Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/qsFzDWS2XBvne4uOb0jq6hiQpKo.roa
File: qsFzDWS2XBvne4uOb0jq6hiQpKo.roa (raw, json)
Hash identifier: F0wGGHPpp7liPwovAY8lmZL7i/mTLnplxBa1P0NcC5w=
Subject key identifier: AA:C1:73:0D:64:B6:5C:1B:E7:7B:8B:8E:6F:48:EA:EA:18:90:A4:AA
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CB04AC0DA054E8729F5B84C2DEE54B979
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/qsFzDWS2XBvne4uOb0jq6hiQpKo.roa
Signing time: Thu 28 Dec 2023 11:58:58 +0000
ROA not before: Thu 28 Dec 2023 11:58:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
80.66.89.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.77.0/24 maxlen: 24
87.251.87.0/24 maxlen: 24
87.251.86.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 12:38:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b0:4a:c0:da:05:4e:87:29:f5:b8:4c:2d:ee:54:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Dec 28 11:58:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aac1730d64b65c1be77b8b8e6f48eaea1890a4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:91:e8:58:cb:ba:1a:1e:7c:d1:3e:a4:c4:9a:
f7:b2:cf:0d:fe:2b:78:b5:0c:1b:64:60:15:f3:2b:
42:9d:23:8e:7d:37:68:57:ef:4b:b2:23:7c:4d:a9:
47:1f:9b:ed:a3:11:c1:e3:cf:0e:06:85:f7:ce:85:
1b:7d:a4:9f:3a:06:c9:48:1f:12:2c:4d:6e:09:f1:
9b:81:0a:bf:dd:18:cf:a2:89:e9:c0:12:a4:7f:2e:
c3:6c:b6:23:19:ec:fa:f4:fe:1a:92:da:02:ad:9d:
0a:a9:ad:e1:02:2f:07:cd:3b:e6:10:e9:7f:37:75:
0e:b7:f4:67:1c:56:d3:a0:cc:9c:6b:ce:6c:32:e4:
e6:54:be:7f:a5:23:7e:b5:c4:38:63:43:0f:be:4e:
db:b9:a9:e8:ee:da:ac:93:00:8d:a2:28:45:9c:82:
f8:d3:f7:56:87:0c:24:71:29:86:e7:cc:57:8d:33:
22:12:89:5e:92:54:e4:40:5e:64:91:7f:eb:9a:db:
fb:65:8c:d2:65:3b:be:c0:91:3b:8d:eb:fb:42:da:
a7:07:d7:96:48:e7:79:e2:a6:f9:5c:18:b2:e3:54:
78:a3:bf:c7:af:bf:16:0b:ec:78:91:34:b2:42:6d:
3b:1f:ea:ee:3a:98:65:08:cd:da:26:77:07:6c:29:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C1:73:0D:64:B6:5C:1B:E7:7B:8B:8E:6F:48:EA:EA:18:90:A4:AA
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/qsFzDWS2XBvne4uOb0jq6hiQpKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
80.66.89.0/24
87.251.77.0-87.251.78.255
87.251.86.0/23
193.37.70.0/23
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
27:2f:7c:bb:ed:a0:a6:a0:83:91:eb:a9:5c:f5:93:97:6e:9c:
cc:d1:08:d9:ca:f6:48:61:72:2d:e1:47:55:04:72:b3:4e:24:
a5:bf:0b:96:b4:ea:58:96:75:97:a6:de:8f:59:96:da:68:d4:
25:e0:ab:8d:62:6b:d8:dc:eb:96:1a:b7:5e:23:d6:1e:71:3f:
4e:c2:c0:3a:11:84:44:a4:d4:76:59:9b:ab:3d:09:9b:03:06:
b4:35:85:ee:69:d4:6f:5e:9b:07:ef:6e:d4:b5:4c:12:40:6a:
16:ff:bd:d5:65:be:b2:39:54:81:5e:10:6e:b3:f6:bc:52:dc:
5f:22:49:f1:b3:d6:bd:2c:57:db:2d:a5:ae:fe:ec:73:9b:78:
e0:45:d9:79:6e:e3:a3:7e:5e:47:0c:1f:53:77:11:eb:d8:aa:
f4:bf:b0:8e:28:c5:13:93:91:f7:b1:f4:50:56:ac:d6:f0:a7:
d3:10:a0:79:9e:2f:55:9a:75:a8:32:47:ca:15:3e:40:5f:c8:
49:94:c8:7a:e3:a6:0b:7b:0f:ea:60:c2:17:96:41:59:0a:17:
0b:6f:05:79:fc:a1:ac:57:eb:8a:3a:4f:1e:5d:7d:7e:ed:13:
8b:86:31:a8:8f:94:87:9c:5f:dd:a2:d9:16:44:53:3e:0a:11:
3d:a6:46:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org