Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Pb3tJJMY4c4aqErGU-f_neDrtpk.roa
File: Pb3tJJMY4c4aqErGU-f_neDrtpk.roa (raw, json)
Hash identifier: 82Nw+6qamk34K5NhjzhBGfxaxUgPUHvNfQVIRGYinmk=
Subject key identifier: 3D:BD:ED:24:93:18:E1:CE:1A:A8:4A:C6:53:E7:FF:9D:E0:EB:B6:99
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018B4D56315CCA1F46D836E42F4F3244ED5B
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Pb3tJJMY4c4aqErGU-f_neDrtpk.roa
Signing time: Fri 20 Oct 2023 13:46:16 +0000
ROA not before: Fri 20 Oct 2023 13:46:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216127
IP address blocks: 193.37.71.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:4d:56:31:5c:ca:1f:46:d8:36:e4:2f:4f:32:44:ed:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Oct 20 13:46:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3dbded249318e1ce1aa84ac653e7ff9de0ebb699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:77:07:00:8a:18:c2:0f:28:04:bf:6d:16:
2c:94:27:0f:84:bf:00:7a:8c:44:0a:c3:44:74:76:
45:75:4f:39:38:ba:13:99:d3:c9:06:9c:95:6e:13:
d9:f6:e1:40:59:9e:12:f6:1b:44:22:df:8a:53:87:
e0:f5:da:9d:fa:dc:31:46:7a:06:30:62:28:a6:bc:
a1:b8:57:27:f8:ec:60:b7:80:84:0a:5b:11:8a:2b:
7a:a8:5a:3b:69:c9:b3:89:bb:78:9a:6c:96:1f:b4:
05:f2:eb:29:fc:1d:a6:95:24:a7:c6:3c:b3:f7:f9:
84:47:2c:3a:cb:f8:e0:4a:da:05:f4:67:7a:43:58:
a6:31:11:af:56:67:72:90:b5:23:df:a0:03:da:96:
2c:83:7a:32:47:09:cf:f1:c5:57:97:01:6e:5c:f6:
e5:a3:37:11:cf:5a:20:00:34:bd:9c:9f:da:80:94:
ee:dd:83:76:df:c8:a7:09:c6:4e:f0:0b:d2:ea:40:
10:21:e8:8b:40:e0:c8:79:a5:31:18:20:c9:84:a5:
97:c3:39:ac:cf:84:e4:3e:64:3a:c1:00:45:83:21:
cc:85:5f:5b:77:bd:91:46:86:ef:e3:87:2f:92:02:
bb:a4:7c:16:b7:4c:5e:4c:72:fb:93:8c:18:ed:7f:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BD:ED:24:93:18:E1:CE:1A:A8:4A:C6:53:E7:FF:9D:E0:EB:B6:99
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/Pb3tJJMY4c4aqErGU-f_neDrtpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
193.37.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:da:d2:7d:eb:a0:30:1e:dc:32:45:2a:c2:5d:17:26:27:44:
85:17:a4:b8:d8:13:b0:6f:9e:28:d3:aa:8f:c2:eb:5a:ec:89:
b9:5a:d3:ab:b5:87:4b:72:82:e6:42:cd:8a:6a:6b:52:46:63:
0e:2c:a6:63:58:af:9b:49:84:af:7c:90:40:d9:35:32:5b:7c:
a4:5e:4e:3c:df:21:a7:94:6e:0c:38:95:65:2a:f1:c3:24:e3:
b1:78:94:ae:7c:e6:43:4b:fb:8c:74:53:79:6e:f9:02:6c:2f:
f8:88:90:af:61:fd:e3:ed:63:14:7c:8f:f7:78:70:eb:45:01:
ac:8a:64:df:01:9c:4d:49:b8:e8:a2:95:28:38:1d:4c:af:ac:
44:79:de:20:df:ca:ae:9a:e3:27:1f:81:50:28:b3:3d:6e:ae:
f6:a9:ed:bc:bb:1c:fd:81:9b:c3:d1:67:22:f0:f3:c1:84:8f:
87:bc:7d:36:54:9d:1c:61:5c:98:3d:57:cd:b7:2b:f3:c8:25:
aa:10:f7:96:3a:75:d9:a7:18:bc:2f:ad:30:9c:02:23:f9:1f:
80:4b:ff:57:13:4e:77:fe:61:85:58:85:a5:a2:35:70:7d:e2:
87:8f:bc:69:73:52:d7:5d:aa:7a:27:cf:ed:ec:57:1b:8b:2f:
71:24:ed:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 14:20:37 2023 by rpki-client on console-fra.rpki-client.org