Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ZQPZJqGXONCFdxvqu9hrchXl2sw.roa
File: ZQPZJqGXONCFdxvqu9hrchXl2sw.roa (raw, json)
Hash identifier: Qyyc4rFAYccUFhDVgZXr7gZsaqIA316aCvwrVgCOr1Y=
Subject key identifier: 65:03:D9:26:A1:97:38:D0:85:77:1B:EA:BB:D8:6B:72:15:E5:DA:CC
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0185707976ABD7039DBEECACC06C6904EFA7
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ZQPZJqGXONCFdxvqu9hrchXl2sw.roa
Signing time: Mon 02 Jan 2023 03:14:46 +0000
ROA not before: Mon 02 Jan 2023 03:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211337
IP address blocks: 45.155.76.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:76:ab:d7:03:9d:be:ec:ac:c0:6c:69:04:ef:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 2 03:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6503d926a19738d085771beabbd86b7215e5dacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:73:83:e4:98:59:7c:f3:90:aa:b0:00:90:cf:
4e:ab:d0:54:0a:72:d4:f7:0b:1a:cf:c7:f4:5f:d0:
58:57:aa:13:59:03:5c:7e:da:53:e5:23:18:9d:33:
dd:0f:bc:27:c2:fd:3d:4c:23:94:64:51:5c:1e:e9:
02:a1:fe:39:38:1d:44:c3:ba:27:9a:41:03:03:60:
ae:63:ed:6a:df:21:f7:e2:0a:c2:97:4c:0b:6e:7e:
e9:e0:e8:47:1d:8e:d0:85:4f:4b:f5:9c:2e:fd:4c:
11:73:40:31:f7:3e:f0:35:d0:30:15:62:ae:a4:0a:
33:82:92:6d:ee:d3:97:22:be:76:12:ba:fd:0c:9e:
d7:c5:be:91:c6:01:ff:0c:15:5a:c3:03:61:c4:c2:
38:f1:06:b5:d5:3c:fc:0c:31:87:91:d0:12:27:81:
eb:75:1d:a7:49:18:8f:7b:26:28:7f:1d:ea:32:e1:
5a:17:1b:82:62:cb:4b:10:85:71:5b:98:da:f8:07:
bc:c9:23:39:aa:43:f1:0d:9f:1e:3a:76:7c:d0:f9:
dc:62:6a:14:28:a2:56:6a:04:1f:60:c2:ca:13:38:
09:98:6e:a1:4d:b6:dc:66:11:35:ba:c1:e4:7a:97:
03:64:70:08:9c:33:b4:7a:f5:a1:a1:cf:9e:14:3a:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:D9:26:A1:97:38:D0:85:77:1B:EA:BB:D8:6B:72:15:E5:DA:CC
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/ZQPZJqGXONCFdxvqu9hrchXl2sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:2a:c7:5f:99:37:7d:25:9d:d6:22:24:71:81:65:ee:3e:e7:
a7:f2:ea:bd:f8:98:c8:46:34:3b:68:a7:d3:3a:56:e1:7d:bf:
1f:ae:8f:a0:b2:15:1a:13:ac:44:c6:a1:02:9b:05:97:c9:6b:
39:9b:5c:a0:27:d2:8b:c9:4b:35:ad:fc:65:d8:1d:9f:58:e6:
97:60:65:fd:aa:f4:0d:8f:18:c8:d5:f4:50:bd:5f:d4:aa:8e:
fd:09:03:85:d4:2f:d4:d0:fa:a5:c5:8a:be:45:d2:7b:5a:fd:
83:9c:db:d1:65:3d:67:72:22:ae:66:8f:23:c8:fc:c5:c4:cc:
c6:e8:38:46:17:c2:dd:69:87:26:50:c8:89:2a:5b:ca:7c:da:
1d:5c:dd:66:8c:47:37:7a:ec:8f:f2:8f:67:a1:8a:c9:1d:92:
b8:7e:23:16:50:2d:5c:7a:17:a0:04:de:af:5d:0d:e5:e5:f1:
32:d5:ee:5b:d8:90:22:2c:e4:7c:d6:db:12:f6:a8:7c:c6:63:
31:e2:02:a7:1c:80:17:60:e4:69:68:e0:c1:61:3a:9d:1b:e6:
ae:08:29:26:e2:02:43:73:dc:ff:fa:ba:21:0f:7d:0e:82:27:
b8:b4:2f:4b:92:f4:36:12:27:3d:17:7f:d6:13:4b:12:7e:eb:
23:20:49:89
-----BEGIN CERTIFICATE-----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Generated at Sun Jul 30 18:21:18 2023 by rpki-client on console-ams.rpki-client.org