Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/0ZODaqlGfYD0D6-TTnmKSKJBi0I.roa
File: 0ZODaqlGfYD0D6-TTnmKSKJBi0I.roa (raw, json)
Hash identifier: 03rtPPoy6uOQ4V1g2uhfFUcEszav6TWhJ1fwBcXNDh8=
Subject key identifier: D1:93:83:6A:A9:46:7D:80:F4:0F:AF:93:4E:79:8A:48:A2:41:8B:42
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0190449A35855E0F044A5FDBF7EFD204669B
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/0ZODaqlGfYD0D6-TTnmKSKJBi0I.roa
Signing time: Sun 23 Jun 2024 10:17:55 +0000
ROA not before: Sun 23 Jun 2024 10:17:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152700
IP address blocks: 45.149.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 11:38:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:44:9a:35:85:5e:0f:04:4a:5f:db:f7:ef:d2:04:66:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jun 23 10:17:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d193836aa9467d80f40faf934e798a48a2418b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:4f:b5:6c:f3:aa:96:81:74:47:f5:7f:d9:73:
a6:51:32:c2:ac:6a:87:ae:38:dc:2e:e4:f0:ac:70:
48:d9:3a:d1:3c:2b:f1:b4:d2:ad:77:bb:d4:6a:4c:
88:7a:5d:0a:67:ba:79:af:2d:7c:d7:31:9f:b3:3b:
cd:f0:b2:6e:8b:9a:99:06:77:41:e7:ac:b6:57:07:
4c:6c:c3:3b:4b:d6:d8:b8:d8:eb:bd:91:fe:66:f8:
a6:06:2c:21:7f:a8:b2:94:67:10:4b:b3:12:22:46:
a0:e1:07:6b:88:ea:d5:d9:c3:6e:f0:47:9c:b6:4e:
30:ba:c0:c7:e7:69:14:7b:c2:1e:52:ed:38:39:2d:
2a:3f:80:b3:ee:73:6d:7b:62:16:0e:b0:1e:dd:71:
57:be:93:56:8f:ee:d1:07:15:c9:33:f7:86:26:d9:
8f:9d:d6:0c:29:e6:bf:f8:67:79:68:8d:dc:d9:6f:
7a:dd:19:ab:25:94:c9:0f:ad:2c:bd:0e:6f:ec:01:
56:5b:41:94:a0:57:49:2d:20:38:c4:9a:39:44:42:
68:3b:d9:9b:bc:8c:25:29:9d:12:04:e2:21:f6:e5:
3d:10:e4:9b:ce:a7:e0:d7:45:d4:2f:10:68:d2:6d:
65:b7:32:0d:1b:46:d5:85:d3:03:34:78:c3:a4:da:
cf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:93:83:6A:A9:46:7D:80:F4:0F:AF:93:4E:79:8A:48:A2:41:8B:42
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/0ZODaqlGfYD0D6-TTnmKSKJBi0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/24
Signature Algorithm: sha256WithRSAEncryption
18:c2:cd:af:4c:ba:ae:b9:72:94:49:00:52:d0:93:e2:3d:29:
ec:ac:81:0f:10:a8:8b:02:0b:5a:88:3d:34:50:8a:2d:97:9f:
b1:55:12:49:06:03:2e:94:af:b4:5c:05:85:47:ef:77:5b:67:
38:d5:1c:61:3b:65:a1:7b:bb:8b:5c:04:fb:3b:e7:d9:f0:ef:
dd:ef:83:00:eb:22:23:ec:ff:93:b5:35:7b:41:82:3d:0b:eb:
cc:3b:7c:f7:0d:1a:ab:4f:52:c4:82:41:4d:5a:b6:f2:4e:55:
46:a2:c1:07:75:44:0f:06:38:a4:3c:35:0d:30:bd:db:23:63:
c4:f6:39:03:bd:d4:82:31:4b:e8:74:9c:2f:f4:f8:98:df:4d:
c5:0d:79:80:14:61:c7:88:a6:21:47:77:14:47:78:cd:cd:c8:
dc:fe:46:74:ee:9c:9a:d6:f9:5e:f5:5f:00:c3:0b:d3:35:4d:
0c:7c:9d:6a:52:9b:1e:4a:af:a0:ae:0f:62:2c:eb:47:69:09:
80:f7:8a:40:ae:ff:c7:52:4e:67:e6:cf:8f:f7:27:62:f3:cf:
87:d1:68:24:00:2b:95:e2:ac:9c:c7:33:9e:73:3c:29:fe:a2:
99:50:b8:dd:fd:d8:e8:0f:96:5f:f3:ae:f8:3f:f6:e1:ca:6e:
ae:ae:d6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 15:20:48 2024 by rpki-client on console-fra.rpki-client.org