Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ByA8IvO1ercvEpirMuU4kkq_Q9s.roa
File: ByA8IvO1ercvEpirMuU4kkq_Q9s.roa (raw, json)
Hash identifier: /WPUK7DBTU00OLORCPQbJGVoQVvcIBJGJl5FshiF11c=
Subject key identifier: 07:20:3C:22:F3:B5:7A:B7:2F:12:98:AB:32:E5:38:92:4A:BF:43:DB
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F545A0E6B7E557406BB022B510C7A
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ByA8IvO1ercvEpirMuU4kkq_Q9s.roa
Signing time: Tue 02 Jan 2024 04:29:48 +0000
ROA not before: Tue 02 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206980
IP address blocks: 80.66.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jan 2024 09:39:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:54:5a:0e:6b:7e:55:74:06:bb:02:2b:51:0c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07203c22f3b57ab72f1298ab32e538924abf43db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:7c:0f:1d:32:dc:af:c5:6a:6c:78:6d:cf:
0f:70:63:5e:ae:bc:8e:f8:34:cc:85:e0:57:6a:57:
89:ad:22:9d:a0:be:98:53:8d:e4:34:3e:46:b5:10:
87:1c:76:6f:db:0c:1a:e1:08:23:79:87:52:e6:0a:
fd:6d:7d:43:20:49:25:74:20:aa:bc:54:9f:fa:76:
7d:a9:cf:2b:47:db:6c:3e:88:e1:eb:19:cd:40:c3:
61:46:ac:5a:a2:3b:c6:a1:3e:05:6d:8b:89:2c:19:
56:38:12:af:6d:99:be:39:8b:09:1a:d7:7c:fc:f4:
ec:ec:8a:4b:ab:7a:27:4f:03:a0:ff:57:a6:98:44:
af:38:32:ab:b2:c2:57:c2:6c:44:23:19:46:f3:02:
80:8b:a6:d0:66:6a:18:5a:6f:7b:82:4e:7a:22:c2:
0c:af:45:23:22:ee:d3:58:f8:ba:06:bf:f7:b1:f0:
cf:e8:51:fe:69:a9:e0:8a:f3:db:ae:99:eb:37:c7:
fe:de:aa:62:c0:4a:b3:01:0a:98:ac:75:48:90:ba:
13:90:c7:1c:a1:1d:38:a4:51:6d:5f:90:5c:62:8e:
9a:d5:0e:23:81:7e:76:c5:ac:37:5d:10:cc:f0:05:
44:00:79:ae:63:b3:64:b6:9f:e2:bc:9e:1b:ef:8e:
3f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:20:3C:22:F3:B5:7A:B7:2F:12:98:AB:32:E5:38:92:4A:BF:43:DB
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/ByA8IvO1ercvEpirMuU4kkq_Q9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.71.0/24
Signature Algorithm: sha256WithRSAEncryption
99:c3:cc:e2:c2:d3:7a:f1:af:7f:51:51:6f:76:8c:e9:15:de:
0a:36:fc:1b:af:c6:76:63:ab:6a:a8:d6:9c:e9:9a:f1:b6:fe:
9e:fb:cd:84:a6:8b:14:fa:17:85:d0:fc:f4:d8:39:48:f6:c2:
bb:b8:d2:1c:2c:7d:9c:1e:dc:f6:2d:87:1b:72:d8:24:30:ab:
2d:17:dc:79:4b:f1:44:e6:f0:5c:e1:c1:d3:2a:ed:07:59:a0:
e3:19:5e:76:4e:60:cb:4b:14:5b:e0:80:2f:28:04:d3:06:fc:
1b:dc:76:ec:ce:c5:bc:21:b7:ac:dd:56:15:19:a3:42:25:30:
83:24:7e:6b:56:06:b0:a2:f6:62:c9:42:f1:9a:5e:2e:cb:4d:
8d:63:5a:4c:95:c4:bb:ec:d8:76:8e:98:1f:57:b8:ac:54:e7:
f1:1f:a0:55:cc:af:7c:8f:20:2e:5d:11:8c:ff:32:19:9a:03:
9c:c5:76:63:db:e2:c5:b8:e0:72:b9:c7:74:15:91:3b:ee:5d:
ab:cc:c6:fb:85:d1:5f:65:86:3d:b4:3e:74:6b:fe:55:81:ee:
a1:83:1c:57:f7:de:a7:4d:20:b2:97:a6:a7:ab:73:37:6e:1e:
43:80:cd:9c:85:e5:7b:9f:a9:50:2a:d2:1c:26:00:62:6b:15:
4e:ee:8b:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb1RaDmt+VXQGuwIrUQx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjQwMTAyMDQyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzIwM2MyMmYzYjU3YWI3MmYxMjk4YWIzMmU1Mzg5MjRhYmY0M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZx8Dx0y3K/Famx4bc8PcGNerryO
+DTMheBXaleJrSKdoL6YU43kND5GtRCHHHZv2wwa4QgjeYdS5gr9bX1DIEkldCCq
vFSf+nZ9qc8rR9tsPojh6xnNQMNhRqxaojvGoT4FbYuJLBlWOBKvbZm+OYsJGtd8
/PTs7IpLq3onTwOg/1emmESvODKrssJXwmxEIxlG8wKAi6bQZmoYWm97gk56IsIM
r0UjIu7TWPi6Br/3sfDP6FH+aangivPbrpnrN8f+3qpiwEqzAQqYrHVIkLoTkMcc
oR04pFFtX5BcYo6a1Q4jgX52xaw3XRDM8AVEAHmuY7Nktp/ivJ4b744/dQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAcgPCLztXq3LxKYqzLlOJJKv0PbMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvQnlBOEl2TzFlcmN2RXBpck11VTRra3FfUTlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJHMA0G
CSqGSIb3DQEBCwUAA4IBAQCZw8ziwtN68a9/UVFvdozpFd4KNvwbr8Z2Y6tqqNac
6Zrxtv6e+82EposU+heF0Pz02DlI9sK7uNIcLH2cHtz2LYcbctgkMKstF9x5S/FE
5vBc4cHTKu0HWaDjGV52TmDLSxRb4IAvKATTBvwb3HbszsW8Ibes3VYVGaNCJTCD
JH5rVgawovZiyULxml4uy02NY1pMlcS77Nh2jpgfV7isVOfxH6BVzK98jyAuXRGM
/zIZmgOcxXZj2+LFuOByucd0FZE77l2rzMb7hdFfZYY9tD50a/5Vge6hgxxX996n
TSCyl6anq3M3bh5DgM2cheV7n6lQKtIcJgBiaxVO7ou2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org