Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TSMILWxbEDvQc0apUugi0Pk-vbU.roa
File: TSMILWxbEDvQc0apUugi0Pk-vbU.roa (raw, json)
Hash identifier: KNZNDFSzx7B0vwNcaXKQsOV+yHCRLsHjd5NClwyB5Ng=
Subject key identifier: 4D:23:08:2D:6C:5B:10:3B:D0:73:46:A9:52:E8:22:D0:F9:3E:BD:B5
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570950F71705C0002F254F65B7592457E
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TSMILWxbEDvQc0apUugi0Pk-vbU.roa
Signing time: Mon 02 Jan 2023 03:44:55 +0000
ROA not before: Mon 02 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209559
IP address blocks: 80.66.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0f:71:70:5c:00:02:f2:54:f6:5b:75:92:45:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4d23082d6c5b103bd07346a952e822d0f93ebdb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:70:d0:00:65:e4:ff:a1:7f:66:cb:08:77:
16:7a:8f:fe:e3:f3:85:ef:61:0f:a8:c3:2f:0b:5d:
11:51:db:31:77:57:e4:49:a1:d0:90:ae:a5:63:af:
d9:9d:9c:45:10:15:24:92:12:cb:4f:05:81:15:84:
77:3c:96:b7:ae:d4:82:8c:f1:09:e9:cf:fd:d7:e6:
f9:30:71:3e:39:b4:0d:c0:17:74:f6:99:97:80:4d:
90:24:f6:2d:f5:6b:dd:43:ec:e8:d8:02:c8:02:01:
9e:1c:50:db:bb:0f:7b:81:c8:52:2a:87:d8:ec:e9:
12:da:c3:64:08:73:9f:79:8e:07:02:b5:c2:99:76:
9a:78:ae:82:a3:1a:d5:9d:8c:c1:8a:02:f6:b0:77:
4a:32:9d:82:97:8d:7b:8d:25:9f:30:f6:6c:60:aa:
30:2b:49:9d:3b:73:80:54:e6:e1:11:cb:26:cd:85:
32:5a:11:b9:35:91:a3:c1:74:f7:5a:8c:33:e5:84:
41:d7:08:0f:aa:4d:1e:90:5a:1e:ad:7d:93:a0:68:
b0:36:c3:49:39:89:4b:f4:7a:95:04:ca:e8:de:d6:
47:da:13:d3:b6:3e:fa:b2:db:c2:51:db:9f:cc:03:
f1:31:38:68:42:13:92:e2:54:c0:72:e9:53:89:5f:
c0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:08:2D:6C:5B:10:3B:D0:73:46:A9:52:E8:22:D0:F9:3E:BD:B5
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TSMILWxbEDvQc0apUugi0Pk-vbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.83.0/24
Signature Algorithm: sha256WithRSAEncryption
40:c5:e8:db:b0:e3:51:74:6c:bf:e2:22:ba:d5:a8:27:89:f7:
f4:b1:e1:23:a6:94:38:b5:6f:c3:82:d7:7c:9b:c3:92:4c:f5:
c2:a4:51:73:b3:0a:46:91:db:5f:96:bc:21:ab:87:76:c5:bc:
19:cf:d4:dc:5e:77:84:4a:9d:b4:17:78:63:dc:c1:b1:93:ee:
c1:5e:fc:8d:ac:b9:c6:e7:de:80:db:1c:b9:06:74:c9:b7:1c:
bb:e8:86:07:0f:db:bf:a3:0e:5e:8c:8e:40:54:85:5f:de:0c:
1b:c1:23:86:84:50:30:26:32:89:c4:09:c0:8e:8b:f7:20:a7:
81:a2:8e:b5:99:d4:87:36:dc:0f:dc:2c:41:e3:48:bf:33:fb:
ab:da:4d:a5:55:f1:a6:82:1a:62:06:97:0d:60:c1:fb:08:23:
ac:76:bf:25:e2:f7:0b:8e:9c:75:93:94:0d:5c:30:79:ff:f1:
e2:d7:f9:11:d3:61:75:48:e0:01:26:22:9a:a0:8b:f8:51:09:
77:c4:18:ff:d7:c6:c1:6e:4e:5c:61:7d:34:fb:1c:88:88:cb:
c5:f9:4e:89:f5:7c:46:c4:ec:ec:1f:fb:36:7c:d3:0c:f4:46:
c5:00:b0:f2:dc:a0:9d:87:e5:b3:17:06:0e:b5:3c:7b:87:e7:
d9:d0:0f:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlQ9xcFwAAvJU9lt1kkV+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjMwMTAyMDM0NDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDIzMDgyZDZjNWIxMDNiZDA3MzQ2YTk1MmU4MjJkMGY5M2ViZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMxw0ABl5P+hf2bLCHcWeo/+4/OF
72EPqMMvC10RUdsxd1fkSaHQkK6lY6/ZnZxFEBUkkhLLTwWBFYR3PJa3rtSCjPEJ
6c/91+b5MHE+ObQNwBd09pmXgE2QJPYt9WvdQ+zo2ALIAgGeHFDbuw97gchSKofY
7OkS2sNkCHOfeY4HArXCmXaaeK6CoxrVnYzBigL2sHdKMp2Cl417jSWfMPZsYKow
K0mdO3OAVObhEcsmzYUyWhG5NZGjwXT3Wowz5YRB1wgPqk0ekFoerX2ToGiwNsNJ
OYlL9HqVBMro3tZH2hPTtj76stvCUdufzAPxMThoQhOS4lTAculTiV/AJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE0jCC1sWxA70HNGqVLoItD5Pr21MB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvVFNNSUxXeGJFRHZRYzBhcFV1Z2kwUGstdmJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJTMA0G
CSqGSIb3DQEBCwUAA4IBAQBAxejbsONRdGy/4iK61agniff0seEjppQ4tW/Dgtd8
m8OSTPXCpFFzswpGkdtflrwhq4d2xbwZz9TcXneESp20F3hj3MGxk+7BXvyNrLnG
596A2xy5BnTJtxy76IYHD9u/ow5ejI5AVIVf3gwbwSOGhFAwJjKJxAnAjov3IKeB
oo61mdSHNtwP3CxB40i/M/ur2k2lVfGmghpiBpcNYMH7CCOsdr8l4vcLjpx1k5QN
XDB5//Hi1/kR02F1SOABJiKaoIv4UQl3xBj/18bBbk5cYX00+xyIiMvF+U6J9XxG
xOzsH/s2fNMM9EbFALDy3KCdh+WzFwYOtTx7h+fZ0A8R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:38 2024 by rpki-client on console-fra.rpki-client.org