Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/1_5Zz6sWeUTUeuSbRdkJPvYxg68.roa
File: 1_5Zz6sWeUTUeuSbRdkJPvYxg68.roa (raw, json)
Hash identifier: XrsHLj+slGWVM1ULAn+FS/Wulwc4lN5ZXmp/kqy9Txg=
Subject key identifier: D7:FE:59:CF:AB:16:79:44:D4:7A:E4:9B:45:D9:09:3E:F6:31:83:AF
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 0185704BC49C7A182E2F2FC6B971855FDFE0
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/1_5Zz6sWeUTUeuSbRdkJPvYxg68.roa
Signing time: Mon 02 Jan 2023 02:24:51 +0000
ROA not before: Mon 02 Jan 2023 02:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210413
IP address blocks: 45.157.52.0/24 maxlen: 24
45.157.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:c4:9c:7a:18:2e:2f:2f:c6:b9:71:85:5f:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Jan 2 02:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7fe59cfab167944d47ae49b45d9093ef63183af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:a9:7d:8e:ad:f1:26:ba:9a:b4:80:d8:2c:
3e:89:63:fc:3a:e7:9d:82:68:33:f2:1c:24:00:89:
08:b3:b6:65:38:87:15:2d:47:ce:9e:9a:12:0d:08:
30:e3:af:10:1a:42:2f:dd:8e:23:21:79:0d:c3:2b:
fc:af:cb:01:5b:30:ea:68:4e:49:19:de:10:a4:e9:
5e:76:1e:36:e8:c3:b8:5b:81:8a:17:15:14:5a:03:
30:18:c5:5d:f6:ba:53:b2:cb:4d:9d:5e:29:08:41:
3a:66:55:fa:1b:5e:e2:aa:37:af:1b:ba:b1:10:a8:
ad:3a:69:68:bb:54:94:a1:c7:d5:8e:23:49:2c:04:
ac:2e:26:31:f2:6a:75:ca:d9:77:a9:fb:3e:25:c8:
96:2c:e2:51:97:aa:c8:39:97:f1:ab:7c:07:76:dd:
98:f0:a5:1f:df:79:ee:93:56:4c:92:15:2f:68:24:
0b:06:94:f7:3c:67:16:35:25:8c:4b:7f:87:71:ac:
0d:47:a4:33:21:10:d5:60:0c:01:8f:00:96:0d:af:
4d:d9:89:5f:fc:b2:c9:56:30:7c:cd:ae:b8:66:ef:
63:47:27:57:2e:ca:75:90:a0:04:94:30:95:d7:3b:
20:e5:42:7b:31:42:75:61:6e:88:5b:08:1d:21:ee:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FE:59:CF:AB:16:79:44:D4:7A:E4:9B:45:D9:09:3E:F6:31:83:AF
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/1_5Zz6sWeUTUeuSbRdkJPvYxg68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.52.0/24
45.157.54.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:39:30:0e:06:f6:37:ee:96:72:2d:d7:bd:64:e5:46:9f:8a:
2d:36:b6:f7:52:b1:28:b3:7b:cf:3f:c0:b8:9f:29:53:20:a4:
5e:24:cc:90:a6:bc:16:df:65:f1:3c:67:87:b0:ab:bb:e6:cc:
74:d7:dd:c3:57:f1:3d:8c:18:30:c7:12:e9:ce:fc:b9:14:e0:
35:3a:8e:da:ed:f7:c0:16:ff:36:aa:0f:04:85:f2:a0:cb:f2:
36:e0:c6:1e:86:a3:07:dc:21:f9:31:99:23:bb:d1:5b:24:f0:
c1:c5:a6:fe:20:52:c7:8c:43:37:4d:22:19:8b:63:67:74:36:
61:ed:36:83:7c:81:41:fd:d6:b1:44:6a:1b:57:28:be:0a:7c:
a1:e2:fb:21:71:eb:94:10:93:3b:b5:7b:a9:cf:ab:4f:a9:e6:
52:fb:82:76:02:a4:c1:23:09:b2:85:01:8b:15:33:42:2a:14:
95:ed:c7:e3:c0:09:51:6c:a1:7a:8f:5e:ad:8c:3f:ab:67:81:
9b:4b:43:0d:d5:05:fe:b8:c4:50:58:02:f6:a7:af:5f:22:eb:
e8:f2:44:6e:a6:0e:8a:57:28:2e:aa:99:c1:02:6f:82:e1:18:
e6:07:41:44:43:da:97:8b:f4:cc:72:b8:05:a8:b1:27:db:36:
7d:88:53:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:42 2024 by rpki-client on console-ams.rpki-client.org