Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Lzdpfi9bruDXTqsfijt8YsNRuwc.roa
File: Lzdpfi9bruDXTqsfijt8YsNRuwc.roa (raw, json)
Hash identifier: saNXC/0cA3gZlUFaE4zd9hYb52q4TanzffVD+IVC1Bc=
Subject key identifier: 2F:37:69:7E:2F:5B:AE:E0:D7:4E:AB:1F:8A:3B:7C:62:C3:51:BB:07
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0188996A797E6D5F582C521CA6E3E43B1380
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Lzdpfi9bruDXTqsfijt8YsNRuwc.roa
Signing time: Thu 08 Jun 2023 05:11:11 +0000
ROA not before: Thu 08 Jun 2023 05:11:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201671
IP address blocks: 193.37.71.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:99:6a:79:7e:6d:5f:58:2c:52:1c:a6:e3:e4:3b:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jun 8 05:11:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2f37697e2f5baee0d74eab1f8a3b7c62c351bb07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:a2:b4:92:a4:8d:8d:62:a3:8c:d0:b3:b7:
4d:58:b7:f0:3c:72:05:f4:ab:ea:8d:f6:56:05:f8:
cf:12:f1:17:65:75:ff:01:79:b2:28:cd:bd:86:95:
52:90:ed:d3:31:30:ba:f0:7d:74:68:c4:4e:9e:26:
49:ac:23:ec:48:aa:85:8c:65:97:05:90:19:7d:9a:
39:00:10:91:ad:b0:b1:10:82:3e:62:a4:e6:d0:fd:
9d:eb:5b:a8:f4:2a:0c:34:61:c4:dd:ea:91:ae:ae:
cc:9f:35:bb:e5:da:38:5d:93:ae:f0:50:0d:d5:f1:
0f:2b:ab:0d:bc:45:3d:c2:91:5d:6e:2c:57:77:06:
21:0b:70:75:00:7a:e1:a6:db:36:37:94:0f:5a:b3:
6a:5e:11:f8:33:d3:16:34:68:1a:83:a2:66:fe:06:
11:21:06:27:22:c1:5c:13:88:1c:00:36:5d:67:72:
d2:8c:06:07:76:ec:52:c1:3e:cc:81:b6:c6:fd:d4:
38:e5:29:39:22:d5:7a:c3:78:15:1e:f9:ad:b8:64:
4d:9d:44:75:64:83:37:06:91:03:f7:41:dc:ef:83:
85:98:1f:ea:da:bb:d0:9d:4d:3c:aa:72:80:18:96:
da:a3:eb:74:c5:b6:45:cd:26:e4:56:c1:7e:45:fc:
f5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:37:69:7E:2F:5B:AE:E0:D7:4E:AB:1F:8A:3B:7C:62:C3:51:BB:07
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Lzdpfi9bruDXTqsfijt8YsNRuwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
193.37.71.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:90:a2:6a:36:7f:00:cf:b8:1a:9a:8c:29:35:98:63:b3:82:
e1:e8:b7:5e:e8:66:6e:c2:66:ee:52:67:92:9a:54:22:95:8d:
82:7b:e5:85:20:e6:5f:0f:f2:ea:e4:75:25:24:14:44:67:73:
73:ba:bd:e2:27:17:76:a6:94:ee:96:d9:74:b8:4c:ae:37:f9:
16:e2:f2:04:40:4f:dc:ec:4d:ff:b0:6f:60:4b:56:30:2c:8e:
53:52:52:6f:91:0b:33:1f:e2:f6:77:0d:2e:86:7b:78:97:8f:
bd:b7:aa:d1:ec:4a:89:a1:e1:c4:30:2a:4c:8e:ce:ce:3b:0b:
c1:40:30:70:98:be:27:6b:f9:91:06:82:68:6a:fa:3f:28:55:
fa:e5:5c:99:03:05:6f:63:e8:c5:0a:42:b7:31:a3:4b:54:c1:
19:e2:0c:73:3a:72:03:cd:8b:bd:72:ca:65:b9:42:54:1c:f2:
f1:cb:a5:6d:7c:a1:9e:a0:c8:67:67:c2:61:4e:55:08:ca:37:
4d:e8:a5:ff:58:a3:d0:18:50:7a:38:97:98:87:6a:0c:5d:58:
b7:77:80:44:08:4d:f7:6a:38:d6:39:55:64:a4:58:59:90:d5:
30:d0:9c:f1:66:df:3e:ba:49:58:33:c5:5b:d7:37:e6:04:45:
2c:dc:f7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org