Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ZgtPoFOw9tjoKDtvs8iX8xobwQI.roa
File: ZgtPoFOw9tjoKDtvs8iX8xobwQI.roa (raw, json)
Hash identifier: BktEjADasBpHbAOeW7fa2LwUNMZW705EOttKniMGUp0=
Subject key identifier: 66:0B:4F:A0:53:B0:F6:D8:E8:28:3B:6F:B3:C8:97:F3:1A:1B:C1:02
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018CCA2A4044F82C2354204CA12B6CE8EA59
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ZgtPoFOw9tjoKDtvs8iX8xobwQI.roa
Signing time: Tue 02 Jan 2024 12:33:35 +0000
ROA not before: Tue 02 Jan 2024 12:33:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 77.81.80.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Mar 2024 12:49:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:40:44:f8:2c:23:54:20:4c:a1:2b:6c:e8:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Jan 2 12:33:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=660b4fa053b0f6d8e8283b6fb3c897f31a1bc102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:a9:c7:ee:4e:ec:72:de:bd:91:5c:ac:27:
c6:1b:13:32:05:68:e4:f1:f8:db:58:da:56:ec:2e:
97:be:87:a1:15:28:4e:88:f9:3e:b2:eb:34:9e:b9:
3a:2f:3d:16:fc:fe:3f:44:2b:3a:8f:6b:31:8c:e4:
57:13:f6:f2:47:b3:7d:b1:2a:25:f3:24:4f:5e:6c:
e7:ef:5f:b2:46:82:95:47:6d:c4:f4:5b:96:82:66:
93:01:d5:e9:0d:df:fd:74:2b:e7:6a:80:f1:7c:cc:
3c:f5:59:10:e8:dd:95:45:5d:ec:71:8d:31:b4:5a:
43:6f:1f:2b:5c:1b:ca:a5:85:b6:43:b6:7d:aa:f1:
54:47:48:e1:8f:d1:1e:08:26:7e:1b:c9:eb:e0:55:
78:7e:de:d1:fc:4d:0d:cb:97:32:6f:da:da:44:0b:
b6:89:8d:a0:d8:31:99:e6:4d:32:9f:cf:25:bc:00:
34:56:67:65:a4:e7:51:7b:4b:5d:25:b1:a2:fe:3e:
03:55:1e:48:35:4f:41:06:90:c2:e2:2f:b8:71:ba:
b4:a8:bc:ae:89:5c:d5:36:92:52:da:96:a9:70:ce:
4f:23:dc:d4:1f:0a:06:b0:86:8d:46:c6:6e:20:f2:
cb:1e:e3:07:ec:9e:d9:52:10:37:5f:97:0a:e2:bc:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0B:4F:A0:53:B0:F6:D8:E8:28:3B:6F:B3:C8:97:F3:1A:1B:C1:02
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ZgtPoFOw9tjoKDtvs8iX8xobwQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.80.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:d2:b1:a5:d0:66:10:c1:1b:6c:a6:a8:b6:1e:4b:24:92:f5:
7d:ad:b5:45:05:77:76:30:89:9c:db:85:c9:eb:9c:87:25:8b:
91:8a:22:80:41:9f:f2:7a:14:24:6b:32:dc:9b:b9:12:93:73:
8a:91:88:01:59:ee:57:d8:c3:30:40:d8:57:20:15:ca:d7:40:
df:9a:70:96:26:c7:bd:20:6a:da:57:f8:04:58:d9:90:dc:14:
0e:0e:d9:58:3a:44:94:84:ba:d0:cc:36:65:9c:19:dc:d6:cd:
3d:d3:b3:1c:08:dd:65:1d:07:9e:05:57:92:4a:c1:a2:17:bd:
0d:83:8a:d0:ba:94:ea:7c:dc:72:33:ca:37:5d:64:c6:9d:fb:
84:a1:c7:a9:9d:cd:6c:37:26:62:da:05:f9:c4:1b:f8:54:94:
09:76:37:c2:72:42:1c:78:a3:97:f2:d5:5a:ef:ca:1a:56:45:
b9:c4:fe:b4:a6:98:d6:c3:5e:af:a2:7b:46:4e:df:70:af:d2:
a8:39:a7:a5:d1:37:0e:af:94:e8:2c:1a:26:87:bd:fe:c4:ff:
ec:a2:85:9c:fd:0f:6b:8f:7f:6b:c6:61:4f:1b:2f:7a:12:a0:
30:27:42:e4:3f:f1:f2:4e:4c:1f:ae:73:f9:70:9f:f9:1e:64:
0e:dd:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:23 2024 by rpki-client on console-fra.rpki-client.org