Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bz3c_73fPQS9BdrdRdSNccDGNmI.roa
File: bz3c_73fPQS9BdrdRdSNccDGNmI.roa (raw, json)
Hash identifier: Ezy1JgCB0A6/3Tc2zv7H4XBsXBe6dcm52QDAS6FW8QQ=
Subject key identifier: 6F:3D:DC:FF:BD:DF:3D:04:BD:05:DA:DD:45:D4:8D:71:C0:C6:36:62
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01875683F9A2842F5E34B153D596FE5518B7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bz3c_73fPQS9BdrdRdSNccDGNmI.roa
Signing time: Thu 06 Apr 2023 12:21:42 +0000
ROA not before: Thu 06 Apr 2023 12:21:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 80.71.230.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:56:83:f9:a2:84:2f:5e:34:b1:53:d5:96:fe:55:18:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 6 12:21:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6f3ddcffbddf3d04bd05dadd45d48d71c0c63662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:73:f6:ba:47:99:f1:c7:89:03:0a:45:aa:6a:
33:74:9c:e4:9a:ab:33:f2:5f:3a:22:2e:64:5b:6f:
68:1d:c1:f5:06:8f:05:fa:f7:04:0c:0e:6e:18:af:
63:25:7b:e5:14:2c:39:78:0a:8d:88:6e:66:33:04:
0d:ed:be:a2:be:85:54:f9:e1:6b:07:7d:29:48:38:
38:20:14:69:b1:d6:47:be:29:14:86:da:45:91:16:
97:88:af:3b:e9:d8:6c:79:5b:45:f1:95:8b:49:c0:
2f:0e:9b:fe:65:99:93:50:27:2e:0e:78:0c:44:09:
75:2d:6c:20:aa:44:d1:4b:bc:b9:d4:d8:9d:bd:04:
1b:e7:6f:16:93:79:4d:43:21:02:8b:35:05:65:e5:
1c:9e:b8:fe:12:f3:d1:55:4c:1d:60:d5:00:03:4c:
79:97:f1:05:c0:06:ec:a5:47:19:f6:c7:af:97:48:
88:9f:9e:ef:14:12:07:fd:d2:e5:23:9a:5d:44:9b:
55:93:5f:54:c8:ef:83:5e:16:c7:49:5b:d0:fd:35:
be:92:ac:0c:42:4c:d6:4a:68:ca:ea:2c:e3:1f:14:
da:e7:8d:34:68:37:e7:f1:1c:f5:a3:60:1b:3a:a4:
04:ec:f0:a8:e6:f0:3b:97:4b:7c:0a:c2:a2:70:c6:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3D:DC:FF:BD:DF:3D:04:BD:05:DA:DD:45:D4:8D:71:C0:C6:36:62
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/bz3c_73fPQS9BdrdRdSNccDGNmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:38:3a:cf:2d:f5:69:37:70:86:38:10:75:ae:71:23:d8:f5:
f8:fa:0e:cd:97:03:d3:53:e0:ce:8c:ad:fc:5b:54:e1:12:0b:
e9:1c:e3:bf:22:c0:3b:53:c1:e7:22:a1:d9:fe:28:5c:f6:92:
c0:9a:b0:f8:bc:72:66:9f:b9:84:76:aa:71:ac:de:61:e5:09:
a7:94:67:bb:5e:cc:d9:83:ae:51:0c:67:9c:6d:7f:3f:f9:d9:
bb:e4:f9:73:94:a8:20:ed:c9:fa:e4:4a:d8:a6:44:e6:e8:bc:
c8:e2:7d:84:fa:c6:f0:1d:a8:1a:04:ac:bb:19:c5:bb:d6:2c:
e7:9f:e1:f1:b9:e3:d0:f6:71:17:0c:cd:b9:ac:cf:17:e2:7f:
e2:ba:88:39:62:19:b4:b2:93:3e:53:00:56:d7:28:5e:df:ed:
e3:92:13:c6:d3:08:da:f9:bc:0f:50:07:d9:dd:44:75:5f:99:
11:77:90:64:33:77:cb:9c:63:cf:e8:97:07:32:da:bf:c4:09:
58:8a:66:0d:c6:fd:7a:eb:59:7f:ec:b7:44:35:23:06:d5:63:
bd:b0:45:a3:eb:5a:2e:e8:ff:6f:bd:0c:60:10:d4:b4:fc:89:
bb:df:d2:38:98:38:57:37:6a:3b:55:b2:10:44:aa:1c:10:b7:
9b:f6:0a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org