Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zUI5e71Bt17og1zjJbeTpth6CyU.roa
File: zUI5e71Bt17og1zjJbeTpth6CyU.roa (raw, json)
Hash identifier: 5k8jpdTyYsk4N+qiUyNG0HWcqicpjZlDxnpfI/TyLDI=
Subject key identifier: CD:42:39:7B:BD:41:B7:5E:E8:83:5C:E3:25:B7:93:A6:D8:7A:0B:25
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C54034AAFA64BDEB6A39AF49960ADFA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zUI5e71Bt17og1zjJbeTpth6CyU.roa
Signing time: Sun 01 Jan 2023 07:55:23 +0000
ROA not before: Sun 01 Jan 2023 07:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 45.132.15.0/24 maxlen: 24
92.119.149.0/24 maxlen: 32
2a06:7a02::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:03:4a:af:a6:4b:de:b6:a3:9a:f4:99:60:ad:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd42397bbd41b75ee8835ce325b793a6d87a0b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:60:9a:c4:fd:30:f1:46:1e:18:0e:8b:5f:de:
c5:28:75:84:0a:b4:f0:76:98:3b:90:71:c8:a2:c4:
33:07:3a:4c:f1:3b:64:e1:f2:e4:66:09:c9:85:a5:
3b:16:f5:39:42:5b:53:d0:66:58:7e:58:88:0e:18:
e7:5b:20:87:f7:07:c3:2e:0a:fa:a7:08:79:83:74:
57:70:5e:cd:16:45:62:ee:3a:e2:af:4a:99:9b:61:
e7:a3:c2:ea:8a:1f:cb:3d:3b:88:ba:5b:fa:cd:97:
30:23:af:ac:01:dc:12:c9:8b:a3:3e:04:25:51:2b:
73:b6:34:ea:8c:00:3c:8d:92:37:d1:55:0f:4c:e4:
76:bb:55:ee:3b:78:83:44:17:b0:03:e7:f5:32:6b:
95:cc:df:c6:86:c8:fb:64:c3:f3:99:98:d9:d3:2f:
f6:58:b3:b3:7e:b4:71:67:21:2e:80:51:8a:9a:f4:
18:8c:fe:ee:a8:5b:5e:5f:80:73:6b:36:3a:1d:cd:
a3:1c:f2:6a:7e:d9:78:3f:cd:82:cf:5e:8c:10:71:
29:0f:96:3c:c9:e8:9e:44:ed:23:a8:93:57:3d:8f:
24:d7:dc:4d:9d:7c:42:ea:d3:36:2f:ed:96:9d:88:
91:f0:a0:97:6a:5b:e4:e7:7f:17:8f:15:4a:a0:e1:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:42:39:7B:BD:41:B7:5E:E8:83:5C:E3:25:B7:93:A6:D8:7A:0B:25
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/zUI5e71Bt17og1zjJbeTpth6CyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
92.119.149.0/24
IPv6:
2a06:7a02::/48
Signature Algorithm: sha256WithRSAEncryption
ac:b0:07:cb:a9:57:dd:b4:e3:f9:b3:e3:15:b0:43:b1:5b:df:
31:04:bb:a4:08:ca:54:cf:fe:57:a6:78:9e:a1:b4:ed:2d:fd:
27:11:c7:95:ac:47:f4:ce:1d:42:60:88:83:f8:b3:1c:7d:43:
25:1e:22:ef:ab:91:cb:3f:04:5a:cd:54:8c:0e:e9:aa:e2:74:
dc:2b:31:a0:47:f5:aa:d9:dd:f5:3f:c6:0e:f1:1a:f1:4d:8d:
a8:a4:14:d8:a8:a7:9d:ce:b8:0c:16:7a:53:33:e2:fb:48:5b:
62:1d:de:12:6a:cf:19:d9:33:58:63:a1:fb:41:da:cf:bd:42:
42:b6:e0:20:95:ca:18:8e:d8:19:ea:87:c0:f0:94:b9:da:d5:
56:b4:5d:18:b1:ae:58:1f:ce:00:23:77:a4:2c:fa:ed:b4:52:
05:c9:9b:82:1b:0f:39:0c:21:c5:41:c4:1c:d7:30:ff:52:79:
16:1c:13:43:83:b8:61:20:38:fd:cf:4f:3d:32:6d:21:b6:be:
09:40:5d:dc:e2:ec:0e:ce:d5:11:69:45:d9:32:83:04:fa:cc:
c5:15:9b:2a:51:36:ab:70:5d:a9:8c:da:b1:80:27:c4:4e:70:
e1:76:15:a5:a5:37:7b:9b:5b:56:81:c9:bd:7f:ec:5f:db:f9:
a2:1e:04:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:01 2024 by rpki-client on console-ams.rpki-client.org