Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Z95xa945z1e1qjy864heKrmviv4.roa
File: Z95xa945z1e1qjy864heKrmviv4.roa (raw, json)
Hash identifier: Dz2VTQ9vfc/Sq8MyM6MnU49CE0zdAtT6YboTt2b2ALU=
Subject key identifier: 67:DE:71:6B:DE:39:CF:57:B5:AA:3C:BC:EB:88:5E:2A:B9:AF:8A:FE
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 01883E8E121B79E0B384FAEC439DCEB0526F
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Z95xa945z1e1qjy864heKrmviv4.roa
Signing time: Sun 21 May 2023 13:44:38 +0000
ROA not before: Sun 21 May 2023 13:44:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 45.14.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Jun 2023 19:22:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:3e:8e:12:1b:79:e0:b3:84:fa:ec:43:9d:ce:b0:52:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: May 21 13:44:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67de716bde39cf57b5aa3cbceb885e2ab9af8afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:37:39:29:f2:0f:62:9a:78:e6:34:26:3f:
5c:37:f7:75:9c:71:89:7a:cc:ed:8f:a1:13:b9:76:
9b:13:4b:02:27:58:c8:12:85:70:34:b1:67:2d:c8:
e3:26:1b:48:7d:48:52:c6:d0:7c:36:c7:7d:cc:d2:
fa:58:77:e9:23:19:7b:96:9f:da:ad:0f:b9:6f:9f:
3f:38:5c:7b:10:5b:23:16:ef:58:94:c6:c3:7d:81:
12:8c:c6:4d:73:01:36:45:a0:c5:cc:b3:5a:57:94:
e6:cc:a9:c3:b1:5b:a3:02:2b:43:71:73:05:88:d4:
d4:48:cc:36:cb:d3:0f:3b:f5:d9:76:0a:f9:3d:bb:
8e:68:73:c9:13:c1:a9:31:d3:36:b0:d5:d9:c4:22:
53:6e:9b:1c:19:65:90:c6:5f:ae:6f:c4:7a:be:b3:
e0:d3:a5:24:51:db:ed:f6:91:53:83:4f:82:3c:3a:
e4:44:2b:f8:0f:23:77:2f:8e:ff:95:8b:c4:14:db:
a0:e9:37:fa:63:0a:f7:77:f7:65:1f:11:b4:93:47:
9e:13:78:7a:30:9a:f5:96:1f:33:a4:42:b9:90:1e:
b4:10:77:3b:61:3f:4c:09:5f:a2:ad:5f:89:a6:82:
78:d0:33:08:e8:51:0d:9f:7c:4f:be:7e:3d:87:3b:
2c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DE:71:6B:DE:39:CF:57:B5:AA:3C:BC:EB:88:5E:2A:B9:AF:8A:FE
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/Z95xa945z1e1qjy864heKrmviv4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.9.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:78:97:db:f8:e9:91:92:c4:eb:e3:8d:e8:fc:d5:7a:26:d7:
26:94:2d:06:fd:9e:16:9b:d7:b0:c4:8d:54:ef:69:d4:f3:80:
8f:2f:e1:60:5a:95:68:4d:15:47:8a:65:7d:ff:af:c2:2d:5a:
2e:c2:9e:24:7b:58:f6:4f:cf:69:b4:48:24:5d:6f:93:0b:a2:
73:71:6f:9b:8d:de:b3:26:6e:4a:2a:76:24:03:b0:c0:4a:4c:
d5:81:11:61:03:1e:c7:c0:64:fc:9d:2e:4c:8a:d7:20:18:cc:
77:51:61:b4:80:bb:28:9d:9a:5a:76:e8:cd:7a:e5:9f:86:37:
6e:bd:20:0e:70:0c:72:29:d8:0e:ba:5d:5c:86:a7:18:0a:86:
ef:50:7c:5d:e6:71:4f:1e:00:15:0e:7b:de:89:29:4d:fb:b3:
d7:e7:3c:bc:9e:87:41:21:0f:15:d2:13:71:27:7a:b7:2b:f6:
5d:75:7d:7c:5b:4b:00:67:88:7b:88:38:3c:f5:36:c4:9e:b2:
64:bf:68:30:12:e5:37:9b:c0:36:a1:91:2b:ec:ce:75:fd:d2:
9d:76:51:25:cf:3d:49:66:11:19:00:96:04:8d:4a:69:2a:c6:
85:cd:cf:b0:cc:c2:1e:23:02:e3:07:b4:be:77:d3:8d:c9:16:
cc:0e:54:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:56 2024 by rpki-client on console-ams.rpki-client.org