Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/kzEjAy1E1NuzzyxzOu-UUm522ww.roa
File: kzEjAy1E1NuzzyxzOu-UUm522ww.roa (raw, json)
Hash identifier: pdmr6mfmCPZV4BBX6L9xoqbXiemQGim3K5aXG+tTeK8=
Subject key identifier: 93:31:23:03:2D:44:D4:DB:B3:CF:2C:73:3A:EF:94:52:6E:76:DB:0C
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01894E12071FD1EAD58BE052061C4F7A07A4
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/kzEjAy1E1NuzzyxzOu-UUm522ww.roa
Signing time: Thu 13 Jul 2023 07:05:51 +0000
ROA not before: Thu 13 Jul 2023 07:05:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 45.134.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 16:51:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:4e:12:07:1f:d1:ea:d5:8b:e0:52:06:1c:4f:7a:07:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jul 13 07:05:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=933123032d44d4dbb3cf2c733aef94526e76db0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:4e:6b:5e:d8:cb:fc:e6:bd:9d:13:cf:8a:
cb:1c:31:42:60:56:0f:0c:83:11:05:1d:72:5c:34:
01:4e:0e:89:91:0c:28:0f:93:0b:fb:6a:bc:93:34:
17:20:95:dd:0a:76:b9:e5:db:83:68:17:92:46:3d:
50:17:21:cf:bd:6b:d4:bc:ee:ea:7d:37:b0:c1:c0:
85:75:d6:ee:8c:60:0b:a3:84:1e:5d:17:0f:1f:2a:
1c:9b:16:42:61:da:bb:1d:56:66:53:99:f2:90:77:
a0:51:e1:07:d7:24:b5:af:cf:f2:a7:7b:9d:43:34:
a6:c7:35:ff:06:aa:f3:ca:25:71:ed:9c:9e:66:14:
00:6b:b1:81:15:08:38:64:d6:04:79:95:ae:18:ea:
2e:d5:91:40:65:4a:5e:a8:cc:25:18:a9:69:ca:42:
46:ed:a1:1e:42:c0:04:5c:88:71:db:a1:40:ed:c3:
3d:52:78:99:ed:81:cb:39:b9:61:9a:11:49:71:d3:
7f:95:d3:08:93:9e:dd:23:bc:58:bc:54:54:d0:2e:
81:ba:4a:47:d2:75:b4:98:a2:3f:d4:1d:44:89:48:
80:45:a2:37:77:7f:5b:fa:d0:b8:5f:d7:2b:28:5e:
ee:9b:1d:a4:6a:38:86:11:79:d8:9c:bb:eb:12:20:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:31:23:03:2D:44:D4:DB:B3:CF:2C:73:3A:EF:94:52:6E:76:DB:0C
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/kzEjAy1E1NuzzyxzOu-UUm522ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.13.0/24
Signature Algorithm: sha256WithRSAEncryption
53:59:50:f6:73:0e:c0:47:a4:fb:69:07:5b:09:14:5b:cc:be:
7f:4e:c0:25:40:b0:10:8a:b0:d6:0c:5d:8d:79:33:ae:26:a5:
47:57:2c:b4:2b:2e:8d:57:f7:eb:59:4a:ad:08:c8:11:d3:e3:
e2:26:81:2e:0a:de:36:43:7c:44:88:90:35:ed:f7:c0:24:97:
9a:cd:c5:e1:eb:52:d9:9d:a6:ab:b5:10:6c:ef:f8:bc:41:85:
3e:6a:61:6b:e2:80:42:18:ca:ca:ca:f0:05:44:6a:1e:9c:78:
2f:21:70:e3:0e:79:ed:6c:f8:0f:bb:38:1d:ee:2c:77:e6:21:
35:59:bb:0c:d2:47:49:74:2d:d6:60:71:8c:b4:5a:fc:b8:7a:
9e:da:38:8d:6c:bb:6d:2b:34:32:32:f7:5d:e7:af:38:5b:ba:
16:66:5a:3e:e3:99:9d:cc:04:3f:ec:7f:35:53:e0:a8:19:33:
8b:e1:b4:88:74:ca:3a:1e:70:ab:57:94:22:38:19:f8:aa:99:
83:03:4f:6a:16:2a:5d:79:18:b8:c4:cf:8b:a6:b3:9d:7c:d1:
08:10:b6:68:f4:e4:e2:4e:fd:68:3d:54:9f:d4:13:81:1e:74:
52:23:fa:7d:9e:8e:94:58:f0:d7:3c:ed:eb:d9:11:73:60:3f:
4a:c2:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:34 2024 by rpki-client on console-fra.rpki-client.org