Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zvuti41vTKcG8reavxKf-kGFIbk.roa
File: Zvuti41vTKcG8reavxKf-kGFIbk.roa (raw, json)
Hash identifier: ZcmfUpWFCnu+eGkI1pcE0X+Hjt/aR405WnG33LzAXak=
Subject key identifier: 66:FB:AD:8B:8D:6F:4C:A7:06:F2:B7:9A:BF:12:9F:FA:41:85:21:B9
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018739423AB9A120C8E62EA072E5BE114077
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zvuti41vTKcG8reavxKf-kGFIbk.roa
Signing time: Fri 31 Mar 2023 20:00:54 +0000
ROA not before: Fri 31 Mar 2023 20:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48525
IP address blocks: 45.92.173.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:42:3a:b9:a1:20:c8:e6:2e:a0:72:e5:be:11:40:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 31 20:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66fbad8b8d6f4ca706f2b79abf129ffa418521b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:b4:a5:c5:d4:43:2a:fc:70:de:cb:5e:22:
cb:1b:97:4d:25:d2:2d:e2:83:02:48:18:0c:5e:19:
1f:87:e3:71:3e:ce:f6:2e:0a:d8:72:25:b2:8f:28:
91:9d:be:2f:52:67:12:5c:4b:91:4c:a7:c8:1a:47:
c2:b1:00:35:1e:e1:bf:7f:16:57:4e:b5:8f:94:fd:
fd:5b:53:36:4a:c3:06:37:64:b0:50:8d:15:0f:61:
bf:63:1a:6e:b7:24:72:6d:5e:6b:3d:b9:01:d3:3a:
fe:59:13:ac:d5:24:81:fa:26:41:1d:48:92:97:55:
27:6c:58:91:f4:d7:49:81:7e:d9:2f:9d:94:27:37:
ab:ed:2e:07:98:58:07:37:55:51:7a:46:1d:19:fa:
f7:c2:50:8a:0d:7d:f0:1c:e6:09:15:95:8d:1e:77:
1b:2d:67:ac:53:60:4c:4d:76:91:c6:08:65:98:9a:
6d:21:44:53:df:73:b1:74:87:f3:e0:1b:49:ad:c1:
3d:2b:00:50:15:ed:cc:81:1a:58:bc:a7:82:49:cc:
0a:e9:71:12:2a:38:f7:0b:9b:88:31:26:31:47:e8:
c0:da:62:f6:4a:49:fd:27:8d:5b:94:dd:3d:aa:c2:
63:62:b5:c2:c4:e2:6d:af:3c:39:b9:3b:65:27:16:
7f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:FB:AD:8B:8D:6F:4C:A7:06:F2:B7:9A:BF:12:9F:FA:41:85:21:B9
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/Zvuti41vTKcG8reavxKf-kGFIbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:ab:35:49:b2:a1:81:bc:df:17:96:53:53:22:80:ab:00:c9:
0e:dd:dc:f3:b2:99:7d:21:9d:e6:0c:dd:a5:5d:e1:48:01:e2:
c4:1f:87:42:26:98:4b:2d:c9:31:40:b7:d3:2f:60:6f:83:5f:
ba:fc:ff:96:b5:00:41:91:36:a5:03:3e:7e:54:72:ee:26:2b:
17:a9:48:11:ba:3c:a5:46:d5:85:35:e0:1f:dc:99:fa:71:e0:
8a:f4:64:d1:a6:35:37:09:c5:04:44:e9:ec:57:b9:0a:cd:73:
06:8b:fb:56:38:12:db:27:1b:a8:c7:16:7e:4a:7c:6e:58:47:
3d:18:88:0c:ce:02:69:3b:29:45:d7:9e:74:d1:51:ee:b7:7a:
39:af:a0:85:3e:ad:28:e9:5c:96:39:26:55:f4:b8:bc:24:1d:
9d:59:7c:57:cb:33:92:94:3b:29:70:38:5b:78:96:04:aa:ca:
4d:ed:2e:ba:46:23:77:a7:cf:b7:c6:5a:05:4f:b7:c9:4d:28:
34:65:d9:6a:4a:97:52:d2:46:09:2f:2b:3c:f9:4d:61:97:ca:
a6:36:a5:26:33:05:27:26:f7:ad:73:ed:86:9b:44:00:3e:e2:
cc:f7:1e:05:09:43:ad:bf:5c:b2:7e:13:2c:7c:81:8c:45:83:
a4:6f:a4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org