Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/rFLB3irV0T7SQuiQMRCsPY0k038.roa
File: rFLB3irV0T7SQuiQMRCsPY0k038.roa (raw, json)
Hash identifier: DeJflmDLIwXqgGmmRnjSkYqGaVM3egmDoLRhcoTq6rw=
Subject key identifier: AC:52:C1:DE:2A:D5:D1:3E:D2:42:E8:90:31:10:AC:3D:8D:24:D3:7F
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 0185B94FBC435484E8C92DBFA98152757B1E
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/rFLB3irV0T7SQuiQMRCsPY0k038.roa
Signing time: Mon 16 Jan 2023 06:41:28 +0000
ROA not before: Mon 16 Jan 2023 06:41:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 87.251.72.0/24 maxlen: 24
80.66.69.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:b9:4f:bc:43:54:84:e8:c9:2d:bf:a9:81:52:75:7b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 16 06:41:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac52c1de2ad5d13ed242e8903110ac3d8d24d37f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:47:f6:38:d8:75:06:63:0d:ac:82:6b:66:
aa:bb:84:d2:05:6c:af:bf:33:90:a0:b3:7b:31:7e:
76:47:50:58:eb:5e:0d:f1:a2:83:b1:b6:89:7c:fc:
21:06:bd:60:07:4e:e5:27:25:4b:6b:17:98:89:93:
af:e4:cf:60:47:80:a0:a7:c6:b6:76:e1:67:f8:07:
c7:80:53:72:a3:a6:0c:6b:4d:26:66:32:f8:3d:e3:
1b:a5:69:53:01:2d:03:a4:2e:81:13:49:2c:bd:d5:
70:e2:d8:41:28:f5:45:01:19:9d:0a:ab:b8:66:b2:
05:a7:c2:02:15:39:9f:2d:f8:af:6a:54:29:01:75:
44:27:67:42:ac:d0:53:d1:d9:7c:a6:e7:fe:f3:cd:
ae:b5:aa:c3:64:01:db:07:d5:4a:1a:94:5f:99:77:
75:2c:69:76:1d:55:e2:9c:f9:ae:12:4e:73:34:bd:
bc:cf:e3:74:ad:3e:b1:de:ce:eb:e0:8a:57:6f:89:
c1:5f:10:df:7e:2f:fc:4a:26:a3:15:96:85:39:03:
e9:b6:6c:5f:b6:07:ed:4f:6f:dc:4c:d0:d6:af:ea:
fd:8c:b6:06:57:93:75:9d:8d:de:b0:e6:f5:c8:19:
af:50:3d:06:cc:80:c0:1c:a3:da:45:e7:fb:3b:77:
b2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:52:C1:DE:2A:D5:D1:3E:D2:42:E8:90:31:10:AC:3D:8D:24:D3:7F
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/rFLB3irV0T7SQuiQMRCsPY0k038.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.69.0/24
87.251.72.0/24
Signature Algorithm: sha256WithRSAEncryption
33:78:4a:ee:a6:34:47:b4:d3:94:d4:fb:67:b6:86:ab:7a:34:
0d:02:5e:c7:3b:b7:a6:0e:2f:e0:76:a7:1c:69:66:6e:7b:8f:
a0:d3:f9:4d:ad:6a:58:11:5e:31:2c:27:fa:99:72:e8:c0:10:
6d:f1:e3:54:4a:36:e5:55:fe:bb:14:97:43:00:ce:fa:cb:4d:
4a:cb:71:7d:db:64:04:7d:bb:5c:20:37:90:9b:49:57:73:d4:
32:fb:4c:83:fb:f1:41:68:8a:94:59:d3:3c:f9:5b:3c:42:fd:
b0:ed:97:0a:3c:5d:67:72:2e:7d:63:0c:81:ea:47:29:f0:dd:
6c:57:99:18:4d:2b:72:4a:c7:92:60:8a:20:57:07:62:d5:0e:
95:5c:5c:0f:ac:b6:56:02:55:1e:67:13:96:91:dd:cc:36:d2:
da:4f:56:de:cd:8d:e4:7d:0b:bf:4c:70:82:1b:8a:5c:80:25:
52:4d:44:84:19:d0:0e:a0:98:a5:28:3d:7d:36:4a:bd:6b:83:
2d:34:ec:8e:f1:3d:7e:a5:da:1c:f3:c7:5d:65:88:be:da:07:
71:3e:98:1e:18:49:b5:37:ee:43:ec:26:fc:8a:2d:16:eb:01:
a8:2d:3d:f8:bf:18:73:43:67:98:a4:c4:82:32:a5:b1:eb:59:
04:93:22:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:50 2024 by rpki-client on console-ams.rpki-client.org