Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/sAsjc7F3o91Zwtf_i4RhGFwFfiA.roa
File: sAsjc7F3o91Zwtf_i4RhGFwFfiA.roa (raw, json)
Hash identifier: F67TvHi1p0JALXr6NoewpB7kq2s9OBMXjxXHBletXYM=
Subject key identifier: B0:0B:23:73:B1:77:A3:DD:59:C2:D7:FF:8B:84:61:18:5C:05:7E:20
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018580A73D05E85F8B7C8B292D9736D853B5
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/sAsjc7F3o91Zwtf_i4RhGFwFfiA.roa
Signing time: Thu 05 Jan 2023 06:38:41 +0000
ROA not before: Thu 05 Jan 2023 06:38:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210546
IP address blocks: 194.113.233.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:a7:3d:05:e8:5f:8b:7c:8b:29:2d:97:36:d8:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 5 06:38:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b00b2373b177a3dd59c2d7ff8b8461185c057e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:67:34:6c:ee:a3:0f:04:d8:4d:de:77:23:d1:
c3:b8:7f:ff:65:3f:b6:e4:ab:62:42:7b:c7:f3:fb:
08:d9:e8:17:8f:28:93:db:c9:49:ee:14:48:6e:0d:
c7:98:c6:03:30:96:81:2b:de:0b:a7:b9:2b:f9:90:
61:89:3c:8b:8f:8f:cf:1a:6b:0d:0e:14:43:c0:a4:
87:9d:0d:d3:13:6c:29:1e:ac:e8:76:84:60:37:1d:
3d:15:7e:e7:bb:15:0e:9f:a5:69:46:e4:bf:c0:20:
6c:4a:87:3e:6d:5d:c3:35:a5:34:98:d1:61:7d:f1:
1b:5a:4a:b0:09:c4:da:b4:40:03:b4:da:e0:6b:7e:
4d:40:f9:e3:7b:b7:34:04:3a:17:05:aa:9d:a9:2c:
64:59:2d:2a:da:2a:bc:1f:50:73:3b:05:ed:00:01:
6c:ba:d7:7e:1f:f5:5a:99:0f:f0:67:39:0e:0b:00:
4d:e9:72:73:d7:4c:16:7f:39:f0:45:fc:bf:bf:b3:
19:07:12:d7:6b:d8:38:34:27:c9:a8:54:91:23:6c:
db:dd:9c:e4:4f:69:c2:63:26:ba:58:f2:af:0a:5f:
9b:3c:a1:08:15:f9:c5:5d:83:fd:e9:05:59:d0:36:
8c:89:b4:30:81:37:96:f8:2c:18:e1:ca:9c:19:88:
7a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:0B:23:73:B1:77:A3:DD:59:C2:D7:FF:8B:84:61:18:5C:05:7E:20
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/sAsjc7F3o91Zwtf_i4RhGFwFfiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.78.0/24
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:4f:7d:06:54:53:41:92:60:a6:1f:56:6d:17:bb:20:f9:2e:
e6:34:bc:f9:44:ad:2e:f9:28:37:e0:4a:22:08:e8:5f:dc:4a:
44:ab:ac:22:19:d5:d1:57:33:0c:0d:7a:d7:9c:b6:bb:d7:b0:
ec:72:7f:37:9a:51:ad:2e:73:99:92:6d:a1:c8:70:56:1d:c2:
4f:28:4a:86:83:2e:0d:b1:3e:e0:04:6d:72:74:3d:9e:27:f7:
ec:8a:0e:51:af:55:16:7d:f6:f9:5f:97:ab:d0:45:47:c5:c3:
bd:45:61:23:c1:67:9c:c1:51:80:0f:2f:d6:d1:6f:b2:14:e8:
28:0e:85:dd:77:f6:3b:ae:d7:61:3d:99:76:c2:9f:7a:99:7f:
26:79:40:33:3b:cd:ba:d0:20:38:ca:09:9d:3e:39:6b:3c:0a:
9c:66:53:50:b2:8a:1e:bb:c5:e3:29:b4:e4:81:3d:cc:e5:d1:
a4:9e:2b:d1:87:53:a5:e2:73:34:99:22:78:d4:7d:81:41:98:
1f:02:f6:33:3e:f3:09:55:5c:49:0e:21:cc:1c:d5:0e:9a:6a:
ce:e1:d8:be:c5:d9:6d:27:51:4c:a1:6f:74:78:06:71:3f:3c:
05:12:50:62:ad:5b:85:61:81:b0:14:c6:dd:2a:11:2b:d4:af:
2f:a5:47:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:36 2023 by rpki-client on console-ams.rpki-client.org