Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZNc2W2961VIHFG8cj17St-Dx4iQ.roa
File: ZNc2W2961VIHFG8cj17St-Dx4iQ.roa (raw, json)
Hash identifier: H5v1bLf0A5D/7uDz7Mw0a/0hAif/DgI0GzX5yECxao0=
Subject key identifier: 64:D7:36:5B:6F:7A:D5:52:07:14:6F:1C:8F:5E:D2:B7:E0:F1:E2:24
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018BCD817DC5F10FC7114B30E5A9AB525CE3
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZNc2W2961VIHFG8cj17St-Dx4iQ.roa
Signing time: Tue 14 Nov 2023 11:04:57 +0000
ROA not before: Tue 14 Nov 2023 11:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51076
IP address blocks: 80.242.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cd:81:7d:c5:f1:0f:c7:11:4b:30:e5:a9:ab:52:5c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 14 11:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=64d7365b6f7ad55207146f1c8f5ed2b7e0f1e224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:b6:72:88:68:f9:f7:fb:0b:cb:ac:b2:85:
17:20:1a:d3:2b:68:c6:47:5e:43:4b:5a:c5:b0:81:
7b:43:eb:e2:4d:d8:d1:d2:0d:5e:dd:8f:93:bf:9f:
46:26:e2:dd:9b:62:fc:99:a5:37:92:aa:d1:e5:19:
8b:76:fc:82:14:c6:32:2d:f2:03:e7:2a:0f:b1:23:
9d:42:f9:bc:2b:92:23:65:99:0d:e8:e9:56:ee:59:
d4:18:17:e6:35:57:fe:fe:2c:b4:bc:51:d3:b2:95:
ce:eb:12:e9:dc:ec:bd:ea:e4:32:32:27:58:1f:19:
da:42:58:7b:11:ec:c2:fa:9d:fe:1f:18:8b:6a:ff:
7f:ca:1f:b0:0c:34:33:52:48:b7:39:91:e1:6a:a2:
66:2c:14:5e:61:68:c4:dd:46:c2:6b:39:a2:34:a7:
5a:2f:1f:fa:34:49:29:3b:04:65:ab:bc:cc:0d:a6:
80:58:98:aa:e1:d2:a9:b3:8c:62:df:32:04:ef:82:
8a:d6:63:0b:41:c0:e1:b8:7c:b4:3f:72:9d:ab:96:
68:e6:63:c4:d9:a2:95:86:cf:14:2c:db:e4:8b:b3:
24:4e:7a:af:44:6e:bb:7d:cf:e1:8f:ca:e0:e8:29:
95:a2:51:d6:30:63:53:3d:48:f2:b9:88:3c:1b:d3:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D7:36:5B:6F:7A:D5:52:07:14:6F:1C:8F:5E:D2:B7:E0:F1:E2:24
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/ZNc2W2961VIHFG8cj17St-Dx4iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.242.61.0/24
Signature Algorithm: sha256WithRSAEncryption
70:b7:d0:b7:a4:26:81:5f:95:bf:ba:11:37:53:fe:9c:21:bb:
c9:e1:79:bb:ba:3d:20:a5:48:b7:b7:b6:b9:0d:94:b1:29:b9:
26:82:4f:f5:fe:17:db:8b:04:7d:16:c7:32:76:cd:85:ba:3a:
05:f4:4c:bd:50:1c:cc:da:c0:e0:7f:54:78:d6:03:64:3d:ab:
2a:8f:e5:3c:54:fc:5a:fa:b4:81:e5:00:a2:2a:88:2c:be:f5:
4d:f8:52:40:4c:4c:bd:a4:82:37:c5:cb:74:1d:58:fe:e6:57:
77:c1:17:e4:9a:82:c0:ad:6c:4c:97:ec:00:2b:33:08:36:5d:
9d:b7:c0:b7:81:46:7b:23:32:d4:67:5e:34:69:23:b9:ea:54:
f4:eb:fb:00:a3:61:b4:28:e2:53:4f:7a:fa:33:d8:34:46:bf:
6c:81:c2:08:93:b2:76:6a:51:3e:01:0d:1e:e3:5f:08:67:0b:
11:d2:0c:90:55:73:58:2f:39:6f:45:52:34:c7:82:46:cb:eb:
88:a2:46:6f:8c:f8:18:e0:5f:b9:ff:25:05:79:1f:3a:0b:6f:
a3:5c:fe:0d:0f:0e:2e:96:35:c0:6e:3c:1a:7f:31:04:2a:a3:
f8:89:82:46:23:9e:20:29:5d:b0:97:0c:62:47:a0:e8:3b:79:
2e:7c:f3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org