Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa
File: RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa (raw, json)
Hash identifier: YyDRQhJjAb3AQvNonhnYyCxlRigpAHw0Qn8yqi4tnE8=
Subject key identifier: 46:96:59:FD:8D:D3:0B:EB:79:10:D5:99:CB:01:8E:50:C3:21:BA:0F
Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Certificate serial: 018D8904E69BAA5325A5BCB84CAD9E437185
Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa
Signing time: Thu 08 Feb 2024 14:00:16 +0000
ROA not before: Thu 08 Feb 2024 14:00:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49556
IP address blocks: 80.244.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Oct 2024 21:18:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:89:04:e6:9b:aa:53:25:a5:bc:b8:4c:ad:9e:43:71:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e
Validity
Not Before: Feb 8 14:00:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=469659fd8dd30beb7910d599cb018e50c321ba0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:15:96:fb:0c:f0:dc:66:a7:d1:1d:5e:67:
f5:84:02:81:3c:dc:ff:94:b1:42:2f:e3:7b:e2:ea:
ac:2c:24:a1:c8:02:81:13:1e:26:15:0f:47:5e:a0:
26:3e:ad:f4:6b:45:3b:e9:aa:3e:fa:7b:90:07:31:
8c:c5:18:f3:22:5a:89:ff:61:f7:e4:ad:88:be:55:
65:14:78:e6:83:40:ff:d6:88:39:10:e6:99:0b:ec:
9a:8c:39:da:77:d0:07:2d:74:31:b3:3f:f3:ed:90:
9d:e8:af:d4:d0:4f:21:b7:be:8c:c1:a7:df:e4:f7:
20:00:07:7d:8d:71:b0:9f:19:d8:dc:c1:73:d0:7d:
bc:7d:f4:08:26:93:9a:a2:da:69:c0:d3:31:e6:a5:
58:34:9c:cf:b3:cc:dc:8b:4a:30:45:7b:21:02:b4:
0b:d7:cb:ad:b7:4a:0c:76:48:a6:53:18:be:90:a1:
96:7a:5a:ed:c4:c5:61:02:77:9b:b7:ef:00:00:fb:
cc:7b:66:29:cb:0e:41:d6:0e:ad:a3:e9:a8:62:d2:
77:55:c2:88:3c:e2:fc:6a:d2:3f:9d:de:5e:ac:da:
44:3b:82:dc:8a:b5:c0:d4:22:a7:e0:20:89:17:fb:
6b:24:a3:64:52:2f:b5:c1:fc:37:8d:3c:db:13:13:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:96:59:FD:8D:D3:0B:EB:79:10:D5:99:CB:01:8E:50:C3:21:BA:0F
X509v3 Authority Key Identifier:
keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/RpZZ_Y3TC-t5ENWZywGOUMMhug8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.7.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5b:dd:48:e3:b0:7f:d1:38:d8:e0:58:52:07:f5:50:8c:87:
86:1d:b0:45:78:07:5e:ac:58:2a:75:88:27:b2:dc:d2:23:d3:
ee:18:05:99:fd:fa:43:83:98:4b:66:81:f2:d8:69:cb:36:ae:
a4:33:78:74:80:2e:ac:d0:9b:3b:0e:e4:98:b5:1c:89:76:3b:
2e:ce:df:b9:bd:b1:d3:f5:f7:1d:51:25:65:45:a4:5b:9c:7c:
be:4e:31:0f:ce:41:51:d8:11:87:21:73:35:bc:76:12:c5:f4:
46:59:0b:fa:93:82:00:cf:05:68:d2:0d:04:cb:e7:7f:43:56:
a3:a4:25:1e:3d:a4:cd:ae:b7:8f:ea:98:66:dc:e5:03:36:67:
46:28:c3:38:00:93:9e:43:b0:98:3f:07:3a:5e:13:39:9a:ed:
40:94:09:dc:82:93:0d:7a:6f:fb:ed:97:fd:d4:7b:f9:c3:3d:
c6:61:e2:32:82:c3:0f:61:b5:89:b1:5c:23:7a:ed:d6:29:af:
04:9c:82:26:c3:a1:e4:c2:01:63:c2:62:81:8f:fe:9f:9c:49:
ae:a5:70:d2:9a:b5:3e:05:66:38:86:46:bf:49:92:8f:2f:0d:
e5:0a:c5:ba:ae:df:54:bb:f1:2b:3a:81:77:33:6d:b9:96:d3:
db:a6:3d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 21 22:10:01 2024 by rpki-client on console-fra.rpki-client.org