Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/zElm3qDrQoaX3U0Kc9gXp3ejRDA.roa
File: zElm3qDrQoaX3U0Kc9gXp3ejRDA.roa (raw, json)
Hash identifier: x1X8kW+NwvHmcP7vY3bJTVfwRLeqHoyjy9y0kqyJSjc=
Subject key identifier: CC:49:66:DE:A0:EB:42:86:97:DD:4D:0A:73:D8:17:A7:77:A3:44:30
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01856FCB95DA2E0E3D12E9808C67F06B7777
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/zElm3qDrQoaX3U0Kc9gXp3ejRDA.roa
Signing time: Mon 02 Jan 2023 00:04:51 +0000
ROA not before: Mon 02 Jan 2023 00:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 45.81.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:95:da:2e:0e:3d:12:e9:80:8c:67:f0:6b:77:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 00:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc4966dea0eb428697dd4d0a73d817a777a34430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:ba:e4:54:7e:16:a3:c0:65:cc:f7:32:1f:
4e:7b:06:47:92:76:15:3b:5a:96:c1:18:54:5e:84:
40:03:e4:6b:45:89:44:9e:f6:59:b2:1b:54:67:ad:
12:80:ba:eb:aa:2c:d9:31:ba:cd:6a:0f:e6:f2:1f:
a4:fd:4e:2d:90:b6:d6:56:53:70:d4:e5:a1:62:e9:
d4:ff:e2:86:9d:fe:bb:8a:55:31:a4:3b:c7:4f:46:
38:c4:23:11:36:72:fb:bd:83:50:11:e0:fc:99:1a:
cd:ce:e4:18:1b:12:c4:4a:2d:62:48:4b:50:59:b3:
6a:2e:fb:c1:af:b5:15:fb:c9:12:4e:6e:3f:f0:31:
b4:76:f9:89:65:e0:4b:90:c7:5a:01:95:1c:3f:1a:
b4:8c:84:a8:24:bc:fd:4a:c5:51:2c:df:85:bd:db:
c2:b3:07:39:82:c7:c8:3d:1a:a7:5d:81:80:9d:2c:
a6:de:2c:1a:83:e1:4b:21:6a:16:2b:24:d8:0f:95:
99:97:31:54:38:e3:9b:6c:19:f2:63:25:02:b4:84:
1d:b7:f9:19:e5:1a:db:38:b6:cf:12:69:3a:0c:06:
56:96:ab:53:5c:34:fd:b8:3a:93:19:44:dc:d9:f9:
98:fe:e5:c0:c8:45:ef:67:78:e0:94:1c:85:d4:d8:
c3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:49:66:DE:A0:EB:42:86:97:DD:4D:0A:73:D8:17:A7:77:A3:44:30
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/zElm3qDrQoaX3U0Kc9gXp3ejRDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.151.0/24
Signature Algorithm: sha256WithRSAEncryption
26:c7:b4:96:8d:6f:eb:46:76:90:5b:52:69:a9:c8:09:9b:a6:
b6:a0:65:13:42:0d:ea:2a:3b:4d:db:ef:4d:cf:4c:43:1f:fd:
b0:b5:48:16:dd:0b:90:09:7a:c6:86:56:75:90:cc:c8:d4:67:
28:65:f1:08:fe:e8:10:56:e2:b2:5f:92:89:5d:1b:81:7c:77:
0b:b1:8b:42:a7:f5:5a:2f:70:63:c9:16:74:23:4e:ea:f5:b6:
f9:4b:40:64:fd:5f:3c:eb:82:b3:a6:3c:1e:d6:aa:2b:60:81:
5d:70:40:ab:da:ef:5d:af:b7:ea:ad:bf:0f:bf:ce:51:3d:f3:
34:27:1f:36:c5:ff:61:8b:05:92:04:c8:b5:ed:38:e5:3d:66:
9e:1a:93:9e:6b:d2:0e:33:82:8f:81:2f:46:07:c1:8e:22:f3:
a9:4d:0d:de:28:d4:38:8a:fa:d2:92:3d:49:29:bd:2c:45:c0:
c8:49:d5:17:fd:31:0a:70:de:ec:f3:a1:11:7e:0e:01:ac:bd:
a5:1b:9e:94:b3:79:a9:dc:42:27:6f:be:4e:f8:e7:ed:10:92:
d4:6c:e0:87:4f:e0:18:d2:03:21:2d:91:6b:29:22:6c:51:3b:
46:54:13:f1:41:bd:0b:45:80:f2:b8:35:ac:e9:2e:45:76:b2:
7d:46:3c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org