Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zVC9hJTl8XYoyVCNIvV8wQ9c5l0.roa
File: zVC9hJTl8XYoyVCNIvV8wQ9c5l0.roa (raw, json)
Hash identifier: seo+3sj/HUgyQv8qnVbgKOdJdmww41ecQQEOAr0vjSQ=
Subject key identifier: CD:50:BD:84:94:E5:F1:76:28:C9:50:8D:22:F5:7C:C1:0F:5C:E6:5D
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570950D9C402F42EC8AC15690B785BE55
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zVC9hJTl8XYoyVCNIvV8wQ9c5l0.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60602
IP address blocks: 80.66.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0d:9c:40:2f:42:ec:8a:c1:56:90:b7:85:be:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd50bd8494e5f17628c9508d22f57cc10f5ce65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e9:66:b9:0a:83:d7:d7:e4:05:d8:86:50:86:
fb:27:03:83:42:90:42:32:2c:06:6e:b2:3c:fa:a2:
a3:6c:10:9d:ad:fc:68:b0:ce:54:a2:a9:a3:bb:af:
56:92:84:ee:b4:8f:f6:7e:7f:46:90:00:87:08:a5:
69:17:90:a3:25:b1:25:a3:e0:16:aa:27:9e:3c:f1:
e1:d4:6b:03:87:70:df:a8:89:cf:a1:f9:e0:7a:8c:
92:be:90:38:59:bb:eb:8e:7a:9a:30:92:12:8d:3b:
33:f3:b0:a3:6c:a1:00:96:75:a9:68:77:3e:d8:f4:
10:43:a1:89:75:b2:d2:c9:4b:7c:3a:e0:62:40:19:
20:e3:a8:4f:d5:76:d6:da:1f:cb:47:ab:28:5c:21:
2c:dc:05:a1:4c:f0:92:6c:c3:e6:52:c4:01:17:8f:
13:21:e6:90:44:07:42:95:e5:60:cb:e7:b8:80:9a:
6a:c5:f5:ca:00:29:b1:90:e6:a7:b1:25:7d:db:ac:
ab:fc:87:5d:87:d1:83:2e:60:33:04:d5:bd:d9:6d:
69:85:0f:8a:d0:68:4e:6c:48:a8:81:42:02:76:c7:
1f:17:a8:5e:bb:86:46:ae:25:d2:84:ae:6f:13:f0:
31:21:f5:c5:75:3c:a6:f5:37:3c:ff:01:70:9d:90:
a1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:50:BD:84:94:E5:F1:76:28:C9:50:8D:22:F5:7C:C1:0F:5C:E6:5D
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/zVC9hJTl8XYoyVCNIvV8wQ9c5l0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.79.0/24
Signature Algorithm: sha256WithRSAEncryption
02:40:df:75:30:28:fd:2b:dc:25:82:d8:a9:e8:49:bd:8e:53:
06:15:23:eb:e0:5f:65:0d:b8:51:d4:66:9b:70:52:c1:d6:60:
27:c9:24:1f:0e:02:55:c2:a2:6d:21:7c:5c:e2:6c:1d:c7:dc:
e2:5b:5e:31:01:ac:4d:9a:93:eb:6b:65:d9:1c:50:7a:e6:89:
84:e0:c4:b8:a2:e6:a4:d8:c7:17:f1:3b:ba:90:9b:ed:b2:8e:
24:09:0c:a1:7b:21:21:18:46:06:71:a7:41:4b:6d:44:2f:64:
16:f4:04:b0:ac:82:7b:f9:18:f7:9d:e5:9e:b6:91:f5:c6:75:
5d:72:06:dc:21:cf:50:be:16:d2:57:b4:27:bb:96:8b:ac:fe:
2c:cc:1b:4a:f5:82:f5:bd:6e:cf:4c:73:4e:10:6e:fd:60:6a:
87:72:d0:2f:bc:51:91:f9:54:bf:47:2a:82:ee:c5:a5:09:ed:
f5:23:bf:85:d7:80:5b:8b:29:a2:41:e6:e8:cb:10:12:90:eb:
35:6f:c5:71:0e:f8:8a:bd:96:10:bf:88:e4:56:bd:e4:e4:7f:
5f:86:de:1c:78:ee:4e:0d:00:c9:6e:76:66:62:d6:82:24:a9:
db:fd:07:15:fc:35:87:02:71:63:98:db:b4:b8:ab:ed:de:c8:
3c:ec:a3:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlQ2cQC9C7IrBVpC3hb5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjMwMTAyMDM0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDUwYmQ4NDk0ZTVmMTc2MjhjOTUwOGQyMmY1N2NjMTBmNWNlNjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhelmuQqD19fkBdiGUIb7JwODQpBC
MiwGbrI8+qKjbBCdrfxosM5Uoqmju69WkoTutI/2fn9GkACHCKVpF5CjJbElo+AW
qieePPHh1GsDh3DfqInPofngeoySvpA4WbvrjnqaMJISjTsz87CjbKEAlnWpaHc+
2PQQQ6GJdbLSyUt8OuBiQBkg46hP1XbW2h/LR6soXCEs3AWhTPCSbMPmUsQBF48T
IeaQRAdCleVgy+e4gJpqxfXKACmxkOansSV926yr/Iddh9GDLmAzBNW92W1phQ+K
0GhObEiogUICdscfF6heu4ZGriXShK5vE/AxIfXFdTym9Tc8/wFwnZCh0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM1QvYSU5fF2KMlQjSL1fMEPXOZdMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvelZDOWhKVGw4WFlveVZDTkl2Vjh3UTljNWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJPMA0G
CSqGSIb3DQEBCwUAA4IBAQACQN91MCj9K9wlgtip6Em9jlMGFSPr4F9lDbhR1Gab
cFLB1mAnySQfDgJVwqJtIXxc4mwdx9ziW14xAaxNmpPra2XZHFB65omE4MS4ouak
2McX8Tu6kJvtso4kCQyheyEhGEYGcadBS21EL2QW9ASwrIJ7+Rj3neWetpH1xnVd
cgbcIc9QvhbSV7Qnu5aLrP4szBtK9YL1vW7PTHNOEG79YGqHctAvvFGR+VS/RyqC
7sWlCe31I7+F14BbiymiQeboyxASkOs1b8VxDviKvZYQv4jkVr3k5H9fht4ceO5O
DQDJbnZmYtaCJKnb/QcV/DWHAnFjmNu0uKvt3sg87KNc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org