Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/IDZUNTrRN2HF7FLCJDyYX74sHI0.roa
File: IDZUNTrRN2HF7FLCJDyYX74sHI0.roa (raw, json)
Hash identifier: VlvXhBMLjBDxLy3UCsOj9kmSVPDshqdSRqG1JitpsSs=
Subject key identifier: 20:36:54:35:3A:D1:37:61:C5:EC:52:C2:24:3C:98:5F:BE:2C:1C:8D
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 01856B6E9716DE817C4E309E1BA2814DC080
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/IDZUNTrRN2HF7FLCJDyYX74sHI0.roa
Signing time: Sun 01 Jan 2023 03:44:47 +0000
ROA not before: Sun 01 Jan 2023 03:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12843
IP address blocks: 195.66.74.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:97:16:de:81:7c:4e:30:9e:1b:a2:81:4d:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jan 1 03:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=203654353ad13761c5ec52c2243c985fbe2c1c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:b6:54:52:b6:75:ba:63:06:21:88:68:34:
e1:91:dd:99:61:41:de:42:7d:65:9e:c7:4a:dd:57:
c5:74:0e:d8:b6:62:ac:d6:ec:1d:d6:db:44:30:9b:
5c:3b:96:55:1f:78:55:29:21:11:2c:7b:3a:10:5c:
5f:9a:7d:8e:84:8a:72:71:28:f1:e6:6f:ea:d8:19:
66:78:65:21:e8:00:d2:86:cf:b1:f5:37:b7:1b:ef:
c4:5c:76:81:cf:e1:1f:40:a4:43:5a:4b:9e:b7:e0:
d8:b5:85:97:fc:eb:6b:c8:e5:8e:ce:cc:5d:eb:3c:
64:77:74:4a:57:14:04:8b:9c:b2:b6:55:04:51:43:
f1:64:b5:be:d4:83:b1:fc:d8:d3:13:3f:9b:af:25:
43:a2:b5:fb:51:22:21:9e:44:16:24:d4:5c:ec:fd:
c9:fe:ab:82:34:a7:6d:42:3a:36:2f:25:92:55:fb:
23:58:2e:67:1f:76:ab:02:72:46:99:57:73:9a:46:
58:c1:f9:aa:97:56:c3:d1:42:2c:a3:d4:b8:1c:09:
b9:f9:2c:d9:be:d6:c2:0b:fd:29:5a:a3:99:7b:51:
f4:72:ac:60:1c:d1:3a:27:26:41:76:40:70:bd:32:
47:3e:11:12:7b:6b:0d:55:4a:38:34:72:dd:80:93:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:36:54:35:3A:D1:37:61:C5:EC:52:C2:24:3C:98:5F:BE:2C:1C:8D
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/IDZUNTrRN2HF7FLCJDyYX74sHI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.74.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:7e:93:4c:ff:38:b6:6c:e8:d9:70:a9:a8:74:9d:ec:d0:5a:
9a:0f:60:38:eb:f4:25:77:f7:63:9a:f5:2c:80:15:d7:fc:2c:
51:7d:96:6c:2e:6f:89:d0:94:94:fc:a5:af:5d:f3:d5:46:29:
5b:f0:8b:ff:6d:d6:88:10:3d:c7:87:68:42:44:9f:0a:0b:ca:
db:33:63:9e:4d:c8:83:6b:db:14:c5:11:b9:11:66:e6:8f:d8:
8b:28:9b:8a:87:46:f0:f4:f6:e9:4a:9c:1b:f4:8b:70:47:ac:
8e:0d:12:f4:c5:ec:6d:c8:64:b4:e7:6b:7b:7e:a3:6b:ab:e1:
fd:af:77:c4:fa:34:e0:50:0f:ac:e9:9c:2c:5b:0a:87:34:9f:
61:14:0a:c7:9b:66:5d:ec:bf:63:a6:03:49:3c:eb:5e:5b:f1:
31:20:93:3c:09:84:a3:6d:5a:62:0d:d9:f7:2e:04:59:93:e6:
bb:3b:ee:54:b5:56:ac:cc:74:b4:49:6b:81:d5:bf:63:8c:86:
ca:b7:c4:0a:d7:62:71:b3:29:c3:90:ca:f2:b2:ef:24:6e:1f:
87:95:93:fc:62:c6:13:d0:ac:d1:8a:a9:ad:32:c3:8d:3a:21:
56:1f:a8:0c:f1:a5:74:d4:ae:ca:43:53:d6:ba:8c:35:0b:31:
c3:d7:a5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:12 2024 by rpki-client on console-fra.rpki-client.org