Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/znjkCIiwaTKL1ULTLYUeUCy3JQ4.roa
File: znjkCIiwaTKL1ULTLYUeUCy3JQ4.roa (raw, json)
Hash identifier: T9fCq4F6hHUDWnuJCOFNR6oxchqwgyIdl8s9F2u1OEc=
Subject key identifier: CE:78:E4:08:88:B0:69:32:8B:D5:42:D3:2D:85:1E:50:2C:B7:25:0E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570950E0C654EC4C5DAD6F5837093FC38
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/znjkCIiwaTKL1ULTLYUeUCy3JQ4.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206980
IP address blocks: 80.66.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0e:0c:65:4e:c4:c5:da:d6:f5:83:70:93:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce78e40888b069328bd542d32d851e502cb7250e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:80:7e:fd:e1:8a:c9:b6:74:60:93:9e:13:df:
e5:f6:05:81:10:ff:c9:a4:d1:1a:05:ac:e0:e6:e8:
e5:6a:e7:56:d5:57:36:3c:4d:a2:b6:a8:1a:8d:9c:
34:7d:e0:ef:3a:23:8d:b3:26:37:4f:ac:a5:19:8d:
05:3d:31:f6:0a:4f:9a:56:f3:0d:b3:bb:62:51:94:
9f:7b:50:d5:c4:de:94:86:3c:50:1f:c6:24:c2:04:
91:61:57:85:ab:38:4a:61:56:32:20:5e:ea:e1:b5:
a1:89:ec:4c:11:c4:0a:8c:6b:bd:11:f2:7c:7a:e1:
eb:91:73:7f:77:c5:a0:2d:e7:a5:7d:de:21:f1:76:
3e:6f:a3:52:d0:ce:0d:c4:30:1f:9c:c9:ae:7e:f3:
6e:d0:41:61:53:79:ec:98:1f:bc:a9:37:80:8a:69:
08:fd:12:1f:07:00:96:28:55:33:b9:d8:98:32:42:
78:5e:88:02:0e:32:90:b8:0a:a3:7d:24:13:37:2a:
cd:16:ad:0e:e4:dd:e9:77:c9:31:0d:c7:e3:08:2e:
81:f9:12:06:77:75:59:e3:24:25:96:37:9f:9b:8e:
bf:67:9e:4c:c2:df:f1:ec:de:99:27:30:e3:83:4d:
11:72:a9:01:cd:62:a4:80:f3:52:d6:44:34:ed:83:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:78:E4:08:88:B0:69:32:8B:D5:42:D3:2D:85:1E:50:2C:B7:25:0E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/znjkCIiwaTKL1ULTLYUeUCy3JQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:81:a6:a7:0c:ef:9e:c3:26:e6:66:03:7e:2e:2d:3a:6a:c1:
a1:49:e4:2f:b5:51:4f:e4:b5:34:44:6e:5c:d7:4c:0c:a2:6c:
ec:73:f2:39:49:d4:9d:4d:9f:a8:9f:01:56:29:5b:72:aa:a0:
60:1d:f0:ce:b8:bc:8a:08:81:5f:a9:e4:4d:06:d6:75:47:e4:
f8:a5:ff:ec:14:91:fe:e6:6c:f9:94:3a:2f:fa:74:12:1b:9f:
2e:5a:a4:13:99:24:83:b0:1d:d3:ef:07:9a:a7:49:27:e0:df:
34:f4:2f:f4:3f:68:be:71:cc:b4:02:e6:a8:bf:0b:94:79:5e:
7e:93:e5:1d:13:67:1c:c1:c3:59:42:d3:24:d7:59:47:af:af:
bc:89:45:9d:da:b8:54:fc:07:7e:03:4a:72:44:4a:2b:5e:6a:
6c:a1:af:07:0b:b9:da:db:49:9d:89:0c:f8:ac:65:f9:a4:f8:
c0:08:7c:88:81:bf:1c:b3:fc:22:40:2e:86:05:b5:10:8c:bc:
ef:dd:30:7b:3a:68:3e:e3:f2:21:54:b6:6c:61:c7:b9:e3:5a:
19:e9:22:21:d3:ce:a4:d5:4d:49:21:0c:6b:48:63:ff:23:c7:
44:42:cb:c4:d2:19:9b:9d:27:41:3a:7e:30:7c:99:b2:20:66:
29:fb:a8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:51 2024 by rpki-client on console-ams.rpki-client.org