Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/ZvTW8A8YBadiZguFtdRJcpS3JhY.roa
File: ZvTW8A8YBadiZguFtdRJcpS3JhY.roa (raw, json)
Hash identifier: hPKiXnOD1kq3tDVzz+LG0K6hPQnjv+01d73T5osFNDI=
Subject key identifier: 66:F4:D6:F0:0F:18:05:A7:62:66:0B:85:B5:D4:49:72:94:B7:26:16
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 01856F0233FBAA45C1C60DE6570C373A037C
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/ZvTW8A8YBadiZguFtdRJcpS3JhY.roa
Signing time: Sun 01 Jan 2023 20:24:53 +0000
ROA not before: Sun 01 Jan 2023 20:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 45.149.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 10 Jun 2023 21:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:33:fb:aa:45:c1:c6:0d:e6:57:0c:37:3a:03:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jan 1 20:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=66f4d6f00f1805a762660b85b5d4497294b72616
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6d:08:ff:d2:a7:9e:ad:bf:6b:77:5c:00:1a:
5a:50:83:1d:eb:fd:fb:5b:06:5f:4b:d9:10:5a:53:
cc:0c:de:21:27:4c:8d:7c:29:80:e4:5f:1a:5f:f7:
3f:d7:36:84:31:ec:9f:0a:f8:9e:dd:d5:1f:59:58:
71:5c:83:bf:ee:d1:ad:40:08:10:e4:57:99:5e:e2:
b2:77:34:ee:bc:f9:1f:3c:99:6e:66:61:71:f5:15:
8e:22:c3:d6:fa:77:fe:1c:1d:55:bc:fc:16:78:7e:
68:e5:09:ae:eb:e1:64:4e:15:9e:1b:f4:76:b1:22:
2e:39:c7:59:1a:ca:6a:7a:62:53:3b:c2:91:9b:a4:
a6:c7:aa:80:50:16:4e:09:6a:d9:e2:22:12:c0:95:
e7:e9:13:23:3f:e0:e2:2d:68:de:83:61:cf:e8:45:
b7:85:19:b3:a2:55:60:0d:bb:08:70:51:23:30:b7:
23:bc:1b:1d:a6:a3:95:b1:65:7d:21:48:3c:dd:1d:
97:e7:a6:de:63:3f:4f:ac:20:ae:bd:46:e2:07:ab:
14:a9:79:85:72:fa:d5:95:ed:2e:07:5c:fb:d0:03:
e5:a0:12:40:8a:15:1e:ec:be:d5:47:7a:1c:cc:6f:
ae:1c:43:02:0a:f5:90:ce:b8:e7:42:93:f6:14:05:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F4:D6:F0:0F:18:05:A7:62:66:0B:85:B5:D4:49:72:94:B7:26:16
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/ZvTW8A8YBadiZguFtdRJcpS3JhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.153.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:56:f4:4f:ff:9c:a6:d4:26:ff:bc:c5:6d:b4:ef:b9:d6:b7:
3c:e5:71:7d:9c:96:bf:7e:d2:ac:d8:f5:85:02:01:9c:68:4d:
52:80:4f:6a:de:27:7c:49:ba:bf:33:3e:ed:e6:82:ab:ba:6a:
cd:3b:28:8a:6d:9e:79:9b:77:fc:60:9c:02:64:11:d9:0d:71:
1a:fd:65:8f:13:36:17:2f:62:2f:53:2d:db:3c:e0:07:2c:e8:
d7:70:54:c9:89:37:a3:6c:e3:c3:9b:9b:4c:14:30:d3:d6:08:
2b:9d:6e:2d:91:c8:0a:de:22:af:18:36:65:aa:85:62:e1:89:
d7:9d:b7:f0:6d:ea:67:49:24:d0:0d:f6:73:df:ca:8b:50:41:
53:ab:50:d0:64:f4:19:2a:b0:57:65:eb:8a:59:cb:0b:cb:fd:
6e:b3:d7:9c:bc:3b:89:6a:33:45:f3:80:db:2e:07:44:13:31:
07:08:e9:3d:bb:97:10:64:04:44:ab:7e:e1:90:e0:05:53:42:
f0:5e:9a:75:ed:d7:47:7c:4a:7e:70:5e:a3:7b:2f:a3:a1:c0:
3d:14:c1:a7:09:e0:2c:ab:77:2a:09:7e:3b:5e:3f:a2:3f:5a:
04:9a:c3:93:49:b3:a6:af:25:9e:57:9f:b5:c0:ec:c0:10:64:
a6:99:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:41 2024 by rpki-client on console-ams.rpki-client.org