Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Z-etPy8m5AWrMY_wEM0MYZe8iEY.roa
File: Z-etPy8m5AWrMY_wEM0MYZe8iEY.roa (raw, json)
Hash identifier: AvPFw3J1v28FmLlsiPA/VJVswGq1yGjmv1unHyZHgLc=
Subject key identifier: 67:E7:AD:3F:2F:26:E4:05:AB:31:8F:F0:10:CD:0C:61:97:BC:88:46
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0187AF306A2131494BC15F9C06A1E6D9C23B
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Z-etPy8m5AWrMY_wEM0MYZe8iEY.roa
Signing time: Sun 23 Apr 2023 17:36:38 +0000
ROA not before: Sun 23 Apr 2023 17:36:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.37.0/24 maxlen: 24
45.149.38.0/24 maxlen: 24
45.149.36.0/24 maxlen: 24
45.149.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 11:49:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:af:30:6a:21:31:49:4b:c1:5f:9c:06:a1:e6:d9:c2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Apr 23 17:36:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67e7ad3f2f26e405ab318ff010cd0c6197bc8846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a7:4c:11:47:6b:20:7a:b5:91:c8:42:fc:01:
eb:2d:47:58:b1:3d:e2:59:0d:de:5e:88:96:20:53:
a9:63:0e:4b:f7:89:ec:99:43:de:f3:34:da:63:25:
75:7f:91:e2:98:65:26:cf:4d:ca:10:57:13:64:99:
31:d0:49:70:0d:01:4e:24:b8:a6:03:08:22:f8:c9:
85:ca:43:ee:bc:bc:31:58:ae:43:46:e5:4a:c2:49:
6b:16:20:6a:f7:5d:22:3e:cd:87:6b:4b:dc:92:51:
3c:d6:7f:26:be:6d:64:ee:b0:21:77:84:1b:58:e8:
c5:99:a0:37:f8:97:b2:6d:39:01:38:76:6c:1e:c5:
37:10:62:89:b9:fe:c0:38:1d:be:f4:0c:b7:c3:27:
17:b7:b1:e9:ec:86:cc:45:7e:12:6e:07:00:c7:ba:
7e:ef:28:ec:fd:55:d4:f9:e8:34:c4:50:a7:ea:2e:
7b:53:46:23:4d:51:52:e4:91:8b:26:bb:e3:c2:96:
ec:79:cb:a3:55:35:81:68:0d:87:b3:53:fc:a1:8f:
0b:7e:62:74:ca:44:08:e8:b3:4c:b5:91:11:c6:c9:
9d:91:72:12:a2:68:e3:c7:28:6c:ff:d7:d0:ed:5d:
3d:de:ca:38:e9:4c:4d:8d:e5:b3:21:53:5e:2a:23:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E7:AD:3F:2F:26:E4:05:AB:31:8F:F0:10:CD:0C:61:97:BC:88:46
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/Z-etPy8m5AWrMY_wEM0MYZe8iEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/22
Signature Algorithm: sha256WithRSAEncryption
39:cf:0d:3c:60:b9:ef:bd:9b:6c:8d:0f:ce:1a:1b:3a:be:4b:
6c:32:fd:58:80:88:11:c9:4f:96:81:f1:74:60:da:14:bc:ae:
5b:aa:ae:e6:3c:7f:ea:b4:0d:50:f0:43:92:0f:f3:18:4c:89:
c6:8d:d4:01:4e:3c:8b:ac:aa:7a:93:91:ec:5e:31:96:b1:54:
91:6e:fd:c1:b7:e9:3d:d8:dd:ba:a4:6a:ae:04:0e:16:21:ef:
ee:f6:ef:b6:72:86:46:fd:3b:1b:a7:b9:d9:9a:3f:82:80:7b:
6c:27:21:d4:8e:b7:d4:e7:d3:0b:1c:a4:49:26:4f:53:5a:3c:
04:62:b1:2e:ec:6e:68:06:0b:95:e8:c3:5e:f9:0c:7c:08:f3:
94:73:1c:68:42:42:80:93:41:08:09:84:dd:77:66:27:49:45:
ae:9f:ba:f6:0a:68:e7:5c:91:d7:e0:56:eb:e6:95:e5:f5:da:
a4:1b:20:24:bf:d4:28:45:87:cc:24:3b:47:60:94:29:02:da:
c5:2d:fc:e0:28:46:1b:e7:8a:46:9d:0d:bf:8b:4d:ac:55:b9:
30:5b:bd:18:a8:4e:7f:7b:5c:91:4b:66:22:8c:c1:e8:8f:f5:
70:2d:70:d0:3d:98:aa:75:2c:9c:47:a0:d1:2f:03:00:2b:58:
c5:8e:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:30 2024 by rpki-client on console-ams.rpki-client.org