Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZtqxC1u5zR31u_u5laubwRJJEF0.roa
File: ZtqxC1u5zR31u_u5laubwRJJEF0.roa (raw, json)
Hash identifier: sZ1XojEl6P5LQnldtAbHvd341IPZ2GYGvSYPQ2hhjkk=
Subject key identifier: 66:DA:B1:0B:5B:B9:CD:1D:F5:BB:FB:B9:95:AB:9B:C1:12:49:10:5D
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0191B9A71EC9D09B9DC1925C43AC7472112C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZtqxC1u5zR31u_u5laubwRJJEF0.roa
Signing time: Tue 03 Sep 2024 20:50:23 +0000
ROA not before: Tue 03 Sep 2024 20:50:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214902
IP address blocks: 5.83.147.0/24 maxlen: 24
77.90.6.0/24 maxlen: 24
77.90.19.0/24 maxlen: 24
77.90.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 06 Nov 2024 14:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b9:a7:1e:c9:d0:9b:9d:c1:92:5c:43:ac:74:72:11:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 3 20:50:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66dab10b5bb9cd1df5bbfbb995ab9bc11249105d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:9c:b1:db:ec:5f:80:5a:ad:4a:a5:51:71:54:
27:42:5b:06:d0:13:31:86:d3:66:c1:d3:61:28:34:
ec:4d:f5:7b:3b:80:2d:59:fb:d7:25:d3:f5:9a:34:
37:48:e0:73:4a:4c:c4:a9:22:64:25:4e:d5:f8:0f:
05:ab:ab:13:8f:ab:1c:23:fc:60:95:4d:f2:9b:64:
fc:93:af:e9:6c:35:f7:c8:d8:5e:b5:2a:4a:b3:05:
ec:ae:47:88:d0:3c:08:d4:f1:f5:2d:28:c0:ce:16:
07:42:11:3d:b1:39:3d:46:b1:4f:a2:f8:ef:47:68:
c0:a3:61:68:67:2c:a7:2b:3f:c3:d8:19:b5:35:5b:
4f:dd:02:23:44:72:35:16:82:c9:03:55:8b:ea:1f:
e3:d0:80:b2:67:6a:82:19:a2:4e:42:63:c8:86:76:
94:3c:97:e5:63:96:35:30:2b:65:f3:fd:d6:e5:7c:
41:ec:23:45:06:ae:45:08:90:17:5f:a1:02:fa:71:
50:f0:d6:0c:f7:5f:22:cc:e0:8f:5c:87:e3:0a:c6:
b9:2c:f9:0c:a9:98:dd:38:a3:3d:44:33:9d:c7:5f:
4d:b4:95:2e:84:45:92:48:cd:a1:21:6d:e8:32:82:
2b:62:2a:ea:c2:6a:2c:a3:b7:22:2e:65:b7:ba:4b:
46:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:DA:B1:0B:5B:B9:CD:1D:F5:BB:FB:B9:95:AB:9B:C1:12:49:10:5D
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/ZtqxC1u5zR31u_u5laubwRJJEF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.147.0/24
77.90.6.0/24
77.90.19.0/24
77.90.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:9e:87:62:a4:f7:64:6c:0f:25:0f:c4:3a:ad:23:d3:d6:71:
6b:ca:ab:de:63:f0:14:d8:bd:c5:9b:53:71:da:63:e9:61:42:
39:34:2a:21:cf:01:ce:71:f6:b0:91:11:3b:10:44:96:cd:68:
fd:79:1d:34:4a:38:04:4e:f2:05:b1:8b:99:15:f7:05:c7:d0:
83:12:d3:d3:2b:44:5b:5d:15:97:ca:4e:3d:a9:0b:5a:ea:bc:
77:8f:5a:2c:89:6c:fc:08:bd:db:fb:29:65:2a:19:61:fd:0f:
a0:c1:64:49:15:89:8d:da:14:19:5a:86:07:1b:f5:ac:a4:59:
ad:e0:4d:e4:01:77:29:23:10:34:d4:a0:bf:6d:a8:df:08:c3:
64:38:e7:24:d3:c4:65:da:88:92:89:d7:2e:5e:20:c5:9c:b7:
aa:88:c2:6f:df:62:24:63:31:c2:4e:da:4d:80:3b:e0:51:c6:
5b:e0:10:6a:d8:9b:02:da:9d:3f:c0:4d:ac:d4:3f:78:9c:77:
3d:c2:96:1c:e0:be:40:36:14:0d:33:16:3a:9b:b4:c1:fb:d2:
56:b7:3c:ca:05:a8:1f:f2:a7:ba:40:6c:d0:97:66:0f:d1:80:
90:7d:ec:37:f1:07:fe:c0:79:61:c2:bd:3f:6d:9c:7d:9b:8d:
5c:a8:3e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org