Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/0S8KSbG4vgZwn_WNCVQPjqtqjd4.roa
File: 0S8KSbG4vgZwn_WNCVQPjqtqjd4.roa (raw, json)
Hash identifier: GaO3WzWjDcv6Fv0/PSXEdkLGaewykKs4mstvLt/NwwE=
Subject key identifier: D1:2F:0A:49:B1:B8:BE:06:70:9F:F5:8D:09:54:0F:8E:AB:6A:8D:DE
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0185B08F72E791D3FCF16C55952D09979661
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/0S8KSbG4vgZwn_WNCVQPjqtqjd4.roa
Signing time: Sat 14 Jan 2023 13:54:29 +0000
ROA not before: Sat 14 Jan 2023 13:54:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
80.66.89.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 12:40:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b0:8f:72:e7:91:d3:fc:f1:6c:55:95:2d:09:97:96:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 14 13:54:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d12f0a49b1b8be06709ff58d09540f8eab6a8dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6f:8d:50:e9:dd:2b:04:21:f2:f8:87:07:04:
08:58:bc:e4:82:fa:bd:78:18:10:bf:87:bc:48:fe:
85:dd:b6:f0:72:68:81:e6:88:5e:c6:88:7b:ec:ce:
09:d1:fa:59:d1:73:18:16:cc:f7:d1:47:c6:79:e9:
bb:5e:df:e4:f3:7b:89:e7:45:fa:46:24:17:c7:2c:
94:e9:e5:0c:f8:92:f1:14:35:f2:bc:55:23:f5:f1:
2d:ab:79:5e:95:56:b6:8e:76:37:eb:3a:da:04:5e:
32:83:bd:67:c0:f6:b9:99:73:28:4a:47:3f:50:ed:
63:69:f7:2a:4d:55:bd:e8:45:74:98:25:e1:20:1a:
a0:a3:a6:cb:70:ff:2e:6b:17:63:8e:f2:01:67:46:
ed:2b:47:26:00:fa:b1:7b:7a:fa:94:94:5a:6e:8e:
db:f5:e6:0b:08:46:32:59:53:ec:4c:58:8b:6a:b7:
07:e2:eb:e1:43:83:57:9c:bf:83:20:24:77:bd:34:
ee:6c:35:bf:a3:7f:2f:0d:7c:3e:ba:e9:76:57:5a:
96:44:c3:73:c9:82:34:71:e7:c2:df:1b:36:27:f8:
4e:a7:80:22:0f:9a:e5:08:48:41:e4:c1:1a:0d:4c:
71:78:e0:c1:e4:7f:43:0a:4c:e5:0a:0e:ce:2e:20:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:0A:49:B1:B8:BE:06:70:9F:F5:8D:09:54:0F:8E:AB:6A:8D:DE
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/0S8KSbG4vgZwn_WNCVQPjqtqjd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.89.0/24
87.251.78.0/24
193.37.70.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:bc:99:16:e5:5b:4f:88:97:26:6c:b0:44:e4:7d:ba:52:4d:
01:20:ea:d2:f7:c5:06:06:5e:96:ce:65:8f:03:d4:ab:0b:e3:
dc:f3:c9:97:f6:2d:e7:c3:da:47:6f:23:11:01:4c:c6:b5:3f:
f0:61:38:85:8b:8a:6b:d6:08:15:ef:c6:e7:52:5b:63:1f:45:
77:0a:29:46:1a:ee:27:fd:36:0d:e3:bd:5b:86:46:b3:f3:ae:
5e:68:fc:b9:f0:45:16:17:5d:72:83:b0:98:67:84:61:95:51:
5e:3a:70:69:12:72:07:7b:35:f4:b4:92:e7:d7:d5:dd:68:da:
bf:19:ef:53:cc:90:dc:df:76:12:3a:9a:79:94:fb:de:eb:b7:
84:7f:21:f0:f2:8f:86:6c:bd:de:72:6c:44:c3:0f:79:3a:e6:
cc:f5:88:9a:80:91:94:6a:14:e0:15:68:ae:28:69:91:e6:b3:
be:f0:01:0f:16:0d:6c:36:53:ca:24:2f:5f:ac:f2:78:3f:3f:
55:50:c6:e0:d0:ef:ef:a8:e5:bd:44:34:e7:01:be:2d:5f:f0:
bd:48:7c:93:f4:d2:2c:fa:8e:81:6f:fd:17:95:08:5d:bf:4e:
a3:4c:94:17:82:03:2f:46:27:4c:4d:17:25:c3:59:6a:5f:aa:
64:9b:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org