Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/RcBwMYHgsTtQo5ZrOo_tnANLCmk.roa
File: RcBwMYHgsTtQo5ZrOo_tnANLCmk.roa (raw, json)
Hash identifier: Zkt7OR2CX2DevIPEdV08zxf+eCOrPrh+TZniCiGeNMw=
Subject key identifier: 45:C0:70:31:81:E0:B1:3B:50:A3:96:6B:3A:8F:ED:9C:03:4B:0A:69
Certificate issuer: /CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Certificate serial: 018570399FCA6E76776524D6661F6A8CA2AD
Authority key identifier: 1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/RcBwMYHgsTtQo5ZrOo_tnANLCmk.roa
Signing time: Mon 02 Jan 2023 02:05:02 +0000
ROA not before: Mon 02 Jan 2023 02:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61207
IP address blocks: 80.73.48.0/20 maxlen: 20
95.130.64.0/21 maxlen: 21
2a04:8080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:9f:ca:6e:76:77:65:24:d6:66:1f:6a:8c:a2:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a5a22dbc8dbd2d7248deaff47e3390f77fb4b0b
Validity
Not Before: Jan 2 02:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45c0703181e0b13b50a3966b3a8fed9c034b0a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:f5:47:38:70:58:26:9a:70:fa:cd:49:45:
21:ea:40:96:17:5b:08:da:f0:5b:4f:d4:34:3d:63:
63:2f:ba:dd:82:c3:bf:ee:71:bf:fd:f4:b6:78:9d:
6f:0e:d2:3c:33:21:70:dc:54:1d:4a:e5:10:5b:61:
6f:4a:41:80:49:70:fe:74:5d:09:5d:8d:6e:09:aa:
60:66:55:fd:dc:98:05:56:3c:a6:be:8f:2d:04:19:
41:22:01:10:20:44:4b:07:26:8e:8b:cd:23:a8:3e:
b6:6e:4e:0c:11:06:1f:e8:ce:f5:a1:09:f0:bf:5b:
00:c8:ca:74:9d:62:a9:d4:1b:73:c4:db:56:e1:25:
2a:78:ab:12:6f:9c:00:0e:96:b6:56:49:e4:19:99:
9b:de:98:5a:61:e5:32:61:b2:a3:86:a7:89:68:f5:
db:e5:7c:c2:44:f0:ae:ff:de:c4:97:0f:2c:b9:c2:
28:9a:5b:57:12:cd:03:b9:e2:bf:0d:a1:ed:5d:c9:
06:03:41:b3:a5:c4:63:63:00:99:0f:f9:f0:f1:05:
93:33:35:3c:f6:27:0b:f7:5a:86:68:65:54:9f:aa:
8f:03:c3:44:b8:f6:47:45:78:d7:25:2f:f8:d2:fc:
db:05:1e:8c:63:87:02:f4:57:d3:ac:f0:fb:c1:25:
b0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C0:70:31:81:E0:B1:3B:50:A3:96:6B:3A:8F:ED:9C:03:4B:0A:69
X509v3 Authority Key Identifier:
keyid:1A:5A:22:DB:C8:DB:D2:D7:24:8D:EA:FF:47:E3:39:0F:77:FB:4B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gloi28jb0tckjer_R-M5D3f7Sws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/RcBwMYHgsTtQo5ZrOo_tnANLCmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1922c9-4949-4055-a66e-15d32709bd0f/1/Gloi28jb0tckjer_R-M5D3f7Sws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.48.0/20
95.130.64.0/21
IPv6:
2a04:8080::/29
Signature Algorithm: sha256WithRSAEncryption
ad:0e:ef:5d:53:27:5f:77:ce:b0:e3:84:42:99:2c:c2:56:5f:
a2:a7:58:05:15:1d:f2:6a:04:30:0c:eb:3f:55:e4:7e:cc:d8:
da:75:53:4f:21:98:40:ed:f1:aa:e2:83:32:92:00:d1:5c:93:
1e:3b:1c:a0:1f:46:36:17:c2:d8:ae:fb:27:07:a0:7c:4a:ba:
a6:5b:35:01:64:44:70:8c:12:27:00:e9:5d:88:dd:1b:fa:b4:
86:f8:ec:46:7f:5c:f5:0c:dc:8b:e8:24:c4:e0:91:d1:f0:da:
8e:b9:70:e0:94:69:2f:42:64:84:51:bb:d0:0b:87:aa:ea:0f:
00:31:e3:2f:40:6d:f0:3a:36:f9:a6:88:82:98:c1:ae:ac:70:
26:e2:f9:1c:9c:e6:9e:a8:20:18:e2:bf:d6:ae:f1:38:32:d2:
a3:9a:be:2c:17:63:7c:3c:68:81:26:2d:d4:12:4b:38:06:f0:
6e:07:5a:bc:c3:17:64:bf:fc:53:f6:37:73:03:8e:2a:87:16:
71:61:3c:a6:53:2e:66:b3:16:da:97:0e:9c:9c:60:6d:2c:f4:
91:f6:f4:91:15:d9:89:0e:f2:fd:f2:49:55:45:1d:97:8e:19:
35:1e:c1:88:af:f2:12:3b:e7:d7:20:80:c0:a5:ee:16:51:a1:
a1:7d:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:44 2024 by rpki-client on console-fra.rpki-client.org