Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/8OoWKJmo-w9SAu0b1YVXKmCidEM.roa
File: 8OoWKJmo-w9SAu0b1YVXKmCidEM.roa (raw, json)
Hash identifier: n0hg8VQHi+TP8NAejbOZfeIeuRquKOzNJvGftlOZROs=
Subject key identifier: F0:EA:16:28:99:A8:FB:0F:52:02:ED:1B:D5:85:57:2A:60:A2:74:43
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018678040FD0E3DFA7005972947816A95DF6
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/8OoWKJmo-w9SAu0b1YVXKmCidEM.roa
Signing time: Wed 22 Feb 2023 07:26:17 +0000
ROA not before: Wed 22 Feb 2023 07:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 80.66.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:04:0f:d0:e3:df:a7:00:59:72:94:78:16:a9:5d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 22 07:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f0ea162899a8fb0f5202ed1bd585572a60a27443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2a:fd:7d:2c:6f:a4:09:ee:fa:34:bd:91:bb:
ec:53:3a:e5:d1:16:e0:69:21:f8:d5:41:a2:bf:59:
2b:7f:cd:56:eb:25:85:e5:52:be:08:35:3f:da:ec:
4f:a3:85:27:43:78:84:1a:91:d2:c9:ec:5a:2f:2c:
7e:dc:75:69:10:bf:c7:12:da:b2:1e:f4:fe:ac:08:
e9:0d:73:64:07:10:68:4e:4d:96:d7:8c:21:03:9c:
69:4b:d1:4c:e9:57:ef:a9:54:7f:e6:38:15:67:6a:
28:8c:49:27:8d:8c:47:94:2d:6f:67:ad:32:20:01:
06:92:34:b8:b1:f8:92:67:73:e9:30:af:b1:22:b1:
0a:40:ea:9d:2d:9a:fe:3e:41:ac:d3:ce:81:29:79:
e2:11:80:0b:8e:7c:bc:fe:34:18:f5:4d:c1:f6:63:
b0:f6:50:bc:7c:ae:0d:ae:29:c6:5f:c4:62:c1:2d:
8f:88:4c:b7:41:07:48:c8:7f:5d:02:08:4f:d6:ff:
0b:01:d9:f9:ce:df:b2:3d:ec:d2:36:e1:cc:c0:ac:
dc:e8:f2:f8:44:c3:c1:ee:25:cb:af:d4:ab:9f:fe:
5a:82:a1:d8:3c:3f:f3:4e:4d:4a:c1:89:fb:d4:e6:
af:47:6d:20:ba:bc:3c:63:a5:09:17:9f:04:2b:b6:
6a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EA:16:28:99:A8:FB:0F:52:02:ED:1B:D5:85:57:2A:60:A2:74:43
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/8OoWKJmo-w9SAu0b1YVXKmCidEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:69:58:f1:7d:05:46:f2:ae:6d:5b:f4:b9:a6:86:dc:be:52:
47:07:cc:ca:ba:a5:35:4c:cb:0c:09:b6:bc:9b:8f:ca:8b:41:
4f:ac:eb:02:e9:93:8f:05:32:c3:a0:15:03:61:b0:7b:d4:36:
f4:32:65:14:8b:a7:80:e4:9f:fa:dd:c3:62:c8:ae:50:68:37:
62:82:80:b3:ac:c2:33:04:51:6c:21:ac:e7:41:9e:4e:61:47:
1f:e5:25:bc:e9:74:9d:c5:f9:e7:99:e4:00:ac:22:24:d0:4e:
a8:92:e5:d2:6b:c1:5e:01:64:e2:05:0e:53:7c:82:04:50:2b:
53:16:35:8a:49:b3:0a:5a:d7:6c:fb:e1:3a:c3:43:89:f0:34:
3b:a8:6b:5a:80:8e:e1:78:f2:3d:e5:13:27:1f:d9:6d:ff:f1:
ca:14:08:2c:62:fa:fb:9b:85:5b:9c:ea:2a:6e:c9:89:28:53:
a3:56:96:8a:f6:97:59:73:f6:da:04:36:63:0d:c6:3f:9d:21:
4a:46:7d:a6:c8:37:69:53:a6:cf:e6:e5:cc:48:45:4f:d2:92:
3b:bd:47:82:da:8c:de:a7:b6:ec:12:ec:dd:7e:8a:46:60:15:
35:c3:57:a0:83:47:f2:01:fb:d8:2e:60:32:3c:87:a6:6f:fd:
2c:39:61:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:35 2023 by rpki-client on console-ams.rpki-client.org