Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/xF7LcEbyd6Dt_y_6OIOZMtjJc5Y.roa
File: xF7LcEbyd6Dt_y_6OIOZMtjJc5Y.roa (raw, json)
Hash identifier: TCPKig/bjgLTGhw4fQdgefUMcwqp7EVV/HAzDain7rE=
Subject key identifier: C4:5E:CB:70:46:F2:77:A0:ED:FF:2F:FA:38:83:99:32:D8:C9:73:96
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018570950C871B33E7669A4BAA0CF59470AE
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/xF7LcEbyd6Dt_y_6OIOZMtjJc5Y.roa
Signing time: Mon 02 Jan 2023 03:44:54 +0000
ROA not before: Mon 02 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44587
IP address blocks: 80.66.89.0/24 maxlen: 24
217.151.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:0c:87:1b:33:e7:66:9a:4b:aa:0c:f5:94:70:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c45ecb7046f277a0edff2ffa38839932d8c97396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:ae:16:f1:71:48:f0:a6:e3:fd:44:5f:e3:
2f:51:c8:97:bc:2d:7c:fe:ee:cc:db:cb:57:3b:bc:
0c:28:28:44:b7:15:45:27:21:91:4b:90:0b:ac:0f:
b0:93:1d:63:3c:0d:3a:fd:63:67:a3:52:78:c8:2c:
e6:61:3d:90:1d:48:16:76:15:04:42:3a:ef:51:2e:
12:cc:91:e3:46:d6:28:17:3d:ef:56:40:0e:22:a4:
f8:4e:6f:f1:ec:49:98:1b:0e:4c:18:6d:9b:b5:88:
be:33:13:40:ec:13:54:ee:d6:1d:46:53:ca:12:7c:
45:da:12:fb:17:52:b7:69:ce:34:47:35:55:1b:73:
4d:ee:41:68:8c:50:ac:c3:bf:6d:e3:0a:15:f6:96:
7a:d4:13:38:53:55:bf:14:21:12:52:9e:54:aa:06:
2c:da:30:a2:5b:34:d6:0e:41:18:c1:2d:45:52:e7:
f9:f5:e3:fb:59:ad:ab:a6:b1:aa:19:12:19:57:76:
03:53:55:a1:e5:dc:1d:6d:53:06:d4:2d:54:52:72:
a5:fe:0b:b5:07:00:3e:9c:85:40:41:31:08:62:2f:
ff:93:ef:9f:ee:98:c5:5a:60:b9:5c:fe:90:54:48:
2a:0e:7d:b7:15:f9:f7:e9:91:75:53:b0:f0:7c:e3:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:5E:CB:70:46:F2:77:A0:ED:FF:2F:FA:38:83:99:32:D8:C9:73:96
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/xF7LcEbyd6Dt_y_6OIOZMtjJc5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.89.0/24
217.151.228.0/24
Signature Algorithm: sha256WithRSAEncryption
77:71:1c:9b:37:c7:09:4b:44:69:5b:c2:3e:7e:fa:ae:8f:b2:
3a:2f:ec:60:ee:1c:d6:3f:11:e9:3f:42:5d:07:67:09:fe:5a:
20:7a:42:e9:5b:bd:ba:80:f9:49:ff:99:cd:3e:e4:f1:3f:4b:
b7:f3:e3:eb:68:e8:67:22:9c:a2:f3:67:cf:67:fa:45:db:8d:
a6:9f:a9:6e:93:7e:20:c3:4d:bb:ad:79:a3:ba:1b:2b:36:09:
24:e2:b0:47:ea:d5:2d:63:c8:2e:b0:a2:64:1c:74:83:86:d8:
cc:08:6d:70:f8:e9:d7:7d:40:a3:f1:f2:1f:5a:5a:cb:5b:55:
b6:ff:35:c9:ce:a5:ab:c7:ed:05:ce:5e:cc:ce:54:23:b4:91:
3d:b3:3f:be:92:4d:f6:94:78:92:86:c3:2a:c6:87:26:69:7d:
19:a4:00:c5:fb:67:09:bd:c6:ef:aa:2d:a4:f7:f4:c0:29:54:
a4:5b:88:85:ec:9c:e0:f3:c1:83:ea:ad:f4:7a:cc:76:dc:fd:
92:b5:4b:d3:da:fe:50:ca:15:7f:0a:de:4c:28:8f:24:cf:03:
94:7f:c4:ab:d6:38:13:cb:c3:ec:11:62:f0:df:28:3e:d9:f0:
76:fb:d1:86:73:a7:46:b4:c1:04:5e:e3:7c:73:a1:8a:cd:95:
a9:f6:a7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:53 2023 by rpki-client on console-fra.rpki-client.org