Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZJnccy3gsrQc1aiD9lqKBX2ktt0.roa
File: ZJnccy3gsrQc1aiD9lqKBX2ktt0.roa (raw, json)
Hash identifier: eonCHNepDYx/fS7PKluDo1zW8vT8Fk4EtD9V9P6aaT8=
Subject key identifier: 64:99:DC:73:2D:E0:B2:B4:1C:D5:A8:83:F6:5A:8A:05:7D:A4:B6:DD
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003FC9F90330867FFCE60E31F42628
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZJnccy3gsrQc1aiD9lqKBX2ktt0.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.249.0/24 maxlen: 24
45.66.248.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 07:47:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3f:c9:f9:03:30:86:7f:fc:e6:0e:31:f4:26:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6499dc732de0b2b41cd5a883f65a8a057da4b6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:07:c5:74:9c:d2:0a:ff:ab:65:a6:c8:c3:29:
e0:cb:63:3f:ad:f1:8c:2f:2e:01:e7:ea:38:13:4b:
3d:96:9f:1a:7b:1c:f9:b2:75:0a:95:c6:05:9c:c3:
94:ec:03:a9:2c:75:a2:ae:48:e6:52:53:32:bb:fb:
ae:7a:3d:fe:9c:02:02:77:24:a9:f1:44:cd:7b:4e:
ff:a3:ab:e6:1f:d5:25:63:73:74:1a:f1:1f:28:d0:
f6:b3:12:d8:ba:f5:77:c9:63:a6:64:10:45:ba:49:
e1:17:b4:ba:50:13:b7:a3:a3:19:cd:f9:25:78:a4:
34:c0:3d:98:83:e2:c0:d2:af:f3:4e:54:b2:1d:5d:
ea:9c:b1:1b:69:1a:cd:70:8d:e5:71:10:a1:cd:a6:
70:35:44:0e:42:b4:59:5e:26:d1:32:29:30:2d:7d:
99:78:39:3b:a2:a3:ff:17:f7:17:e7:9b:e2:b5:cf:
52:12:2f:32:ae:31:40:f0:6e:a5:49:00:ae:93:e8:
6e:8c:36:45:f9:09:79:ce:89:72:ce:38:40:56:83:
9c:e7:6a:4a:3a:ea:d9:5b:ba:f0:93:79:76:84:11:
49:02:15:cb:05:39:89:d6:ac:df:cf:e6:33:4e:df:
5f:46:6d:2c:3a:61:71:fc:4f:2a:fd:c0:3f:48:f7:
b2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:99:DC:73:2D:E0:B2:B4:1C:D5:A8:83:F6:5A:8A:05:7D:A4:B6:DD
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/ZJnccy3gsrQc1aiD9lqKBX2ktt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
Signature Algorithm: sha256WithRSAEncryption
3e:76:6e:f8:a6:ad:ff:8d:53:8c:d6:aa:90:67:7a:54:35:b7:
82:86:09:11:56:86:7c:85:35:99:34:6d:22:ba:6e:30:ea:c4:
78:68:60:41:e7:ec:58:32:1c:f1:49:95:00:df:a4:d8:aa:57:
fa:53:b5:c5:86:2e:c8:52:a1:74:89:10:3e:41:57:f1:fb:7d:
40:d4:ee:ef:4e:41:02:43:5c:29:53:4e:0b:2a:e2:9f:41:d5:
db:91:bf:60:d3:ae:a5:6f:74:34:bd:1c:d4:49:86:bc:ec:3f:
c2:56:43:1b:aa:8c:26:d8:5b:e8:c8:b8:69:2c:ab:04:f5:b5:
22:16:6a:0a:4e:97:a0:74:0a:58:93:9b:64:ac:1b:a9:fe:3e:
a8:ab:85:be:7f:ca:7a:da:db:d5:06:e5:bb:71:97:85:89:b9:
bd:6d:1a:ca:36:ae:bb:f1:f8:50:a5:64:90:2a:72:45:2f:6c:
a0:ad:63:62:62:3c:d2:5c:55:62:9b:d7:70:99:63:ee:1e:ea:
50:58:42:91:17:2b:16:e9:f7:30:9f:48:ff:3b:9a:47:7b:8f:
27:b4:04:95:b5:e6:43:a7:46:f5:8b:86:60:6e:91:47:9b:b4:
74:0c:67:eb:1d:d6:1e:d2:07:e5:da:b6:6d:44:fa:26:26:fd:
72:f2:a8:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org