Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/wbd1y5hlkV9Omn7G_Rw0bAR5l7E.roa
File: wbd1y5hlkV9Omn7G_Rw0bAR5l7E.roa (raw, json)
Hash identifier: jqK823UpTw41awNYm43sXeK1BnEmxPRMV8aQ8O12ZzY=
Subject key identifier: C1:B7:75:CB:98:65:91:5F:4E:9A:7E:C6:FD:1C:34:6C:04:79:97:B1
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CB595BC0F614D012F018AB2C3FFB446C0
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/wbd1y5hlkV9Omn7G_Rw0bAR5l7E.roa
Signing time: Fri 29 Dec 2023 12:38:58 +0000
ROA not before: Fri 29 Dec 2023 12:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199785
IP address blocks: 194.113.233.0/24 maxlen: 24
193.37.70.0/24 maxlen: 24
193.37.71.0/24 maxlen: 24
80.66.89.0/24 maxlen: 24
80.66.87.0/24 maxlen: 24
87.251.78.0/24 maxlen: 24
87.251.77.0/24 maxlen: 24
87.251.88.0/24 maxlen: 24
87.251.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b5:95:bc:0f:61:4d:01:2f:01:8a:b2:c3:ff:b4:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Dec 29 12:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1b775cb9865915f4e9a7ec6fd1c346c047997b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:fd:df:02:d7:58:33:5c:98:11:33:cb:ab:
40:57:74:2b:fc:f4:31:74:f7:b4:c3:f7:04:da:0c:
18:e9:44:ab:fa:e0:d7:b5:1b:25:2f:87:ce:af:56:
96:6f:58:d4:bd:6e:ea:79:97:62:e8:b4:2d:08:ff:
1e:a2:9a:21:fb:12:2d:75:79:59:28:98:02:de:12:
54:d9:4e:5c:53:5b:80:1a:90:d0:e1:02:c8:6c:25:
26:3d:07:21:dc:bc:b8:b0:90:67:05:d1:37:74:c9:
09:1e:4c:90:67:93:94:05:74:ce:b5:cc:e7:7b:4f:
b3:83:3b:8a:2c:63:b3:90:8f:ea:b6:0b:29:47:06:
be:32:0e:de:6f:13:f5:e1:3a:22:98:e4:7a:34:66:
71:fd:52:77:fb:e0:ad:d3:6f:af:15:b6:14:14:a8:
2e:b0:ed:ca:5b:3a:3d:cb:ac:e3:00:17:02:25:ca:
21:d2:1b:29:a3:61:35:96:75:ec:4a:c4:fb:67:4d:
19:18:9b:7d:51:ae:4c:de:b0:37:12:fb:4c:6a:1d:
03:dc:6f:d4:38:18:69:e8:03:c9:32:c4:66:fd:61:
13:a9:c5:cd:43:fa:fd:8d:bb:40:dc:cc:8a:6d:c3:
c7:83:2c:44:7e:f3:a3:84:92:4c:11:55:e5:40:6d:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:B7:75:CB:98:65:91:5F:4E:9A:7E:C6:FD:1C:34:6C:04:79:97:B1
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/wbd1y5hlkV9Omn7G_Rw0bAR5l7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.87.0/24
80.66.89.0/24
87.251.77.0-87.251.78.255
87.251.88.0/23
193.37.70.0/23
194.113.233.0/24
Signature Algorithm: sha256WithRSAEncryption
65:3b:de:22:0a:fd:0d:0f:89:ee:61:ed:0b:c8:19:a7:54:93:
b3:98:a9:88:32:f8:2a:83:8e:2c:96:cb:da:64:0f:17:ed:13:
e5:13:31:29:9b:f2:75:ad:6f:56:1f:e2:2d:f0:38:3d:89:49:
64:60:e1:c9:54:db:b2:4b:df:cd:5f:75:f5:3d:5e:4a:f7:d4:
82:8c:f0:6c:96:e4:69:be:0f:6f:ca:78:8f:7b:94:af:27:3b:
b0:36:7e:be:b1:cf:28:88:67:38:1f:f4:e4:b1:10:a6:7c:56:
4f:21:67:02:8c:4c:c2:2d:b6:42:38:df:cb:84:43:79:b9:95:
29:b5:07:47:dd:25:76:ef:0e:8f:50:67:b9:5a:72:30:08:c4:
c3:b2:55:c3:01:ec:09:47:be:56:5c:34:56:2f:5c:4f:0f:d9:
4b:34:a4:ac:93:71:fa:93:9f:ad:ba:e6:68:cf:b3:60:55:16:
b0:b7:a0:16:ff:44:75:8d:19:0b:50:f2:60:16:89:46:3e:5f:
24:8c:70:51:9d:60:f0:96:99:c8:80:a0:89:4d:3f:dc:6d:fc:
0e:ca:b8:15:df:63:42:af:7f:45:52:8e:e2:c2:cf:01:a2:c8:
6e:52:0d:d9:33:ff:1e:86:fe:5c:32:35:ec:e4:81:d0:f6:0f:
df:af:c0:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:25 2024 by rpki-client on console-ams.rpki-client.org