Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z2tRqBlcojGg3bD0PLOygMbn13o.roa
File: Z2tRqBlcojGg3bD0PLOygMbn13o.roa (raw, json)
Hash identifier: JzKW+NW0OR6Ox17gO+PuPk7rjTK4GWN1rBbNgD++l2A=
Subject key identifier: 67:6B:51:A8:19:5C:A2:31:A0:DD:B0:F4:3C:B3:B2:80:C6:E7:D7:7A
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 018CC56E0DE16C53802270E4DDC2F803749C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z2tRqBlcojGg3bD0PLOygMbn13o.roa
Signing time: Mon 01 Jan 2024 14:29:33 +0000
ROA not before: Mon 01 Jan 2024 14:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31479
IP address blocks: 80.66.112.0/20 maxlen: 20
185.28.48.0/23 maxlen: 23
2001:4030::/32 maxlen: 32
2001:4030:16::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 13 Feb 2024 08:23:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:0d:e1:6c:53:80:22:70:e4:dd:c2:f8:03:74:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 14:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=676b51a8195ca231a0ddb0f43cb3b280c6e7d77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:47:e5:64:3c:02:90:26:9e:41:c5:c6:c0:dc:
69:c2:5a:ba:b7:12:c0:1d:7b:41:43:54:da:1a:4f:
4d:61:0d:ee:37:b5:00:f6:2e:80:20:eb:8b:30:62:
01:d7:ad:d6:47:85:4e:f8:c6:7e:14:27:db:ad:5b:
78:38:72:9e:7b:a7:33:96:9e:ae:92:10:96:c7:ee:
1b:ab:46:1e:79:29:11:ef:f1:73:c7:95:32:b7:b2:
01:fb:13:04:58:30:7e:80:38:01:e3:a8:32:23:1a:
90:90:45:6e:69:41:20:a5:be:9c:c2:c8:cd:97:f9:
0e:9a:99:f4:b2:06:59:2d:5b:8d:41:ed:aa:06:c5:
c9:c0:ae:bb:0e:0e:75:8d:33:0d:7d:86:3f:b5:3d:
08:61:2b:80:93:e2:39:a4:b2:47:2d:ff:fc:4a:b2:
6a:09:72:97:c6:a6:f0:2f:3d:4a:53:c9:10:03:e3:
8d:65:2e:e1:6b:53:64:46:63:f1:99:52:89:5a:51:
0b:da:ac:7e:4a:01:68:4d:d3:2b:e3:6c:18:09:3f:
02:e3:c2:66:5e:27:5b:70:77:6c:1f:ff:88:88:59:
37:cc:c9:02:aa:f8:87:87:b9:25:04:84:a1:14:5f:
d7:1a:f5:f6:1a:78:a6:74:63:d2:78:1a:25:e5:6d:
59:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:6B:51:A8:19:5C:A2:31:A0:DD:B0:F4:3C:B3:B2:80:C6:E7:D7:7A
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Z2tRqBlcojGg3bD0PLOygMbn13o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.112.0/20
185.28.48.0/23
IPv6:
2001:4030::/32
Signature Algorithm: sha256WithRSAEncryption
16:89:2a:1c:83:ae:ea:bb:e2:34:76:00:d6:20:37:bb:53:89:
09:2f:87:55:0d:e7:e6:2c:80:a1:e1:a7:34:de:d4:b7:de:43:
6a:48:87:54:f4:40:e6:03:1b:3c:bd:3c:e8:ce:d7:e6:0c:79:
71:0d:05:32:bb:08:d9:c8:44:15:a6:a2:9e:7a:ef:bf:bc:38:
88:64:11:43:0b:70:1e:57:94:2e:78:e5:80:92:fd:ab:cc:87:
69:72:c2:e9:48:c0:84:fa:66:15:ec:f8:75:e0:10:65:43:79:
f9:49:9b:bb:98:8f:df:e4:5e:6d:8b:4e:cf:33:3c:4c:6c:0e:
74:30:6a:17:59:1b:cb:ab:ac:f2:d1:d8:11:7d:db:79:03:36:
c6:50:2c:8d:70:a2:e0:ca:80:27:a4:23:dd:a5:d0:e4:38:0b:
d8:98:b6:de:86:a8:7b:a4:16:ee:c2:6a:08:9e:f4:fe:1c:e0:
d1:48:10:aa:f6:18:2c:6e:7d:b8:92:f4:2f:5e:6a:5c:5a:57:
99:a9:2a:da:43:7c:fc:29:87:d7:46:22:1e:46:e8:77:df:7a:
3b:82:55:1f:ad:30:03:3c:8a:38:7b:3a:42:e4:85:c1:c4:78:
f1:77:ca:9f:21:f5:4d:d8:ac:52:a7:f4:50:78:c6:d2:9f:ef:
87:dd:c4:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 11:39:07 2024 by rpki-client on console-ams.rpki-client.org