Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/QFJS7Guku0-A_La92FaPlFkG6YU.roa
File: QFJS7Guku0-A_La92FaPlFkG6YU.roa (raw, json)
Hash identifier: AsLqFX0TOa3s04ry3yFngjxmGzGnOpXgN4QNB5F09NM=
Subject key identifier: 40:52:52:EC:6B:A4:BB:4F:80:FC:B6:BD:D8:56:8F:94:59:06:E9:85
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0185E20E7911A122EDD0C1E99027DB43EABC
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/QFJS7Guku0-A_La92FaPlFkG6YU.roa
Signing time: Tue 24 Jan 2023 04:34:37 +0000
ROA not before: Tue 24 Jan 2023 04:34:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207883
IP address blocks: 87.251.70.0/23 maxlen: 24
87.251.68.0/24 maxlen: 24
87.251.66.0/24 maxlen: 24
80.66.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:0e:79:11:a1:22:ed:d0:c1:e9:90:27:db:43:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 24 04:34:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=405252ec6ba4bb4f80fcb6bdd8568f945906e985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:29:57:54:5c:6c:fb:93:ca:f9:ee:ce:74:89:
0d:b1:62:ed:b3:21:96:be:b7:28:3f:89:2f:68:9e:
e2:f0:79:39:6c:d5:e3:ca:f3:41:45:f7:15:01:49:
83:11:07:a3:38:cc:00:2b:74:c5:9c:9d:e2:a8:de:
bd:d3:22:b4:e8:eb:4f:d6:ab:b0:06:c1:40:d4:ff:
f4:28:2b:f0:5f:2d:81:ad:ca:19:eb:91:3d:35:b0:
46:35:fa:62:c1:4c:58:99:32:6d:3a:16:85:6f:9f:
80:8e:5f:bc:05:f6:ba:a9:a1:02:67:9b:bc:2a:a1:
06:f1:41:38:b0:b9:45:df:a3:a1:f7:fd:f2:62:5e:
08:b3:06:2e:a4:92:0b:09:7c:be:e2:fe:c9:d6:81:
03:de:fa:0a:de:c8:de:fb:6c:17:d7:f6:30:1a:c7:
45:0e:06:5c:50:99:9f:3e:fb:2e:ea:a3:a6:8c:00:
8b:6e:4e:c1:71:e2:37:82:5b:9d:0b:87:56:25:e3:
eb:3c:c9:20:f3:b5:c2:a8:11:72:2b:b5:cf:18:fc:
50:8f:01:10:93:d2:c8:b7:c5:f5:ac:55:49:bb:ba:
56:4e:d8:d6:e9:04:c0:43:93:24:b5:f0:37:81:b4:
04:da:aa:3f:05:92:27:2a:c8:6e:b0:b6:5a:f1:32:
d2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:52:EC:6B:A4:BB:4F:80:FC:B6:BD:D8:56:8F:94:59:06:E9:85
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/QFJS7Guku0-A_La92FaPlFkG6YU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.68.0/24
87.251.66.0/24
87.251.68.0/24
87.251.70.0/23
Signature Algorithm: sha256WithRSAEncryption
49:b4:bc:d7:9f:d1:d8:9f:f8:d9:72:ab:39:49:e2:f9:7d:c4:
4d:5f:1c:60:a4:d2:dc:ab:94:94:b2:f6:ac:87:4d:df:cc:bd:
50:a8:ba:74:91:ea:64:4b:6d:37:32:8a:0e:88:3d:33:4d:c9:
38:7b:68:09:d6:0a:4f:cc:12:82:c0:d8:41:df:e3:f7:eb:90:
9d:3a:59:3c:7c:a6:9c:90:41:48:fb:6b:42:0c:73:ca:af:d5:
17:98:d6:82:00:f4:a8:ef:7e:b0:88:c8:f2:e6:d7:ad:90:3f:
a6:62:e0:7b:ee:ca:e8:db:98:12:7d:91:95:16:43:89:26:94:
54:d1:f7:a4:5e:5e:1e:02:b8:1d:ff:65:73:3e:42:73:a0:43:
c4:27:66:33:f9:ec:67:1c:5a:3f:e6:4a:5c:b2:71:7c:ed:77:
b5:e2:60:ae:17:f5:6a:7d:77:81:64:d6:ae:5b:fc:34:ef:65:
ba:13:60:4c:1e:06:d9:2a:21:f4:79:f3:ef:ae:4a:a1:83:18:
81:eb:dd:99:d8:bb:49:a5:c3:4c:d2:63:ac:32:c0:e1:5c:59:
cc:cc:19:2c:de:4f:3a:d7:76:f6:d7:c6:ef:fb:0a:b8:83:db:
be:56:9c:60:ce:f8:fc:c0:3e:56:d1:b2:b3:2b:bf:96:67:11:
38:4c:6d:d9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYXiDnkRoSLt0MHpkCfbQ+q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjMwMTI0MDQzNDM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDUyNTJlYzZiYTRiYjRmODBmY2I2YmRkODU2OGY5NDU5MDZlOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiClXVFxs+5PK+e7OdIkNsWLtsyGW
vrcoP4kvaJ7i8Hk5bNXjyvNBRfcVAUmDEQejOMwAK3TFnJ3iqN690yK06OtP1quw
BsFA1P/0KCvwXy2BrcoZ65E9NbBGNfpiwUxYmTJtOhaFb5+Ajl+8Bfa6qaECZ5u8
KqEG8UE4sLlF36Oh9/3yYl4IswYupJILCXy+4v7J1oED3voK3sje+2wX1/YwGsdF
DgZcUJmfPvsu6qOmjACLbk7BceI3gludC4dWJePrPMkg87XCqBFyK7XPGPxQjwEQ
k9LIt8X1rFVJu7pWTtjW6QTAQ5MktfA3gbQE2qo/BZInKshusLZa8TLSKQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEBSUuxrpLtPgPy2vdhWj5RZBumFMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvUUZKUzdHdWt1MC1BX0xhOTJGYVBsRmtHNllVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEJEAwQA
V/tCAwQAV/tEAwQBV/tGMA0GCSqGSIb3DQEBCwUAA4IBAQBJtLzXn9HYn/jZcqs5
SeL5fcRNXxxgpNLcq5SUsvash03fzL1QqLp0kepkS203MooOiD0zTck4e2gJ1gpP
zBKCwNhB3+P365CdOlk8fKackEFI+2tCDHPKr9UXmNaCAPSo736wiMjy5tetkD+m
YuB77sro25gSfZGVFkOJJpRU0fekXl4eArgd/2VzPkJzoEPEJ2Yz+exnHFo/5kpc
snF87Xe14mCuF/VqfXeBZNauW/w072W6E2BMHgbZKiH0efPvrkqhgxiB692Z2LtJ
pcNM0mOsMsDhXFnMzBks3k8613b218bv+wq4g9u+Vpxgzvj8wD5W0bKzK7+WZxE4
TG3Z
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org