Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/ZichB6b7oqaiFO3dbyBzOLA9xus.roa
File: ZichB6b7oqaiFO3dbyBzOLA9xus.roa (raw, json)
Hash identifier: GY8zkOW8sEU0TDDKC2u/O5qq1CQNmkCxOjyqbnEmDcw=
Subject key identifier: 66:27:21:07:A6:FB:A2:A6:A2:14:ED:DD:6F:20:73:38:B0:3D:C6:EB
Certificate issuer: /CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Certificate serial: 0189D67EC2AF5BF54B07AD042C4B09368E75
Authority key identifier: 3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/ZichB6b7oqaiFO3dbyBzOLA9xus.roa
Signing time: Tue 08 Aug 2023 18:52:58 +0000
ROA not before: Tue 08 Aug 2023 18:52:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209097
IP address blocks: 45.149.58.0/24 maxlen: 24
45.149.56.0/24 maxlen: 24
45.149.57.0/24 maxlen: 24
45.149.59.0/24 maxlen: 24
5.182.144.0/24 maxlen: 24
5.182.145.0/24 maxlen: 24
5.182.146.0/24 maxlen: 24
5.182.147.0/24 maxlen: 24
2a0e:5c03::/32 maxlen: 32
2a0e:5c04::/30 maxlen: 30
2a0e:5c01::/32 maxlen: 32
2a0e:5c00::/32 maxlen: 32
2a0e:5c02::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:7e:c2:af:5b:f5:4b:07:ad:04:2c:4b:09:36:8e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c86ec321e72fd46c98dcc0cd7c70bcad557d59c
Validity
Not Before: Aug 8 18:52:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66272107a6fba2a6a214eddd6f207338b03dc6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:75:1a:62:10:0b:72:2d:fb:aa:01:86:5a:
90:83:fc:3e:c6:e9:70:58:cf:dd:5a:d8:ed:78:07:
ed:53:0b:82:10:9f:a3:40:78:25:01:99:a5:45:a7:
d3:e1:07:36:0b:06:37:70:00:34:bd:e0:03:58:97:
97:a8:cd:1b:36:2f:13:8f:5b:2c:1e:65:0e:dd:ab:
ae:be:a0:3a:34:c1:4f:54:65:60:70:e6:e9:93:fb:
11:2b:e5:bc:21:f1:7f:c2:c7:57:de:8f:2a:b7:00:
ad:ca:c6:88:7d:8a:84:1d:9a:35:0c:ce:a4:65:1a:
88:b1:88:64:ce:dd:2d:4c:56:6e:00:6c:8e:d7:47:
97:6a:5f:92:af:26:d7:76:82:51:87:a0:b6:2c:a5:
01:fa:8b:4e:1e:2b:ce:e4:36:23:fb:77:3c:85:4b:
59:39:13:50:7c:2a:62:43:19:24:2b:98:b1:fa:51:
a6:4b:15:0a:ba:b3:d9:f1:f4:7c:a3:d7:da:17:ef:
36:b0:2f:a0:a1:f0:b2:93:74:71:c1:4e:fd:b1:4f:
54:e0:50:7e:55:4f:cb:42:33:8d:b0:2d:cb:c4:4f:
77:55:37:f3:6c:59:b9:5a:67:4c:3a:7a:af:fc:1f:
b3:43:a5:25:21:d1:6b:ca:b1:4d:1c:11:db:7c:e8:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:27:21:07:A6:FB:A2:A6:A2:14:ED:DD:6F:20:73:38:B0:3D:C6:EB
X509v3 Authority Key Identifier:
keyid:3C:86:EC:32:1E:72:FD:46:C9:8D:CC:0C:D7:C7:0B:CA:D5:57:D5:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PIbsMh5y_UbJjcwM18cLytVX1Zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/ZichB6b7oqaiFO3dbyBzOLA9xus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5c0fd2-6743-4682-967b-5f15beafa9b1/1/PIbsMh5y_UbJjcwM18cLytVX1Zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.144.0/22
45.149.56.0/22
IPv6:
2a0e:5c00::/29
Signature Algorithm: sha256WithRSAEncryption
57:b7:a8:85:8d:69:55:5a:be:ef:d6:10:85:a8:eb:55:ba:b9:
06:46:4b:24:40:c8:19:75:63:67:01:d0:7c:9f:e0:32:0c:53:
38:64:e7:38:4f:3c:6a:fa:46:42:fd:ec:22:39:9e:9f:a5:8b:
cf:30:33:34:30:90:d9:68:b8:4a:3a:d4:9b:a6:c5:53:8d:a8:
02:c0:3b:fa:34:e2:5b:3b:c7:b6:a6:de:82:9d:fe:4d:21:60:
10:ec:d7:96:17:fc:82:0f:7a:c5:86:ca:7a:5d:1a:b1:3b:03:
bd:07:7b:ee:11:c6:d5:ce:c8:cc:66:b3:55:3c:f2:c7:39:81:
5d:64:fa:53:76:af:08:d9:f3:78:5c:96:fe:30:92:cd:e6:60:
2f:5e:23:4f:07:00:31:01:14:6d:5b:92:91:ae:e2:4a:c0:d6:
fe:6e:5a:69:bd:13:64:4a:a9:a7:0a:2d:d6:b3:44:eb:9c:12:
d4:96:2f:7d:0d:87:0b:a5:3a:ce:4b:8f:bd:78:08:cb:50:ac:
08:24:f7:10:47:1f:a8:e7:b2:71:9a:84:81:9f:65:e9:62:2d:
89:40:97:a6:86:f2:e6:25:eb:22:c4:09:d3:70:33:87:d4:9f:
b2:e4:ed:bc:15:5f:64:24:c9:41:49:8c:03:3b:36:fd:0d:7f:
af:59:44:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:38 2024 by rpki-client on console-ams.rpki-client.org