Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/c5uOnKAobVqiaSpqbB6_tIrM_Xk.roa
File: c5uOnKAobVqiaSpqbB6_tIrM_Xk.roa (raw, json)
Hash identifier: noiohBljcvRHq4Vw9MtODceWi+tjPgmaatyzJF9qqME=
Subject key identifier: 73:9B:8E:9C:A0:28:6D:5A:A2:69:2A:6A:6C:1E:BF:B4:8A:CC:FD:79
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0186109826C59E4CF646914EE31830C0B9FA
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/c5uOnKAobVqiaSpqbB6_tIrM_Xk.roa
Signing time: Thu 02 Feb 2023 05:27:32 +0000
ROA not before: Thu 02 Feb 2023 05:27:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20803
IP address blocks: 80.66.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:98:26:c5:9e:4c:f6:46:91:4e:e3:18:30:c0:b9:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Feb 2 05:27:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=739b8e9ca0286d5aa2692a6a6c1ebfb48accfd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:06:08:3d:e6:29:e5:2c:a4:a2:92:6f:f9:d9:
97:a2:2d:ad:68:80:bf:33:a5:15:6b:91:b9:93:07:
eb:4c:c5:83:86:72:18:21:ba:e5:9d:eb:16:74:98:
6a:12:f3:6e:dd:f5:d6:3b:17:86:6b:56:7e:84:c8:
d7:80:62:86:3f:60:af:9e:b0:cc:20:4d:b3:0b:b1:
e0:3a:9c:8f:86:92:c3:31:c7:e5:be:7a:5f:05:0b:
48:60:2a:cf:a0:28:ce:9c:3e:45:4d:81:92:2e:e3:
6e:56:0a:37:e7:3a:21:ba:8b:a3:ec:3e:ea:5f:c1:
7c:e7:1c:09:f0:86:8f:a2:02:48:7f:96:d2:39:ee:
a2:dd:9b:db:da:7c:cd:06:78:86:7e:45:18:bb:e1:
9c:19:c5:f1:c5:ca:dd:89:39:57:e8:63:af:d6:8d:
06:a1:83:fd:7a:28:b0:d9:db:95:92:77:11:97:06:
3b:0e:3f:d4:f9:ca:38:0b:7f:4b:c2:bd:62:3a:9d:
50:34:d0:fe:27:e3:bb:4b:95:a1:42:41:85:89:74:
2f:21:db:ad:3a:42:12:06:48:12:2b:30:1e:10:6a:
a5:ac:5b:cb:2b:dd:1a:5d:6f:e4:24:d7:4b:27:c9:
ba:90:10:af:ab:6b:a9:4b:27:3d:f3:6e:4e:a4:36:
8a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9B:8E:9C:A0:28:6D:5A:A2:69:2A:6A:6C:1E:BF:B4:8A:CC:FD:79
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/c5uOnKAobVqiaSpqbB6_tIrM_Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
Signature Algorithm: sha256WithRSAEncryption
47:89:94:f0:57:28:2c:aa:d9:ee:04:76:a5:bf:97:fa:bc:0c:
69:61:bd:e5:95:2c:6c:ae:ea:d0:fb:5b:ac:15:d6:92:8e:9b:
ee:3e:f1:20:65:e4:16:10:70:50:cb:b0:9d:22:46:35:fd:d2:
f7:2d:ba:4d:a8:48:8c:b9:8f:08:3a:2f:11:22:33:3e:4f:20:
20:91:aa:1a:d8:6e:d8:c7:5d:b5:f2:2b:ec:07:39:2a:c3:3f:
6e:21:cc:8e:ae:53:db:2f:30:27:eb:18:a4:06:31:eb:4f:70:
a1:69:2b:c3:7d:27:68:4e:29:bd:be:17:c5:ff:8e:a1:bf:03:
b8:72:50:8a:d3:e7:d7:8b:67:cb:41:5e:7f:d7:2e:6c:61:34:
3a:75:43:cb:74:a6:9a:33:b2:8f:fa:a1:84:4c:82:c2:ab:92:
6a:a7:e0:f7:83:fd:71:26:2e:3b:66:27:e2:42:41:22:22:eb:
e0:ce:50:fe:00:2f:d3:38:22:33:73:ea:6f:f8:65:48:89:05:
83:fb:b2:04:3b:4e:1a:f0:9d:f0:84:f7:d3:8f:ed:aa:50:ee:
20:f5:38:fc:92:11:5d:d2:d0:e2:f9:27:f0:9b:ad:04:a9:19:
e3:d0:e2:c9:bc:59:b2:1c:96:fc:15:7d:95:7e:05:05:42:4e:
e3:89:10:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org