Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa
File: zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa (raw, json)
Hash identifier: 5Kf7LuagcfDSzqRfX2jdRbgGLK9E6IPxVe0K5X/DxQY=
Subject key identifier: CD:C0:57:22:7F:03:12:C7:7C:A8:20:A2:07:A3:6C:18:41:14:40:FD
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 01857082BAE78F526BF843A9E6EE63FB3E19
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa
Signing time: Mon 02 Jan 2023 03:24:53 +0000
ROA not before: Mon 02 Jan 2023 03:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202945
IP address blocks: 45.154.60.0/24 maxlen: 24
2a0f:b100:2::/48 maxlen: 48
2a0f:b100:5::/48 maxlen: 48
2a0f:b100::/44 maxlen: 44
2a0f:b100:4::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 20 Feb 2023 16:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ba:e7:8f:52:6b:f8:43:a9:e6:ee:63:fb:3e:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 2 03:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cdc057227f0312c77ca820a207a36c18411440fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:43:07:7c:00:ed:2d:a7:be:d7:cc:16:56:e0:
3f:70:32:bf:fb:a6:63:14:3e:87:98:48:19:66:46:
b2:45:ec:48:13:a9:49:e6:10:c6:de:28:c3:25:bb:
1d:a6:be:58:b9:bf:fd:10:ab:02:1a:9f:ec:1b:82:
eb:e5:d2:88:df:12:9d:37:8e:b2:79:f7:ac:82:31:
36:88:d4:ca:2e:00:db:fb:4a:21:2e:64:a7:4b:2a:
44:81:2b:e1:cf:bd:e1:5d:74:3e:9d:a6:ee:ff:b6:
c5:a2:c8:76:56:4d:f2:42:65:f8:45:bd:fe:c4:eb:
cc:08:a1:62:4c:32:0f:cf:b4:39:f5:e1:35:86:c7:
e1:2d:0f:76:df:eb:dd:10:a6:29:cd:b8:c7:f2:50:
07:4f:58:a3:a2:a7:ec:1d:3c:e1:a7:e4:1b:22:59:
8f:b8:ae:72:68:77:a1:d7:a4:b9:bd:14:41:dd:5f:
3a:4c:2b:89:3a:5c:92:0b:ef:1a:08:ad:68:85:3c:
e9:39:78:63:30:a3:1c:de:6a:92:06:09:13:4d:53:
a9:ed:84:72:45:d9:b2:86:0c:f0:b5:91:78:d7:0a:
74:16:13:4c:b3:31:03:62:58:a7:90:36:f9:b0:f9:
19:01:37:27:ec:02:8d:f5:ec:66:71:8a:0b:a6:7e:
96:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C0:57:22:7F:03:12:C7:7C:A8:20:A2:07:A3:6C:18:41:14:40:FD
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/zcBXIn8DEsd8qCCiB6NsGEEUQP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.60.0/24
IPv6:
2a0f:b100::/44
Signature Algorithm: sha256WithRSAEncryption
39:b6:28:e9:a4:2e:7c:1c:fa:f2:c6:b7:a6:d5:32:d2:4b:51:
6b:3b:98:3a:ec:2d:84:8b:c5:e8:2c:50:36:cb:95:c2:e7:a6:
0b:1d:65:51:b0:89:1c:3e:fa:c7:7e:60:18:e8:9e:4d:1e:8c:
57:40:7b:46:3f:02:c9:1c:36:c0:43:22:a4:b4:35:f7:20:b0:
c4:91:d7:e8:93:f7:85:bd:58:3d:fd:85:2d:5a:f4:82:71:02:
17:e6:c4:28:81:10:fb:e6:98:ab:70:ad:50:00:09:ea:5f:d8:
10:c1:69:d0:e6:80:0c:8e:55:a6:38:64:f4:a5:9f:5a:d4:3d:
0e:11:f6:28:5f:8c:21:49:c3:7b:8c:28:ab:17:c9:50:df:37:
f6:b4:c4:2a:56:f4:a9:45:c6:68:af:88:2e:26:70:fa:20:91:
3f:7c:64:5f:45:10:76:02:fc:66:19:66:db:a5:27:01:84:cd:
90:93:f0:8d:46:1d:98:71:39:cf:3d:4f:6e:8c:4a:5b:60:3c:
d4:8c:12:0c:d3:d9:6d:b4:a5:b1:3d:e4:a9:8d:7e:a0:6c:f3:
f5:51:8a:db:16:4a:33:8d:8f:b6:44:3d:0c:2b:9e:56:92:9d:
7b:00:28:ec:a3:a5:40:c5:7a:e4:2c:49:c3:11:d5:57:56:30:
4d:8b:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:50 2024 by rpki-client on console-ams.rpki-client.org