Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/Z045ADADNWFf9wJid2b1abpeHYk.roa
File: Z045ADADNWFf9wJid2b1abpeHYk.roa (raw, json)
Hash identifier: i6+AxZgfp6TuxpRlc+Z1JFRiBXI9bzlucOaGHyjvs38=
Subject key identifier: 67:4E:39:00:30:03:35:61:5F:F7:02:62:77:66:F5:69:BA:5E:1D:89
Certificate issuer: /CN=545ab2a3712e2556a4434b8badd6c407a5673121
Certificate serial: 0185719564CEE24DF7C27D31BEF8FA62E008
Authority key identifier: 54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/Z045ADADNWFf9wJid2b1abpeHYk.roa
Signing time: Mon 02 Jan 2023 08:24:54 +0000
ROA not before: Mon 02 Jan 2023 08:24:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56727
IP address blocks: 178.237.48.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:64:ce:e2:4d:f7:c2:7d:31:be:f8:fa:62:e0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=545ab2a3712e2556a4434b8badd6c407a5673121
Validity
Not Before: Jan 2 08:24:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=674e3900300335615ff702627766f569ba5e1d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:8e:82:12:f4:b5:6e:44:d5:74:25:45:49:
b3:d6:b9:c5:f5:2f:f9:20:99:7e:61:cd:d6:66:8d:
fc:27:40:4a:c5:1e:8b:21:86:d3:77:7e:5f:23:9d:
c2:36:49:ed:bd:ab:18:e3:c9:0f:4b:54:43:18:a3:
c3:69:e7:78:55:73:6b:39:ed:9a:2c:59:e9:ad:f1:
aa:7e:98:33:a6:fc:70:b4:a2:62:b1:bf:7a:28:aa:
86:f7:c1:a9:e6:42:29:e8:a6:dc:a0:b8:96:b8:11:
7e:d2:9c:df:ef:0d:63:d2:72:2e:37:be:f5:f9:84:
34:4a:ec:21:8d:81:97:50:43:53:11:c1:cf:90:54:
56:10:c2:37:61:47:eb:75:f6:b9:9a:ed:96:31:73:
ea:a5:48:83:79:5e:ac:fa:45:3d:f6:64:66:ac:f7:
3e:ae:57:7a:e5:b6:46:8b:ec:8f:a0:bc:87:1a:60:
a6:0d:f5:2f:1e:3d:1f:37:3f:05:e4:39:c4:41:f8:
1e:78:7b:d0:d1:a1:46:c5:11:4f:5f:10:70:05:3f:
72:39:7d:0b:63:00:7f:29:d0:da:24:a7:9d:62:4e:
83:6b:1d:d8:bc:19:36:42:66:de:fc:5f:b3:0b:fd:
cd:c6:c2:19:9e:42:5d:8e:b4:bf:35:cc:3d:9e:b0:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4E:39:00:30:03:35:61:5F:F7:02:62:77:66:F5:69:BA:5E:1D:89
X509v3 Authority Key Identifier:
keyid:54:5A:B2:A3:71:2E:25:56:A4:43:4B:8B:AD:D6:C4:07:A5:67:31:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFqyo3EuJVakQ0uLrdbEB6VnMSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/Z045ADADNWFf9wJid2b1abpeHYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/d2e8d7-593f-4afb-b6b3-b9d8cfc19cec/1/VFqyo3EuJVakQ0uLrdbEB6VnMSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.237.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:27:77:81:1b:6d:a1:57:c6:25:0d:e5:f4:24:61:2e:af:e5:
5e:30:55:d6:38:c2:ac:b9:b3:da:94:7a:d9:47:bb:db:57:b3:
67:65:f7:e5:39:df:80:c1:46:9f:17:28:dd:79:d2:25:13:40:
8f:11:b7:e0:6a:da:7f:ac:0c:9f:23:ba:07:65:34:1f:2c:31:
d0:e0:ee:9b:e7:6e:5b:8f:a9:ca:fa:1a:94:1b:4a:dc:26:59:
21:49:ed:1d:a8:09:bd:64:6f:34:0a:00:cb:7a:71:68:2f:63:
9b:55:2b:49:3d:99:dc:c7:c5:4f:b5:64:30:a8:d0:06:a3:45:
f3:03:fa:a1:2c:dc:87:b5:20:f5:e0:f4:00:23:98:d3:61:a0:
12:ed:63:ab:ce:98:50:81:e0:46:cf:67:a6:d3:57:b7:d8:c1:
75:25:9d:62:d9:80:cc:8d:89:ed:bc:69:5d:d3:56:ab:41:c6:
c5:ab:ad:7c:d0:ff:10:4f:23:a9:ea:d7:95:33:f2:a0:c4:a9:
3e:db:ef:d2:29:e1:61:c0:fa:f2:47:2e:d0:17:0d:5c:b1:48:
59:99:ff:73:ad:11:98:d7:29:15:5b:ca:82:bf:b2:6d:51:e1:
dc:6a:c7:5f:06:64:e4:e9:6a:37:81:87:c6:3f:c8:dc:cd:19:
df:57:79:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:21 2024 by rpki-client on console-ams.rpki-client.org