Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/wTZtj9ZmjjpP69FgVN0JllBHyf8.roa
File: wTZtj9ZmjjpP69FgVN0JllBHyf8.roa (raw, json)
Hash identifier: aZJ5AnekyEWAdl55gqgq2QmywGQu+fCSsCRnVQZti+Y=
Subject key identifier: C1:36:6D:8F:D6:66:8E:3A:4F:EB:D1:60:54:DD:09:96:50:47:C9:FF
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 018630769106612CB1C364C8EB7D7B245533
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/wTZtj9ZmjjpP69FgVN0JllBHyf8.roa
Signing time: Wed 08 Feb 2023 09:58:42 +0000
ROA not before: Wed 08 Feb 2023 09:58:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396982
IP address blocks: 45.66.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:30:76:91:06:61:2c:b1:c3:64:c8:eb:7d:7b:24:55:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Feb 8 09:58:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1366d8fd6668e3a4febd16054dd09965047c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:68:9a:69:38:eb:a6:ff:cb:18:c0:00:33:
ef:ff:4c:f3:38:e3:ba:0d:e1:8c:42:7f:c9:fc:45:
f9:39:88:1e:01:ed:9b:e2:9d:a9:23:b1:84:58:c1:
82:6c:34:eb:4b:70:92:7d:b0:8a:52:d7:33:9f:ad:
97:c1:b6:53:2e:5a:98:9c:b2:c3:ee:a2:13:91:0d:
10:42:c0:45:4d:b2:9b:31:6b:aa:5f:29:28:68:1a:
d8:e0:9b:b2:59:4f:51:fa:2d:cf:d1:a9:30:28:12:
ad:4a:50:c5:ce:d4:1f:90:de:bc:c1:ce:aa:0f:93:
72:5b:ed:b5:4e:c0:79:8b:ad:93:4a:77:14:16:e0:
7d:76:7e:96:f5:9e:9d:48:33:b7:01:dc:b5:2e:6b:
30:61:cd:60:a8:2f:fd:c6:84:08:c9:12:6d:de:b0:
78:2b:4f:84:b2:56:bb:a8:0a:94:08:62:35:b0:c5:
7a:d4:7d:75:25:c7:d7:7a:b4:d0:32:18:0f:2e:b0:
74:60:7b:2e:56:f7:2c:ee:4d:75:40:be:c4:66:27:
20:57:a2:e1:7b:db:32:3e:55:27:18:25:48:3f:c2:
38:b0:af:c0:ac:55:3f:1b:62:ca:dc:86:23:b8:9d:
ba:b9:9f:2f:05:f1:b4:9d:ee:05:77:b6:f8:59:de:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:36:6D:8F:D6:66:8E:3A:4F:EB:D1:60:54:DD:09:96:50:47:C9:FF
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/wTZtj9ZmjjpP69FgVN0JllBHyf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.81.0/24
Signature Algorithm: sha256WithRSAEncryption
19:f6:96:2a:90:41:e7:62:0f:3d:bc:9a:cc:54:0d:21:53:f5:
76:f5:29:f3:9b:00:c3:6d:e2:a6:04:e6:a9:f5:2e:07:7a:2f:
85:b5:71:e1:19:b5:41:12:9f:bb:cb:dd:a4:04:41:c9:32:77:
1f:e3:6f:88:83:d0:af:6c:c2:08:2c:03:2b:40:46:df:20:e4:
65:71:79:60:97:e6:56:0b:f3:35:60:00:7f:64:18:67:a8:3d:
db:75:9c:ce:81:7b:3e:e6:ea:51:eb:69:e2:59:5f:5f:ec:d9:
65:36:68:2d:fb:48:1c:41:69:70:9f:d5:4f:a1:8b:7e:a2:45:
51:59:ff:ef:89:16:14:37:46:a6:07:cc:da:9c:5b:57:08:d9:
2e:c8:08:56:85:3a:b7:b4:cb:6d:4e:7f:9c:7f:2e:68:b1:80:
9b:eb:ef:23:a2:1b:07:68:e1:40:d8:02:f7:30:d9:2e:dc:9a:
76:65:43:4d:ad:81:79:ed:b0:94:4e:e3:e0:a6:65:a4:ec:24:
dc:48:68:32:2f:b0:1b:18:cf:99:ab:3a:85:11:d2:33:89:40:
24:7e:05:8d:5e:53:71:d0:8c:17:32:e0:07:00:0e:b2:be:57:
4c:ee:2d:75:50:58:33:4b:d4:ef:bd:a8:1c:0a:83:62:18:28:
dd:11:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:48 2024 by rpki-client on console-fra.rpki-client.org