Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OqGUGw-BCy9OU_-bTe3ZWgXYHVo.roa
File: OqGUGw-BCy9OU_-bTe3ZWgXYHVo.roa (raw, json)
Hash identifier: kEyUkTeG2Vw/CuP/fHEa7zUkTW+Fp1Cft8p7IgmG7W8=
Subject key identifier: 3A:A1:94:1B:0F:81:0B:2F:4E:53:FF:9B:4D:ED:D9:5A:05:D8:1D:5A
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F57F504FE67C1BFB0AC685134BF61
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OqGUGw-BCy9OU_-bTe3ZWgXYHVo.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211849
IP address blocks: 80.66.77.0/24 maxlen: 24
80.66.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 26 Feb 2024 10:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:57:f5:04:fe:67:c1:bf:b0:ac:68:51:34:bf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3aa1941b0f810b2f4e53ff9b4dedd95a05d81d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:2c:63:a8:82:e7:f5:d2:98:a5:23:4c:66:
3c:cf:8e:36:e7:4d:f4:6b:40:27:1d:83:0f:f0:b5:
0f:3b:d8:ea:68:fe:4d:6f:f7:2f:ef:2c:fd:bc:3e:
b8:63:76:a0:c6:29:e0:ed:e0:2e:91:7f:6f:35:05:
b9:10:c9:98:4b:ea:28:ec:e7:70:fe:70:e9:9f:31:
d1:4d:7a:96:43:5c:35:26:9a:fa:4a:63:f5:2b:21:
71:61:f7:9d:55:1e:4c:2c:30:a0:29:28:18:d2:71:
25:fe:19:8e:d2:87:3e:40:bc:0c:2d:65:47:9c:40:
76:ef:84:15:12:be:57:3c:03:7d:94:08:42:0f:49:
fd:26:6b:09:59:c3:c4:eb:31:a4:95:82:e2:ca:11:
cc:a3:29:7c:d3:cd:50:a4:d9:07:3e:e3:13:2e:40:
f5:0b:d1:8c:30:78:a0:37:6c:e5:37:53:24:42:9f:
ac:c9:9e:82:37:6b:54:5a:d3:2c:2a:68:a9:12:3a:
74:a3:58:8c:d8:23:3f:e8:05:31:e7:e4:22:47:a5:
85:b2:8e:e5:21:46:36:82:f3:a5:90:12:12:fe:b6:
39:02:08:c0:e0:83:17:ba:c8:e8:2c:f9:9c:5e:95:
fc:e6:41:81:12:4a:19:79:e7:5e:7e:a0:ea:04:f2:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A1:94:1B:0F:81:0B:2F:4E:53:FF:9B:4D:ED:D9:5A:05:D8:1D:5A
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/OqGUGw-BCy9OU_-bTe3ZWgXYHVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
80.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:14:70:85:62:df:01:6f:36:85:db:74:aa:de:99:b9:4f:87:
eb:fc:cb:eb:ff:15:8d:bb:3c:85:49:19:24:21:d4:26:7e:f8:
09:94:8f:74:85:23:77:c7:c9:45:ae:e0:6f:77:a5:1d:a2:2a:
e5:ab:17:dd:10:de:6b:24:74:ee:cc:cf:67:b4:46:73:cd:5d:
de:aa:47:4f:46:84:e4:bc:43:f1:44:68:70:ec:06:31:9d:85:
d1:61:ff:5e:b6:d4:85:c6:a4:2e:fd:02:5c:98:ee:56:df:84:
a9:2d:6f:a3:44:2f:f8:0b:4c:ca:17:22:ad:10:82:06:16:1f:
86:76:46:cf:28:f5:0a:a6:57:5a:d4:9f:31:29:d9:09:0c:dc:
db:2b:46:f1:be:f9:e0:ae:e5:61:0c:da:e3:9d:c8:fd:4e:4a:
e7:07:4f:05:4f:c3:cf:8f:ca:8b:d6:b6:72:1b:9c:04:6e:0e:
6a:89:f4:a4:9b:32:63:09:fa:74:31:4e:8f:11:7b:12:da:37:
81:fd:cc:6a:4c:56:4f:7d:41:66:09:6a:55:b9:9b:7e:fa:01:
08:71:fd:46:17:98:73:00:71:25:1b:0f:f5:76:f9:c8:86:db:
77:15:3d:c9:0f:ab:0c:e7:68:76:91:b5:e0:4d:48:97:f1:02:
b1:11:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 26 14:19:01 2024 by rpki-client on console-ams.rpki-client.org