Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/jivos42ZzlSMZTR1UheYvgg6K_Q.roa
File: jivos42ZzlSMZTR1UheYvgg6K_Q.roa (raw, json)
Hash identifier: P75NqaJF6zm/YyoqmvyRz6/RhBr9ewBFTqenhSmhrnQ=
Subject key identifier: 8E:2B:E8:B3:8D:99:CE:54:8C:65:34:75:52:17:98:BE:08:3A:2B:F4
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 01875A15AB5A69654EE7E01E65E13816E91A
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/jivos42ZzlSMZTR1UheYvgg6K_Q.roa
Signing time: Fri 07 Apr 2023 04:59:42 +0000
ROA not before: Fri 07 Apr 2023 04:59:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207883
IP address blocks: 87.251.70.0/23 maxlen: 24
87.251.68.0/24 maxlen: 24
87.251.66.0/24 maxlen: 24
87.251.88.0/23 maxlen: 24
87.251.86.0/23 maxlen: 24
80.66.68.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:15:ab:5a:69:65:4e:e7:e0:1e:65:e1:38:16:e9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Apr 7 04:59:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e2be8b38d99ce548c653475521798be083a2bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c2:35:7b:64:38:72:b8:68:de:ce:dc:9e:b1:
c9:77:63:b3:ff:51:42:9b:3b:a6:ad:ff:1c:ed:d6:
05:08:c7:32:6a:48:59:68:a2:60:ec:ee:f2:64:64:
12:5b:c8:8e:61:40:4d:46:34:02:da:72:89:0a:5d:
cd:f8:1d:44:11:3a:f1:4c:86:83:f1:3d:a4:73:10:
ee:81:6c:6e:90:d3:34:11:3a:bd:23:f7:5f:fd:0f:
b7:c4:05:41:b9:28:77:02:a3:d8:0d:e7:dd:cb:16:
6d:42:c0:bd:ac:6f:9a:b2:34:d0:fb:ae:55:d5:df:
84:b5:63:3a:ec:29:fb:ef:24:c0:49:7f:c0:11:d5:
88:a4:71:09:9c:e7:46:53:89:4d:d8:07:ba:c7:3a:
18:20:3e:74:3a:42:ea:91:1b:f2:db:65:de:63:ea:
eb:98:45:c8:d1:e2:e3:de:ab:97:65:49:9a:61:e2:
b4:36:a8:17:3c:77:52:3d:1c:ed:26:53:01:f6:ee:
75:c3:27:85:fd:d3:f2:12:55:c5:bb:dd:7c:dd:70:
b8:f2:1b:38:dd:70:78:78:2c:56:0c:72:85:04:d5:
6c:c8:ec:db:7d:20:f4:8f:38:50:79:f7:a7:44:d7:
73:e2:68:21:4c:40:97:05:76:4b:61:57:f4:47:df:
05:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2B:E8:B3:8D:99:CE:54:8C:65:34:75:52:17:98:BE:08:3A:2B:F4
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/jivos42ZzlSMZTR1UheYvgg6K_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.68.0/24
87.251.66.0/24
87.251.68.0/24
87.251.70.0/23
87.251.86.0-87.251.89.255
Signature Algorithm: sha256WithRSAEncryption
6f:e7:0b:c3:44:f4:82:23:f8:a1:12:86:42:07:7e:4c:16:9c:
25:2b:d6:81:11:8a:3a:70:0f:dd:9d:35:af:19:e9:f5:2c:d1:
83:ae:48:94:31:93:1d:71:52:40:ac:0e:e8:11:59:ea:dc:c1:
bd:d4:a0:8c:5b:a7:61:a0:e2:a9:65:74:1a:db:b5:5b:a6:4e:
e7:1b:56:1d:f8:40:da:cd:2f:6d:c3:94:ba:b1:34:66:5e:73:
eb:83:fa:c2:b1:9d:bb:1b:72:d4:db:be:80:36:d4:5c:f2:9a:
52:64:bd:f9:d0:1d:f4:8f:e4:9a:f4:27:f1:1d:df:6a:55:db:
55:99:05:c3:6c:8d:9e:ea:e9:49:1f:6c:08:d8:37:09:09:dd:
eb:c5:d3:fb:ff:0e:ea:ad:5c:9c:29:d3:da:37:91:b3:fe:1d:
4b:fb:31:d9:9d:a7:5a:50:68:f2:3d:00:58:18:6a:5d:3f:16:
d2:2e:17:b5:c1:ca:60:18:b1:bf:b8:2b:a3:01:47:59:4a:f6:
71:43:36:d2:3a:da:6a:a8:d5:48:81:9c:cd:0b:d7:f3:b6:3d:
34:10:b0:17:e1:ed:f8:06:41:d4:bc:f9:80:bd:15:2b:65:ee:
2b:b5:29:9c:8b:eb:66:d9:58:60:ad:fc:04:49:e1:9c:16:b4:
75:8b:8e:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 11:11:11 2023 by rpki-client on console-ams.rpki-client.org