Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/zdz7y_juyMeCPaoWiCsiEH6ahNk.roa
File: zdz7y_juyMeCPaoWiCsiEH6ahNk.roa (raw, json)
Hash identifier: UbISiAmYbCNMpN6H8gGhWGbDNylTQ2LBsBSUF8h842M=
Subject key identifier: CD:DC:FB:CB:F8:EE:C8:C7:82:3D:AA:16:88:2B:22:10:7E:9A:84:D9
Certificate issuer: /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial: 018E2E6D664F1BE6AB90A2B828ECC3B86A0A
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/zdz7y_juyMeCPaoWiCsiEH6ahNk.roa
Signing time: Mon 11 Mar 2024 16:51:45 +0000
ROA not before: Mon 11 Mar 2024 16:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 80.74.240.0/21 maxlen: 24
80.74.248.0/21 maxlen: 24
85.95.96.0/19 maxlen: 24
92.42.120.0/21 maxlen: 24
95.129.64.0/21 maxlen: 24
195.26.32.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Mar 2024 09:07:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2e:6d:66:4f:1b:e6:ab:90:a2:b8:28:ec:c3:b8:6a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66df7742890173927935206a28efbf48123e787c
Validity
Not Before: Mar 11 16:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cddcfbcbf8eec8c7823daa16882b22107e9a84d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1d:8c:03:dd:51:89:6b:be:55:72:37:09:a7:
21:e1:f8:78:7c:f5:36:0d:13:17:19:b2:7d:cd:82:
f2:37:ac:bb:c4:96:13:a2:85:f3:46:a6:46:f7:18:
6e:22:10:d4:0f:d6:c4:b1:8a:9f:ab:39:53:7e:46:
4a:2b:6c:62:4c:26:07:8a:98:3c:dd:47:22:49:c1:
f0:c1:9d:2e:c2:e5:83:05:75:05:28:93:59:3e:02:
b9:7a:8b:2c:6a:4c:a9:be:04:53:0f:d8:04:aa:9b:
19:27:f6:f5:be:7a:85:ef:51:e7:fd:5f:ff:79:4c:
94:87:ef:03:3e:71:ea:7b:4e:58:06:0f:f7:9f:3d:
49:1b:d2:07:90:d8:68:56:e1:79:ba:b8:e0:6b:68:
35:47:fc:af:8b:01:7e:a3:61:0a:49:34:58:29:e4:
54:79:78:c4:8b:c0:be:5f:0e:e7:55:2a:b9:98:34:
af:db:34:d9:3c:09:ee:32:4a:ef:3d:4d:52:90:5c:
37:f1:f6:c3:21:a0:75:8f:69:4e:d0:68:2b:df:34:
85:5b:93:53:72:33:78:10:12:d3:a1:c4:ac:44:7d:
50:ae:98:ab:93:94:14:5a:a2:23:9d:9f:98:2b:84:
a0:42:c2:3b:51:46:03:96:75:41:37:b2:74:9a:74:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DC:FB:CB:F8:EE:C8:C7:82:3D:AA:16:88:2B:22:10:7E:9A:84:D9
X509v3 Authority Key Identifier:
keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/zdz7y_juyMeCPaoWiCsiEH6ahNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.74.240.0/20
85.95.96.0/19
92.42.120.0/21
95.129.64.0/21
195.26.32.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:13:2e:07:eb:94:21:be:59:a8:e0:e3:3b:97:26:74:aa:d2:
d7:4e:86:2d:73:60:c5:b9:6d:23:8f:3a:ef:c0:54:3a:f6:1e:
0e:43:2b:34:ed:a4:c4:29:b3:c9:71:89:01:d5:f5:56:2b:14:
b8:50:67:7a:e9:25:3b:3f:87:cb:90:58:30:bc:13:6a:5a:93:
41:d2:32:05:2f:de:d3:4d:8b:ce:65:b4:b3:89:e3:52:a5:57:
3d:9d:63:52:7a:a6:80:86:b1:25:8a:19:37:e3:e0:a7:43:72:
2a:d7:e2:a1:5c:63:3c:0c:d8:a0:18:f7:61:3c:9c:6e:97:88:
bc:bd:01:0a:b9:0d:1e:03:2f:33:45:1f:93:13:55:fa:fa:6f:
12:1a:4e:a4:38:de:f0:b3:d0:c9:1c:d3:ab:29:4c:3f:df:e8:
ef:0e:0c:01:03:0c:26:1b:69:a9:4d:bb:f7:9c:8e:eb:27:5b:
5b:49:0c:93:89:27:eb:30:79:c6:72:13:19:52:65:47:e7:b1:
86:e1:f5:a0:95:f5:b2:41:7e:da:38:58:a4:0a:ea:d7:5e:5c:
00:38:d8:8e:aa:bd:f3:1a:f0:32:4b:83:7b:27:12:60:df:b2:
32:bc:cc:05:c6:2d:0f:8a:2a:36:ff:69:b7:49:5b:4a:9d:ed:
cd:37:1d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:55 2024 by rpki-client on console-ams.rpki-client.org