Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ZgNl82a3DIbJFHX6HYgdYf9Fn10.roa
File: ZgNl82a3DIbJFHX6HYgdYf9Fn10.roa (raw, json)
Hash identifier: z1HwQvl2AFK0LMj/xTTbvcBNNDxMTXn7U8mX4XiYnqo=
Subject key identifier: 66:03:65:F3:66:B7:0C:86:C9:14:75:FA:1D:88:1D:61:FF:45:9F:5D
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 018C5E264566CBBD68BEFEEA4E9AEE8A35AB
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ZgNl82a3DIbJFHX6HYgdYf9Fn10.roa
Signing time: Tue 12 Dec 2023 13:10:15 +0000
ROA not before: Tue 12 Dec 2023 13:10:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5089
IP address blocks: 217.77.24.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:26:45:66:cb:bd:68:be:fe:ea:4e:9a:ee:8a:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Dec 12 13:10:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=660365f366b70c86c91475fa1d881d61ff459f5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a3:80:87:9d:e2:20:4b:41:4f:c9:3d:46:9b:
c3:75:56:20:88:39:34:3a:8b:14:af:34:2d:3f:09:
ae:59:0e:1b:b3:14:fd:68:4e:ad:f7:1a:b1:c2:30:
81:ec:a7:41:99:61:de:4a:15:4e:5c:10:38:e4:cf:
1b:d5:9f:31:8b:06:c5:b5:7c:11:96:bc:a1:94:82:
35:fd:c1:cb:03:68:e3:98:fc:d9:e7:ce:c3:e4:91:
90:37:91:60:bb:ff:f9:ef:d0:a0:32:61:ed:37:17:
35:f5:92:b5:eb:17:0c:33:8e:44:29:1a:5c:81:ff:
43:01:cb:e9:39:35:ec:75:8a:9d:3f:29:38:77:33:
1d:fa:eb:83:0a:64:c0:e1:af:fa:bb:d8:c6:29:fa:
61:39:85:37:27:78:77:54:5c:19:23:2f:08:bf:4c:
cd:96:26:5e:8a:63:50:2d:02:1e:ca:40:e9:a2:fc:
d2:ba:f5:30:47:0b:99:84:95:81:24:80:43:94:fc:
09:3f:62:78:34:74:9e:29:05:ce:1c:76:bb:5a:57:
1e:8e:a2:93:22:45:8f:61:d6:ac:ff:be:5f:36:7a:
88:eb:fc:33:83:a3:6b:1c:bf:e7:6d:5c:c2:b7:27:
e2:8d:39:43:e4:bf:d5:e3:9a:85:0a:4c:01:13:c9:
a7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:03:65:F3:66:B7:0C:86:C9:14:75:FA:1D:88:1D:61:FF:45:9F:5D
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/ZgNl82a3DIbJFHX6HYgdYf9Fn10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.77.24.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:32:a2:3b:a3:6c:60:e3:9d:a6:b2:7e:0b:52:63:c2:fe:70:
a0:43:aa:5f:95:b0:c8:7b:10:1c:8e:7f:9f:9b:5b:56:5f:37:
36:ba:e3:96:b2:9c:f2:2d:86:db:dc:b1:41:00:35:db:45:98:
2e:2e:cc:55:b5:45:54:08:0a:1e:c7:fd:f7:9d:95:4e:a2:df:
f3:99:93:63:c0:b8:18:bc:3e:c2:f7:d5:2f:1a:8f:89:87:04:
c6:4e:a4:e4:6d:48:db:51:fe:19:3c:db:3f:9c:1d:3e:54:f3:
bf:61:70:f6:e2:a1:7a:f9:44:f9:9f:a5:a0:b5:e8:aa:5c:10:
18:1b:23:f9:a7:f5:93:45:e6:92:6c:c7:80:ab:c3:09:97:df:
e4:c5:76:08:66:aa:3f:6e:ab:4a:c0:59:1a:19:8c:2c:82:26:
34:d0:ce:f9:11:e2:c3:b0:a5:eb:68:36:b1:da:16:fc:c9:5d:
fd:88:55:d1:66:25:95:32:70:30:0e:74:f9:27:c6:42:26:98:
56:d5:2e:44:97:fc:f0:64:4f:7c:cb:c7:2c:51:b0:2e:48:b5:
a8:50:8f:c9:59:7e:0a:0f:14:3f:68:74:b5:ba:bb:01:d8:e5:
e3:f2:82:1a:88:8b:8f:7a:ba:6d:fc:39:b4:ae:d2:73:9e:99:
6d:4b:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:09 2024 by rpki-client on console-ams.rpki-client.org