Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eq9JH7y1B8w2_0IdhJL1rQqvHr0.roa
File: eq9JH7y1B8w2_0IdhJL1rQqvHr0.roa (raw, json)
Hash identifier: M8/J0gTSS/omOObcPByeOgRkIRvDjCX7CLvAxEhBfoI=
Subject key identifier: 7A:AF:49:1F:BC:B5:07:CC:36:FF:42:1D:84:92:F5:AD:0A:AF:1E:BD
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0186DABA67693D2D5666A708C5E1EBF1FCB1
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eq9JH7y1B8w2_0IdhJL1rQqvHr0.roa
Signing time: Mon 13 Mar 2023 11:28:14 +0000
ROA not before: Mon 13 Mar 2023 11:28:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
80.66.89.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.77.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ba:67:69:3d:2d:56:66:a7:08:c5:e1:eb:f1:fc:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Mar 13 11:28:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7aaf491fbcb507cc36ff421d8492f5ad0aaf1ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a7:1f:97:97:3e:47:01:ca:27:18:f5:b9:90:
19:11:a6:06:e4:38:57:25:96:49:5d:2b:56:54:b3:
a0:45:49:94:a4:4a:a5:be:3d:cc:3d:36:1f:4e:00:
54:17:90:22:17:ca:5c:c8:77:44:0d:07:67:20:f7:
b3:e0:d7:70:f5:5f:ef:15:2a:e0:c2:89:ec:9f:04:
9e:31:e2:0b:ec:80:25:69:93:9e:ba:36:fb:2f:0c:
f8:b3:45:97:5a:fa:75:26:94:6f:c7:67:01:4f:8d:
d9:d4:20:5b:d6:24:b3:31:1b:a3:ba:55:b7:fe:2a:
67:53:62:8d:50:a2:8e:87:c6:1c:cc:c6:7e:1c:ab:
3c:81:be:f8:fd:fd:fd:d0:0d:f0:28:41:ea:45:1f:
92:f1:85:9d:5c:62:0a:76:c7:1f:31:08:2b:17:90:
b0:d8:b7:61:76:bf:1c:63:f8:68:da:98:a7:fb:b0:
4e:da:6c:41:40:90:85:3f:d7:08:1c:4f:5b:62:7c:
a3:7c:df:c8:96:eb:b8:d5:96:f5:f9:cb:d7:64:c7:
36:d0:94:bf:ff:7b:8a:19:20:c5:31:dd:f2:fa:b6:
0e:f3:22:03:44:ba:12:ca:c4:8f:77:79:b1:98:99:
7d:62:bf:84:0b:6c:57:e4:e5:f5:60:7d:6f:31:f4:
5c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AF:49:1F:BC:B5:07:CC:36:FF:42:1D:84:92:F5:AD:0A:AF:1E:BD
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/eq9JH7y1B8w2_0IdhJL1rQqvHr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
80.66.89.0/24
87.251.77.0-87.251.78.255
193.37.70.0/23
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
41:de:b0:42:46:dd:86:f2:23:ed:66:95:75:03:3f:f8:47:7b:
68:37:a4:68:6a:c6:4c:64:13:0f:39:26:45:cc:bc:9b:e3:44:
8e:39:7b:b6:d1:3c:3d:ba:be:1d:78:5d:a6:3c:2c:09:14:66:
32:6c:94:d2:31:09:f9:67:46:fc:26:36:9b:c1:36:e1:3c:f2:
1a:1a:cd:c5:b4:3e:38:aa:28:a8:e7:47:94:02:dc:6d:8b:a9:
55:d4:cc:22:78:89:7e:76:43:95:c2:07:84:d8:dd:9e:85:18:
b0:92:fe:cc:09:af:15:eb:d3:0e:0f:ce:ce:1e:e5:61:aa:86:
37:39:2a:4b:21:4d:20:39:f3:ee:c9:77:57:dd:e8:f9:42:f4:
83:83:78:2a:a6:26:c9:ba:d3:5f:cd:15:b7:96:88:9a:06:37:
ce:81:c0:ff:37:f3:5d:20:7d:83:9a:d3:68:6f:a8:11:61:6e:
8f:8b:02:49:42:d4:57:4d:10:36:36:6a:a1:fa:bb:b1:fd:75:
14:3d:8c:5d:d6:d5:89:9e:e2:40:00:93:81:4c:ac:c2:ea:70:
b1:58:4f:d4:23:bd:d0:50:b5:81:14:37:c0:8b:67:c5:68:d6:
91:07:7b:67:42:5a:b2:4e:8e:f8:10:2f:17:e2:b5:f5:8c:e4:
7a:4c:63:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 28 14:20:37 2023 by rpki-client on console-fra.rpki-client.org