Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/tzggwpSTSj2QssldMGHaL3JU7AM.roa
File: tzggwpSTSj2QssldMGHaL3JU7AM.roa (raw, json)
Hash identifier: q5dAaAsX4gJ9Xf9Vp9XKTkDLHYEVqW4c2Ify9mbVPSs=
Subject key identifier: B7:38:20:C2:94:93:4A:3D:90:B2:C9:5D:30:61:DA:2F:72:54:EC:03
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018E5B996C896467DB4499B360A77103833F
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/tzggwpSTSj2QssldMGHaL3JU7AM.roa
Signing time: Wed 20 Mar 2024 11:22:45 +0000
ROA not before: Wed 20 Mar 2024 11:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12874
IP address blocks: 80.67.66.0/24 maxlen: 24
84.53.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 11:06:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:99:6c:89:64:67:db:44:99:b3:60:a7:71:03:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Mar 20 11:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b73820c294934a3d90b2c95d3061da2f7254ec03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ea:97:ed:4d:ca:96:b2:f2:c1:93:de:55:fa:
5c:86:35:98:f3:f1:e6:90:01:65:5b:7a:a1:3a:22:
0b:34:ae:72:15:e8:49:4a:74:02:48:0e:ee:e5:e2:
fb:2d:1b:04:7d:f5:33:03:2f:cb:23:43:6e:22:27:
3e:92:7d:db:0a:4d:df:80:67:b9:6d:23:cb:4a:a8:
25:a0:cb:fa:1e:d1:63:d2:56:7c:8f:ae:26:c8:ea:
f5:a0:2d:45:40:87:f9:a3:de:eb:a9:96:c7:16:5e:
92:e4:e2:a3:44:bb:ed:99:72:e9:f7:61:cf:d8:1c:
cc:7b:4e:dd:ae:47:15:0a:20:e6:35:c5:bb:c7:16:
5e:59:c3:8b:f3:8b:ff:6a:ea:7b:dc:55:01:f9:d9:
51:bd:e3:9f:43:75:a4:64:89:8d:e8:5e:69:82:9d:
58:ca:93:bc:41:32:8e:9e:c0:81:0b:a5:1d:a1:39:
bc:df:7a:5d:12:de:72:8e:34:6c:21:cc:00:57:f8:
1a:1b:f0:2a:a5:4c:f1:ee:0f:3b:67:37:fc:71:e8:
0d:29:d8:d8:84:fb:ab:f9:36:cc:78:32:d4:8b:d1:
9b:e8:53:61:4e:40:13:b5:a5:bc:73:b7:65:c4:ae:
01:48:5b:13:f0:ca:cf:51:aa:6c:8c:70:99:af:00:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:38:20:C2:94:93:4A:3D:90:B2:C9:5D:30:61:DA:2F:72:54:EC:03
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/tzggwpSTSj2QssldMGHaL3JU7AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.67.66.0/24
84.53.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:38:e5:e3:bc:a0:98:83:36:3b:c2:31:98:fd:bd:71:04:52:
ed:ce:f8:a9:04:38:5d:b3:ec:c3:3d:8b:a8:c3:b3:54:e6:ca:
0b:b1:fd:f6:00:ee:a1:40:b9:82:d7:c5:44:fc:33:bb:b7:e3:
b9:d8:3f:eb:76:a7:5a:af:77:0e:03:28:ff:44:8a:92:3d:bf:
67:b9:65:a7:55:59:be:50:64:63:5d:a4:77:7a:5f:0f:98:66:
fa:21:52:db:79:4e:84:32:57:3f:e1:28:bb:ab:8c:14:c8:eb:
50:50:28:17:b6:33:c2:4a:80:0d:46:90:b9:fc:e4:e2:58:5e:
e5:27:13:b0:f8:9c:b7:dc:fe:f9:97:cf:01:b1:7e:ed:46:98:
5b:ac:6d:e2:a1:8f:2b:b2:35:ae:ac:f3:e4:60:ac:20:b7:ff:
c1:e7:3b:b1:0d:f6:43:a2:19:c5:07:5f:24:5b:fd:d8:77:cf:
e0:5c:5b:3f:35:be:ec:4b:02:e1:43:82:b2:4a:94:37:ab:51:
9d:34:cd:65:9c:26:44:3e:04:10:b5:6f:e9:b3:5b:35:39:f5:
87:eb:57:63:9b:37:32:3a:36:c4:00:28:0c:ae:6c:06:34:fd:
3e:d2:17:b3:36:37:54:c2:0d:e7:35:36:0a:e5:ce:91:99:41:
45:1c:86:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 27 14:54:24 2024 by rpki-client on console-ams.rpki-client.org