Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/RzcCaocoBucelx_ljS-9o06J-XM.roa
File: RzcCaocoBucelx_ljS-9o06J-XM.roa (raw, json)
Hash identifier: gKc7F5G1JAQgVHw0N11hSxXOtBt5uaH/EYBeNj37bT4=
Subject key identifier: 47:37:02:6A:87:28:06:E7:1E:97:1F:E5:8D:2F:BD:A3:4E:89:F9:73
Certificate issuer: /CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Certificate serial: 01856D661991C0CCAC5BFE6DBB666970FF61
Authority key identifier: 53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/RzcCaocoBucelx_ljS-9o06J-XM.roa
Signing time: Sun 01 Jan 2023 12:54:45 +0000
ROA not before: Sun 01 Jan 2023 12:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50575
IP address blocks: 45.147.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:19:91:c0:cc:ac:5b:fe:6d:bb:66:69:70:ff:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b1a8ebc3ecf7f5db7f6cacd00e920af85ae8b4
Validity
Not Before: Jan 1 12:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4737026a872806e71e971fe58d2fbda34e89f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:fc:ac:29:3b:b8:79:e9:be:7b:ae:c3:4e:
7b:63:1a:e0:5c:cb:a0:2a:0a:7d:bf:6b:a4:c5:dd:
56:0d:48:8f:e0:4d:3b:18:11:c2:2d:b1:84:87:be:
d7:38:ce:0d:57:1b:38:09:61:29:c5:4e:72:d8:0c:
b1:03:48:28:29:76:bb:29:d0:1e:3f:96:1c:4d:61:
7d:42:d7:75:d5:53:28:d4:88:94:d2:6c:54:5c:fc:
eb:f6:1e:9b:44:dc:3d:6b:ca:e8:0d:96:15:c3:a2:
6e:47:de:f8:4b:12:ea:9c:d8:04:fb:e2:4e:bd:2c:
32:07:66:0d:13:ab:f3:8f:c8:24:0d:24:00:f6:25:
13:86:04:3d:5a:62:d4:04:56:e3:d5:c2:d8:8a:3f:
bb:f4:cf:8d:d4:08:be:8d:56:9e:51:5a:66:b6:bd:
3b:91:66:fe:d3:98:dd:ec:da:d7:df:4b:62:bc:78:
0f:94:a9:08:bc:95:1a:5d:df:51:93:50:20:18:22:
cf:0b:06:2b:2a:50:4d:92:03:66:06:62:f7:92:a6:
18:a1:d4:72:20:76:42:7b:0a:2e:4b:2a:24:19:63:
12:f9:6e:a0:91:e5:ac:ef:dc:a8:29:d0:1d:43:2a:
6d:9c:d9:29:b7:7a:86:6e:0a:79:bd:98:20:c1:2f:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:37:02:6A:87:28:06:E7:1E:97:1F:E5:8D:2F:BD:A3:4E:89:F9:73
X509v3 Authority Key Identifier:
keyid:53:B1:A8:EB:C3:EC:F7:F5:DB:7F:6C:AC:D0:0E:92:0A:F8:5A:E8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/RzcCaocoBucelx_ljS-9o06J-XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/070630-5234-49c4-84fe-15bda6b867cb/1/U7Go68Ps9_Xbf2ys0A6SCvha6LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.220.0/22
Signature Algorithm: sha256WithRSAEncryption
d5:fa:b7:41:da:28:5a:00:95:b8:ff:48:aa:df:f4:b3:9c:1a:
16:a9:38:37:35:91:41:df:3b:1d:de:52:dc:65:df:bc:aa:c6:
c0:01:39:66:af:4e:c6:0d:32:46:a0:a0:7d:ca:2b:51:68:91:
bd:ae:06:34:16:ec:11:64:c6:40:6d:3d:b3:c0:32:0c:77:f3:
a6:46:43:a8:96:00:42:8a:c7:30:81:c4:90:9f:bd:42:e6:0c:
c4:af:e6:76:5e:40:ce:c0:c7:11:2f:f3:41:b2:f1:70:0f:02:
a2:06:5c:57:2c:73:07:d8:19:7a:ac:17:b9:32:a7:8d:60:0d:
11:7c:4d:e7:17:18:48:00:36:11:53:68:fe:5d:b2:82:b2:ce:
ed:12:bf:70:16:1e:48:ee:23:d6:a8:2a:1a:a3:76:dc:64:30:
3d:54:fc:6d:af:54:da:50:cc:0b:dd:f0:2a:c3:71:1c:04:d3:
83:40:a4:5e:a5:4d:f7:83:80:bf:8e:10:c9:1e:b5:3d:36:f1:
20:f1:81:42:b4:22:a4:5f:15:c6:48:27:91:53:eb:9b:d5:e2:
91:fa:42:18:89:be:22:51:1e:eb:31:b0:2b:d5:c5:58:9d:f9:
ec:fd:a4:ac:2d:6f:f0:40:4d:70:83:51:93:17:de:5f:51:e3:
2b:32:bd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:39 2024 by rpki-client on console-fra.rpki-client.org