b8:29:48:09:f2:71:a3:00:db:28:58:
92:2b:e2:29:ea:c6:ab:6d:b7:ba:a7:19:12:be:dc:07:e3:1c:
41:a1:72:c5:56:04:96:d1:30:c4:84:d9:e0:5d:91:3e:6b:a1:
ca:9c:ed:1c:bb:52:99:7e:24:9e:87:81:15:04:18:05:85:1c:
5e:44:28:d2:43:19:86:e1:be:77:e5:23:ee:0f:67:8f:12:2b:
dd:18:67:e7:02:3d:3e:3a:d6:d2:0b:9f:6b:17:87:b6:2d:80:
66:08:ea:5c:73:36:33:94:5c:9c:89:a5:51:06:28:29:37:f9:
90:d8:f5:8d:dc:b1:fe:01:b0:12:fe:10:8d:e8:f0:55:4a:ba:
00:4d:7e:88:35:e6:f3:d5:e6:af:39:0d:7b:5d:d5:87:54:fe:
0f:f0:0b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 1 19:04:41 2024 by rpki-client on console-fra.rpki-client.org