Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/YxhdpL8tfvQVakyTE75Zx1Dj4qs.roa
File: YxhdpL8tfvQVakyTE75Zx1Dj4qs.roa (raw, json)
Hash identifier: RUQoNlaM/uDARnFxIRsSHZ66PoubLKguOS2PenBr3SY=
Subject key identifier: 63:18:5D:A4:BF:2D:7E:F4:15:6A:4C:93:13:BE:59:C7:50:E3:E2:AB
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01857095111A8A9EDCB206C396977B388614
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/YxhdpL8tfvQVakyTE75Zx1Dj4qs.roa
Signing time: Mon 02 Jan 2023 03:44:55 +0000
ROA not before: Mon 02 Jan 2023 03:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211849
IP address blocks: 80.66.77.0/24 maxlen: 24
80.66.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:11:1a:8a:9e:dc:b2:06:c3:96:97:7b:38:86:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63185da4bf2d7ef4156a4c9313be59c750e3e2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:83:30:71:3b:ed:10:aa:b5:17:2e:4b:fe:36:
a3:63:16:e9:4d:c2:b9:78:bd:60:99:70:97:d3:7e:
3d:cb:3d:1b:e2:38:18:fe:f4:2c:45:a7:b7:73:b0:
69:99:fd:3d:5c:97:5e:80:93:08:ae:bd:26:0d:d0:
e1:33:a9:02:b3:72:3a:dc:57:5a:14:16:70:42:c9:
98:81:ef:70:17:50:f1:f4:fa:1d:d6:47:26:63:88:
10:5b:79:b4:dd:52:e4:21:54:51:a2:eb:66:9a:ae:
5c:ca:4d:bb:7a:e2:1c:e4:ea:72:8e:db:05:9f:b1:
78:46:ac:37:a6:26:9c:8c:bf:b7:3b:d7:1f:e9:5b:
ea:a8:28:62:dc:c3:85:4c:e9:a9:58:37:c3:c6:de:
7f:92:60:9e:6d:c1:62:11:0f:52:54:8c:97:1f:1f:
fc:42:53:6c:c9:bf:16:ae:47:ac:0f:47:6d:eb:b2:
c6:0a:eb:84:e5:f3:b3:a3:e6:71:2c:0e:30:65:d6:
60:9f:72:1f:b9:00:e4:f0:8d:9e:8e:b8:9a:10:32:
c6:4d:fc:06:ff:06:f4:99:3f:e8:58:22:b8:b8:71:
ee:b0:e2:c5:e6:71:92:13:52:2d:15:5a:3e:df:f5:
d1:e1:bc:d8:d0:91:a3:f9:f7:98:1c:dd:55:8a:7c:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:5D:A4:BF:2D:7E:F4:15:6A:4C:93:13:BE:59:C7:50:E3:E2:AB
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/YxhdpL8tfvQVakyTE75Zx1Dj4qs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.75.0/24
80.66.77.0/24
Signature Algorithm: sha256WithRSAEncryption
57:e0:57:6e:c1:c1:7a:e1:d3:7c:70:b8:9b:85:36:6c:83:93:
83:57:fc:a0:38:15:9f:aa:bd:f2:e8:93:2b:36:85:a8:0e:7d:
2b:8e:16:07:29:ff:8f:2f:20:bb:cf:fb:38:81:92:65:e9:dd:
d1:93:65:91:0f:d7:53:25:ce:c2:f7:87:ee:24:c8:43:31:ab:
96:fb:82:fb:7a:a6:0e:05:86:25:ee:8b:b1:cd:61:6c:fc:f5:
53:dd:1a:5b:ae:25:99:d8:47:33:62:61:39:a6:fc:e9:09:6b:
45:22:55:b8:aa:35:4e:83:0a:44:74:b5:ff:fe:92:1c:a9:70:
54:bb:24:26:f1:8e:87:2c:fe:5f:81:87:8a:ea:e1:06:fb:a4:
24:d3:9e:79:7c:c9:79:61:62:54:d7:fa:77:37:32:f1:42:6f:
98:e7:ee:78:db:a6:c9:f1:3e:6b:2e:ed:2d:97:80:e6:17:a0:
dc:da:b4:b4:fb:2e:26:9c:4a:d0:21:50:8a:b7:65:42:01:7f:
d0:b4:af:5e:bd:94:6a:62:6c:a1:3a:08:22:5c:62:95:1d:f5:
79:6d:e2:27:cc:3e:62:09:4f:c5:4e:f9:e1:68:b6:5c:f8:da:
5f:cf:a8:34:fe:09:b6:93:57:c4:cf:0b:9a:b5:d5:49:64:59:
63:16:c3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:25 2024 by rpki-client on console-ams.rpki-client.org