Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/rzTv-8WgvUreooJDBZsCuw-k--Y.roa
File: rzTv-8WgvUreooJDBZsCuw-k--Y.roa (raw, json)
Hash identifier: 1gLyXTbXzU0h/9elSfSgwOBrBeiRgHsV4ko5kt8r3P8=
Subject key identifier: AF:34:EF:FB:C5:A0:BD:4A:DE:A2:82:43:05:9B:02:BB:0F:A4:FB:E6
Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Certificate serial: 018C62B916781FDBB5E4BF8FE13EC44252C8
Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/rzTv-8WgvUreooJDBZsCuw-k--Y.roa
Signing time: Wed 13 Dec 2023 10:29:06 +0000
ROA not before: Wed 13 Dec 2023 10:29:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198192
IP address blocks: 45.131.54.0/23 maxlen: 23
45.131.52.0/23 maxlen: 23
185.92.237.0/24 maxlen: 24
158.255.236.0/23 maxlen: 23
45.10.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:62:b9:16:78:1f:db:b5:e4:bf:8f:e1:3e:c4:42:52:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903
Validity
Not Before: Dec 13 10:29:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af34effbc5a0bd4adea28243059b02bb0fa4fbe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:56:18:de:38:d9:7d:af:1f:49:a9:f8:60:7d:
be:da:1b:6e:61:ea:ef:4c:89:a1:92:cd:9b:a4:f5:
75:28:a4:c5:d1:7a:b2:ec:72:10:d9:d4:fc:7a:27:
7a:2a:35:0a:77:1a:46:4f:00:23:b2:12:54:5e:5d:
74:23:d8:ff:bf:96:48:80:dc:14:64:3a:4a:8e:95:
91:47:1a:ed:de:1b:75:d0:88:4f:95:d5:0d:df:51:
a5:95:b3:03:7b:01:4b:96:41:c2:84:68:18:4e:e1:
01:cd:97:5f:1e:63:fd:0c:93:c4:17:ac:3e:ae:db:
e7:07:be:4d:c1:ab:28:0b:57:08:82:17:cc:15:20:
4c:f2:99:8d:98:f9:ff:02:d7:ea:38:37:a4:04:64:
75:be:ea:e1:ec:e8:7d:9c:7f:ed:50:08:d5:46:62:
df:2d:1b:22:21:51:ed:c6:29:34:e6:a0:12:90:38:
d9:58:5e:f2:4a:89:c2:3c:b9:1c:f9:2d:8c:c1:e5:
8f:13:1b:be:79:a9:31:ff:62:71:cf:f2:d1:cb:13:
82:2e:12:b7:45:d6:ea:a6:85:e7:fb:4b:fb:d7:67:
e5:cc:72:67:6a:6c:30:b6:c8:18:d6:70:9d:6b:d7:
e6:eb:5e:fb:bb:61:4d:5b:e0:15:2c:35:2d:8e:2f:
27:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:34:EF:FB:C5:A0:BD:4A:DE:A2:82:43:05:9B:02:BB:0F:A4:FB:E6
X509v3 Authority Key Identifier:
keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/rzTv-8WgvUreooJDBZsCuw-k--Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.128.0/24
45.131.52.0/22
158.255.236.0/23
185.92.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c0:b8:9a:9a:65:47:9e:f5:60:36:e6:15:ce:1f:bd:89:a7:
89:5b:51:bd:74:fe:2d:0a:5f:bf:f9:31:6f:b3:f0:dc:13:76:
8c:56:6a:a7:db:5a:e3:ec:bd:d3:68:35:a4:37:7a:9c:f5:c0:
a4:e4:a2:bb:bb:93:71:f5:2a:e0:b4:88:6a:c5:37:29:80:ca:
19:35:f1:52:b2:e0:fc:72:86:cd:17:52:58:c1:0b:c5:5d:66:
79:77:06:03:5c:2a:ba:2f:e5:5c:ac:78:70:99:05:cd:ef:14:
23:25:9b:fd:72:74:43:8f:39:9d:31:b1:a0:6b:9b:49:1e:a6:
38:21:08:d7:e6:f6:ea:36:ee:11:d6:47:00:0d:ba:e5:c3:ce:
16:01:90:eb:64:ae:b1:12:92:0b:61:c2:45:16:5b:0c:e2:6b:
0b:3d:b4:8c:ea:da:f8:4a:f0:78:7d:ed:ec:38:d9:23:0d:15:
28:9f:17:5b:47:2f:0b:f1:84:8d:2d:a0:00:08:df:91:6b:91:
f3:7f:d0:66:2f:c7:45:60:54:00:9e:ae:e1:27:5d:d0:33:a8:
db:f1:1b:15:62:f0:e0:c6:dd:08:fe:7f:c2:cd:4e:13:8b:d0:
dc:51:01:20:2b:ec:ad:ec:4c:5e:d7:bb:57:0a:4d:fd:fb:39:
14:d2:d5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org