Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/wAbjcIV7ghNvyRnkWUNEt6DFB38.roa
File: wAbjcIV7ghNvyRnkWUNEt6DFB38.roa (raw, json)
Hash identifier: /6yK2Sprwji33MmS5o++un6jqsPakbfHu2BQWaACjzM=
Subject key identifier: C0:06:E3:70:85:7B:82:13:6F:C9:19:E4:59:43:44:B7:A0:C5:07:7F
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CCA2A49620BFD659F750DCD0E53F6C462
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/wAbjcIV7ghNvyRnkWUNEt6DFB38.roa
Signing time: Tue 02 Jan 2024 12:33:38 +0000
ROA not before: Tue 02 Jan 2024 12:33:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216159
IP address blocks: 80.71.239.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 07:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:49:62:0b:fd:65:9f:75:0d:cd:0e:53:f6:c4:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 2 12:33:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c006e370857b82136fc919e4594344b7a0c5077f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:97:8f:d3:63:7e:1e:2b:2b:a5:ed:19:b1:43:
0e:bb:30:ab:81:cf:29:86:ab:9d:22:93:42:94:5f:
1e:84:a4:3c:a6:6c:c1:89:cb:36:74:b2:ce:ca:d2:
39:56:ea:b7:2c:93:73:7c:41:79:3d:2b:2b:61:d5:
1b:e4:27:5e:85:91:cc:d8:20:ad:8f:52:7b:3d:d7:
3e:11:cc:76:54:86:0e:d4:cc:7a:7d:86:8d:18:41:
5f:a0:c8:d8:19:de:14:53:df:f5:7f:3a:60:07:0d:
38:0a:73:57:a6:ad:0e:79:32:9c:21:91:69:f7:be:
ab:9c:a8:6c:e9:d1:11:ec:80:85:34:ab:98:cf:18:
95:2b:bb:47:e0:63:03:3d:a3:c4:d0:bc:df:a7:f0:
b0:2e:67:81:b0:61:d0:89:23:52:77:b5:ac:98:b6:
b9:3d:66:46:f5:a9:5d:3c:02:43:fe:a0:b8:ea:5f:
91:94:37:0f:c2:d1:b2:3c:45:7a:44:a0:fa:c1:75:
ec:94:0c:3c:ea:61:90:99:91:18:c8:f7:2f:28:35:
78:b8:26:40:fc:f1:7e:96:f6:c0:73:6e:cd:df:d5:
df:88:ca:27:18:b3:19:2a:cb:61:02:42:68:8c:7f:
d9:d8:83:f8:c2:f5:bc:f3:17:c3:a2:f4:b8:98:07:
fc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:06:E3:70:85:7B:82:13:6F:C9:19:E4:59:43:44:B7:A0:C5:07:7F
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/wAbjcIV7ghNvyRnkWUNEt6DFB38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
97:de:f7:d3:84:be:3a:8c:09:ab:ec:f4:79:ac:26:10:1d:91:
bb:f6:e9:04:8a:c6:a5:e1:29:bf:10:c8:25:9c:ba:84:de:f5:
c6:16:8d:02:6b:d5:aa:3a:71:da:36:60:05:c2:e7:eb:8d:47:
1e:6c:61:ff:51:93:37:6c:09:e2:ce:3a:50:36:08:83:47:82:
7d:85:4e:72:93:ba:78:37:af:e3:6c:dd:2d:1f:e0:40:47:d2:
ab:a2:79:67:bd:08:67:57:19:f5:f3:d8:9b:41:fe:64:fc:70:
69:e1:6a:3d:7a:4e:9a:47:47:2e:09:7d:73:03:97:d7:8a:a1:
09:92:b0:53:cf:4b:30:b3:8c:ee:36:48:1b:01:8e:cf:be:41:
a2:9d:8d:ed:33:d3:b6:ad:aa:f3:82:08:01:fa:b6:f8:c6:21:
c2:f6:be:11:2d:51:50:db:3e:66:b6:56:c1:e3:d6:5e:b0:0d:
8b:b8:34:fe:3e:69:81:bb:e9:72:e1:81:4d:ba:08:3b:a2:92:
94:c4:04:2d:71:a2:47:e1:d0:af:00:a6:92:aa:5a:81:05:81:
8f:67:a1:33:3e:4b:6d:3d:2e:53:5f:8d:7f:0a:46:38:a4:5e:
b7:f1:a9:8c:58:27:79:27:d7:b9:ee:a4:b5:81:1a:18:65:77:
9c:51:80:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 19 09:21:46 2024 by rpki-client on console-ams.rpki-client.org