Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/19MqZPs-Hq5soFWM2nXTnfaL8kk.roa
File: 19MqZPs-Hq5soFWM2nXTnfaL8kk.roa (raw, json)
Hash identifier: Ypg6bIbuO+SpbEPaGdOL8xbjjEpUuS3a0t6329dW0ig=
Subject key identifier: D7:D3:2A:64:FB:3E:1E:AE:6C:A0:55:8C:DA:75:D3:9D:F6:8B:F2:49
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018C2477D2D25480B43A13B3C5AC4DB713F1
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/19MqZPs-Hq5soFWM2nXTnfaL8kk.roa
Signing time: Fri 01 Dec 2023 08:21:21 +0000
ROA not before: Fri 01 Dec 2023 08:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 87.251.69.0/24 maxlen: 24
87.251.68.0/24 maxlen: 24
80.66.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:77:d2:d2:54:80:b4:3a:13:b3:c5:ac:4d:b7:13:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Dec 1 08:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7d32a64fb3e1eae6ca0558cda75d39df68bf249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6b:aa:01:57:ba:f3:7e:a4:d5:83:f2:ba:3b:
6a:67:80:71:83:fc:95:ac:23:99:42:2e:06:06:9c:
a8:ad:c3:19:eb:3d:3f:4c:1d:1b:38:5c:17:5d:62:
a5:e4:aa:eb:5e:d1:4c:39:39:eb:57:25:b1:af:65:
0a:73:dd:92:88:db:cb:16:cd:97:29:30:41:58:16:
ca:4d:92:ea:cd:5a:b9:31:ab:f0:b0:dd:7b:db:86:
82:d9:2e:6a:b4:ab:87:2e:46:c3:ea:e8:93:d2:08:
60:2a:36:a3:d0:be:be:54:33:79:8f:f4:f8:98:e4:
3f:7f:bc:ce:71:a2:53:b8:94:69:22:2b:5a:de:60:
1f:97:e8:e1:45:c8:06:4d:3c:8b:53:6d:12:ae:c3:
35:5f:3e:fc:f9:02:6b:a4:25:0d:d8:e9:38:fb:3a:
e9:b6:e5:3b:a6:6d:10:03:b0:88:02:fe:03:00:80:
20:08:9f:53:ae:f2:02:f5:c5:e9:68:3d:34:40:31:
d2:5b:93:e4:1d:97:77:3a:ac:ee:7d:a5:93:f3:07:
42:ff:cf:23:8c:b4:ab:15:91:cb:53:14:b3:d7:fe:
b3:b8:72:07:a3:a8:ba:f3:f5:63:bc:46:53:b5:5d:
bc:7e:2e:ea:34:65:d7:d1:8a:ba:1a:49:30:91:82:
c0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D3:2A:64:FB:3E:1E:AE:6C:A0:55:8C:DA:75:D3:9D:F6:8B:F2:49
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/19MqZPs-Hq5soFWM2nXTnfaL8kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.72.0/24
87.251.68.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:f6:8a:ab:5b:24:45:88:38:59:8e:15:c7:43:7c:3a:98:2b:
b5:d7:16:9c:ab:56:16:14:58:05:5c:f9:f9:7e:f9:e9:84:78:
e4:51:a1:0d:6a:e1:ae:93:d7:13:63:18:5d:50:a4:ed:a4:9b:
47:50:89:3d:0e:11:0b:ba:79:b6:03:13:7c:d9:b7:87:88:3b:
4c:88:e6:1f:e7:a8:9f:43:96:ad:4a:e4:70:73:4d:d2:82:57:
92:7d:54:3c:8e:42:e5:e8:3a:6c:94:02:ae:b5:e2:c0:11:cc:
0d:42:9a:b0:13:55:cd:ea:90:82:bb:c0:92:85:a5:2b:b6:72:
25:dd:3a:e3:8f:4c:57:af:cc:89:37:13:06:fb:f0:46:f0:82:
c0:d2:8e:5b:47:f1:32:9c:4c:2c:28:26:86:04:c9:af:76:d7:
0d:14:1e:4b:c9:2f:44:46:49:54:2e:3c:6a:f5:5b:c0:1c:f0:
12:25:4b:01:15:b2:e7:4b:35:02:e4:3c:b6:c8:a4:3e:23:0c:
09:c8:8c:d8:36:c3:86:7f:21:c1:ac:50:9b:b0:ff:f0:44:c1:
27:53:51:9e:e9:f6:ff:d1:28:a1:ce:55:25:13:3c:0c:28:fb:
e1:71:8e:7c:60:a0:cc:4f:ee:f0:4f:d7:94:a0:91:74:42:66:
ff:06:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:36 2024 by rpki-client on console-ams.rpki-client.org