Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ZaqEShPRZJcuFzYwASoNtKJkGdM.roa
File: ZaqEShPRZJcuFzYwASoNtKJkGdM.roa (raw, json)
Hash identifier: OB/p4sGrAxkyW4YLPcslzIcb1xrI3AnEeNEMpky34HE=
Subject key identifier: 65:AA:84:4A:13:D1:64:97:2E:17:36:30:01:2A:0D:B4:A2:64:19:D3
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018AB14C6B9F16D51BD5C30CC956D6A73EDA
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ZaqEShPRZJcuFzYwASoNtKJkGdM.roa
Signing time: Wed 20 Sep 2023 06:34:50 +0000
ROA not before: Wed 20 Sep 2023 06:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Dec 2023 13:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b1:4c:6b:9f:16:d5:1b:d5:c3:0c:c9:56:d6:a7:3e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Sep 20 06:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=65aa844a13d164972e173630012a0db4a26419d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:7c:91:9a:6b:6d:84:e7:90:78:5c:1d:b1:
ce:ea:d0:43:76:50:2e:28:e9:f7:f9:94:a0:00:43:
bd:52:85:96:b8:4a:e0:82:27:ba:c0:0a:13:22:68:
10:6e:1e:c7:77:41:a0:aa:df:a5:4b:91:75:75:1a:
5a:8f:dc:e5:c0:a6:a3:31:99:6d:1d:5b:97:b5:12:
c4:08:3f:1b:ae:c9:fe:23:ad:af:4a:da:e4:3a:af:
ab:aa:7a:3b:66:85:95:77:97:fb:47:b2:96:2c:5a:
dc:35:f2:3d:88:16:2d:d6:00:e5:b4:4d:1a:7e:42:
24:83:a0:67:d3:e8:fd:bd:b3:18:78:92:b6:28:7d:
ba:17:5f:ee:1e:39:ce:5a:27:95:45:10:f1:02:b4:
2f:5e:62:6c:f4:66:f7:dd:b5:aa:e0:64:ac:93:41:
f0:8e:c1:cd:a1:00:70:64:30:e7:4e:ba:33:a3:a7:
34:c7:04:01:37:aa:39:67:08:76:59:5e:41:8d:e2:
47:09:51:de:c2:9a:27:3b:08:1b:28:e9:75:77:9e:
1f:32:ce:b1:6d:f0:43:2e:d2:18:28:65:ca:d3:43:
be:e3:94:3e:03:7e:3c:0b:d9:b2:3c:56:37:a5:18:
53:9e:5c:fd:9a:86:2c:fa:4c:0f:72:d1:40:e2:20:
48:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AA:84:4A:13:D1:64:97:2E:17:36:30:01:2A:0D:B4:A2:64:19:D3
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ZaqEShPRZJcuFzYwASoNtKJkGdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:12:c9:b6:2d:dc:26:20:02:5b:d0:ab:e1:0e:d8:06:6e:6c:
a3:ec:16:31:d9:aa:46:0d:b5:30:48:13:84:79:b2:e6:5e:25:
aa:b8:81:7f:31:25:02:c3:4b:98:27:5a:ed:5f:ad:8c:52:cf:
37:6b:c4:7f:33:06:ce:34:15:f7:08:24:93:cc:7d:d5:84:45:
4d:8e:bd:1a:6f:84:02:50:be:f2:2d:bd:50:14:51:08:c2:31:
7f:ae:aa:53:a0:89:b0:93:4e:fb:08:cf:53:b7:da:f8:b2:7d:
d0:59:14:e9:42:96:49:46:60:b0:57:03:1b:a1:91:5a:7e:eb:
f4:a0:50:82:0b:99:f1:87:a7:29:ed:8c:db:fc:b3:59:df:8a:
b7:44:88:13:73:18:3d:2c:68:98:6d:7d:43:f3:3a:61:61:29:
8f:4f:e4:be:4d:51:f5:cb:3b:3b:59:6c:f0:38:78:de:90:86:
14:55:05:a1:df:84:a9:0e:7c:64:93:e4:6f:95:62:b1:92:b4:
97:82:ad:18:47:65:f2:80:a5:3b:21:87:6c:21:30:eb:48:c4:
fa:c7:50:aa:4e:33:5f:2c:53:4b:dc:fe:30:4d:fb:07:63:ce:
13:e4:8e:6d:a9:b1:75:b2:e7:8d:02:0c:7a:78:4f:f9:aa:cf:
15:4e:f1:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org