Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/VaSmCbh874yE7UfhIeBEU89DdRM.roa
File: VaSmCbh874yE7UfhIeBEU89DdRM.roa (raw, json)
Hash identifier: esmjDKkaAY3FTxGxJ2pVEN/q40cDGEE2P08244eiaaw=
Subject key identifier: 55:A4:A6:09:B8:7C:EF:8C:84:ED:47:E1:21:E0:44:53:CF:43:75:13
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570951009D7B973E26518ED4775BDF182
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/VaSmCbh874yE7UfhIeBEU89DdRM.roa
Signing time: Mon 02 Jan 2023 03:44:55 +0000
ROA not before: Mon 02 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210512
IP address blocks: 87.251.69.0/24 maxlen: 24
80.66.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:10:09:d7:b9:73:e2:65:18:ed:47:75:bd:f1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55a4a609b87cef8c84ed47e121e04453cf437513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b9:dd:a0:e1:6e:a1:da:73:40:40:bd:62:82:
dd:9f:ad:14:88:09:a6:11:3c:e8:09:c0:84:3b:4a:
d7:0b:77:7c:11:8d:21:eb:c5:a3:38:de:8d:f0:0a:
ea:ac:ea:6c:ce:87:16:67:e2:3f:92:c7:b6:74:90:
35:e9:60:23:c5:c6:58:8a:dc:59:db:61:78:b5:56:
1b:19:3c:98:2a:8f:62:7a:1c:64:42:c2:09:9f:e3:
75:1f:8b:fd:ab:87:6f:72:37:7c:d2:a7:fd:1c:25:
d6:a2:ff:5a:bc:46:b6:a5:15:fe:49:f7:19:c5:0c:
e5:d4:dc:ed:94:76:10:52:f9:16:99:bc:11:17:2f:
40:c0:cd:40:68:37:ee:fd:08:84:88:68:2f:c2:98:
1f:a5:e8:aa:4e:b3:89:2d:c0:29:55:13:26:cb:b7:
01:e2:46:7b:57:39:9d:b8:46:49:96:c8:b8:07:21:
af:31:1f:b1:99:9d:f8:cc:f6:6a:20:64:43:cd:1e:
19:a1:55:25:bc:dc:98:f4:de:a1:d8:69:bd:14:f2:
f4:1b:28:2a:04:f7:a8:2f:a3:e6:94:c8:21:83:ce:
ea:e2:ca:c5:de:dc:c3:b1:28:b7:8f:e0:18:ec:58:
27:1f:49:61:9a:c1:60:00:50:b2:5b:9c:0e:0a:1f:
49:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A4:A6:09:B8:7C:EF:8C:84:ED:47:E1:21:E0:44:53:CF:43:75:13
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/VaSmCbh874yE7UfhIeBEU89DdRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.72.0/24
87.251.69.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:4f:47:40:f7:b7:d3:6b:ef:47:31:c5:6f:e1:dd:d6:b9:ed:
7e:8b:21:2d:f2:66:95:90:69:eb:2f:7a:b4:ca:68:00:06:45:
ee:b9:94:63:48:54:b2:36:59:1e:ae:2f:61:d8:c6:fc:80:73:
bc:8a:16:fd:32:84:30:3e:b1:b2:0d:b3:46:89:c5:d2:f6:5b:
b9:14:47:16:a3:ae:af:1d:45:1f:f8:65:c8:25:f5:20:f0:51:
06:e7:a9:17:dd:e9:e1:50:a1:ca:7f:38:d6:dc:cd:de:b5:16:
1f:91:b2:97:17:04:92:90:e2:02:47:7e:91:c6:46:7c:6a:72:
54:35:91:11:bb:56:82:8b:fd:9e:c0:35:55:54:da:47:e8:b6:
69:ba:f3:d6:71:04:0b:c4:6e:74:d1:e9:db:71:e5:5b:9b:65:
66:d9:37:d8:cf:d4:3c:88:22:ba:4b:24:56:07:24:49:06:86:
37:8e:1b:11:79:4c:4e:ba:91:0c:94:73:c4:7c:8c:ad:7f:10:
45:04:82:44:2c:b1:31:26:df:92:3e:94:6f:bc:02:d2:bd:78:
3d:43:fb:42:1b:51:d2:ed:53:94:9c:3a:70:da:64:bb:59:ab:
5c:63:db:38:b5:50:a6:5b:20:bf:06:4c:85:57:fa:53:14:79:
73:83:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 09:01:14 2023 by rpki-client on console-ams.rpki-client.org