Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/OpmZSCy_viT7hUog6ncBciCbEL8.roa
File: OpmZSCy_viT7hUog6ncBciCbEL8.roa (raw, json)
Hash identifier: uiGEA/JDUAvoDCO9bGHrbZsji9GGlMarvMv+w+JUyiQ=
Subject key identifier: 3A:99:99:48:2C:BF:BE:24:FB:85:4A:20:EA:77:01:72:20:9B:10:BF
Certificate issuer: /CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Certificate serial: 0185724C869B1EF6EDA99B325869C8BE0D73
Authority key identifier: 44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/OpmZSCy_viT7hUog6ncBciCbEL8.roa
Signing time: Mon 02 Jan 2023 11:44:55 +0000
ROA not before: Mon 02 Jan 2023 11:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43096
IP address blocks: 80.83.90.0/24 maxlen: 24
185.61.236.0/24 maxlen: 24
185.61.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:86:9b:1e:f6:ed:a9:9b:32:58:69:c8:be:0d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4432f61bbd3fd11d7facbb1543a751a65a3f64c3
Validity
Not Before: Jan 2 11:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a9999482cbfbe24fb854a20ea770172209b10bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:11:6e:97:c5:94:9a:e9:ac:d6:19:48:be:84:
90:6f:2f:6a:c0:b6:b2:78:62:6e:77:33:22:b6:a3:
d1:6d:77:1c:32:41:1b:e3:d2:eb:cc:e7:4c:7b:ce:
2b:4c:60:82:dd:92:ef:02:6a:bd:6a:13:85:f0:b6:
7b:a0:7f:7e:26:88:ec:0b:21:09:1b:d1:86:90:74:
6b:a2:e2:7f:9f:fa:03:c9:90:20:44:eb:68:5c:7c:
5e:a1:b6:20:6b:4d:8c:77:9e:36:05:0c:0a:e1:96:
f8:2b:e1:d6:47:68:8f:0d:25:97:cc:20:92:e9:e1:
17:c7:24:49:2e:ea:c9:c0:46:bc:3e:1e:15:bf:49:
38:5f:a4:1a:a9:43:62:2f:ec:bc:14:09:88:0b:7c:
6b:d7:df:08:4e:85:6f:11:cb:d2:f7:a1:9b:34:ce:
93:c7:66:8c:14:77:37:f7:49:fe:a4:0a:1a:9c:9d:
da:da:0b:f4:3a:36:49:51:91:17:fa:e4:c7:85:79:
c5:34:95:a5:6f:b0:00:2d:61:8b:b1:9a:25:34:da:
24:23:3e:bf:59:9c:34:25:53:73:94:32:4e:a1:ef:
23:e4:cd:eb:c7:16:85:75:9b:2e:9c:0b:65:0b:46:
4f:65:b7:a4:4b:a2:18:bc:5b:34:e3:cc:13:69:3e:
e8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:99:99:48:2C:BF:BE:24:FB:85:4A:20:EA:77:01:72:20:9B:10:BF
X509v3 Authority Key Identifier:
keyid:44:32:F6:1B:BD:3F:D1:1D:7F:AC:BB:15:43:A7:51:A6:5A:3F:64:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDL2G70_0R1_rLsVQ6dRplo_ZMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/OpmZSCy_viT7hUog6ncBciCbEL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/664eb1-f220-4804-8c5a-9278840c4970/1/RDL2G70_0R1_rLsVQ6dRplo_ZMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.83.90.0/24
185.61.236.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:cd:b0:db:4e:d3:f7:13:65:90:c5:cd:a7:58:70:3c:03:66:
6b:c4:95:f9:82:af:6a:2b:e2:78:92:63:0f:39:31:af:68:89:
56:fa:4d:3b:7a:61:7f:41:1a:cb:0f:5f:af:31:b6:60:df:d9:
23:c8:2d:90:54:3f:e2:fc:08:cc:f3:80:71:b9:2f:fe:ec:47:
e9:ae:bf:70:be:c0:5a:50:51:e5:43:14:29:5b:c3:f5:76:3f:
c7:f6:30:be:d6:c3:c9:ff:3a:0d:64:c3:a9:f2:41:b5:6e:ec:
f3:fc:09:6a:f9:68:f2:41:bf:15:4c:51:97:2d:c5:6c:bb:b9:
e8:4b:c4:76:6f:11:9f:35:49:a3:e7:8d:14:5c:43:2b:0b:6d:
46:73:89:98:a3:68:58:ae:9e:15:bd:f9:77:ee:ed:7e:4b:af:
a7:d1:c2:ee:b3:79:43:09:6e:42:1a:ce:7e:a0:41:08:cc:85:
2d:5b:aa:7f:a0:45:f9:51:f7:0f:ff:e4:48:e3:8b:11:96:17:
35:9a:8d:5e:5d:6a:a8:1c:6e:bc:47:e4:ea:34:c5:45:20:91:
79:df:40:31:ce:63:da:91:83:65:43:06:a7:ee:b2:d5:bf:c0:
ac:33:fe:52:ed:5d:13:51:71:57:13:e9:e7:80:2b:f9:e3:f1:
6a:b3:60:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org