Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-qEo0YSJEjilqdlFwCDhPtRTSb0.roa
File: 1-qEo0YSJEjilqdlFwCDhPtRTSb0.roa (raw, json)
Hash identifier: LV7iT/Oyq141TFO9DgDvLt7kjIikUyWG3FcJV07VjVg=
Subject key identifier: FA:A1:28:D1:84:89:12:38:A5:A9:D9:45:C0:20:E1:3E:D4:53:49:BD
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018792E03C935A0A333140EC7FA2234800DE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-qEo0YSJEjilqdlFwCDhPtRTSb0.roa
Signing time: Tue 18 Apr 2023 05:39:41 +0000
ROA not before: Tue 18 Apr 2023 05:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.149.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 12 May 2023 12:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:e0:3c:93:5a:0a:33:31:40:ec:7f:a2:23:48:00:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 18 05:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faa128d184891238a5a9d945c020e13ed45349bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:2b:98:ff:11:de:2e:f0:24:b2:4e:62:68:
e1:6a:7c:9a:2c:55:4d:c4:1b:68:60:e6:4d:d9:fe:
79:4e:b6:f0:da:33:a5:bd:36:0c:64:20:6f:f4:7b:
86:d3:f2:4e:a1:9b:fa:b5:19:1c:6e:e7:03:2a:ac:
f3:ac:5d:a3:a4:d8:39:88:86:27:cf:8a:00:d1:18:
6a:d0:00:28:76:3e:a9:63:e3:82:86:91:62:17:3b:
1b:64:4a:cf:cd:e4:40:ef:16:d0:a5:34:a6:e6:8d:
22:17:75:a7:32:0c:76:95:0e:37:d6:fc:89:16:b3:
83:c0:c8:a1:e4:14:2b:13:f2:c2:97:2e:d1:f6:8e:
37:c8:13:1a:fb:29:01:f4:e4:77:f6:8a:ed:14:8c:
ff:df:e3:a9:4e:0d:dc:53:07:b1:63:4d:2d:32:30:
b2:e3:da:08:dc:29:f6:04:8c:8b:fd:be:df:7f:3d:
65:e4:02:3e:c8:79:62:71:57:e0:d1:b1:1e:f9:90:
70:c4:02:26:6c:f4:da:36:94:23:31:5a:79:a1:2d:
34:8b:f9:5b:57:d5:a4:01:c7:ec:0d:f1:21:b5:12:
cb:d1:80:d2:f9:69:93:49:c0:c2:ab:2d:7e:1b:ab:
7c:37:af:78:88:d5:86:8a:08:bb:62:8b:7c:ef:43:
4d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:28:D1:84:89:12:38:A5:A9:D9:45:C0:20:E1:3E:D4:53:49:BD
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-qEo0YSJEjilqdlFwCDhPtRTSb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.149.0/24
81.29.155.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e7:a9:4e:b9:f6:80:5e:75:dc:ac:55:b3:fe:36:60:45:e8:
e1:b2:a2:42:be:24:23:a6:22:e5:14:2f:8b:bb:22:1b:2d:90:
fa:7f:76:94:d4:44:ff:c5:9c:5a:86:94:44:3a:b2:a3:7d:f0:
2c:94:ff:cd:21:67:f8:ba:a2:f0:50:99:9f:4b:1f:69:2c:1a:
ae:22:ed:29:ba:8a:fe:a4:8f:a4:fc:0c:14:20:7e:ed:46:33:
39:d0:6c:a5:76:e5:1f:59:7f:7b:19:6b:70:0d:00:19:4d:f7:
e5:c7:36:1a:b1:44:b3:aa:82:1d:b6:63:2c:b4:12:03:04:86:
3c:90:d1:b9:96:7a:e1:72:e5:6b:23:df:84:7b:57:90:10:63:
c3:08:b7:5e:79:1f:c6:f0:ef:b2:5b:e1:93:b0:79:69:6d:61:
e7:58:6c:32:19:96:d9:57:c5:5c:da:c5:d7:9b:29:59:14:54:
b3:48:b7:3f:92:97:ee:a0:fd:1d:0f:c2:cf:2e:92:fd:83:b7:
bb:55:0f:48:19:c3:4d:33:2b:62:a1:54:72:f0:38:89:48:25:
92:d9:17:f2:09:8e:82:75:b4:5f:47:9d:30:1f:bf:4f:3c:19:
59:42:aa:26:4f:19:d2:51:9c:d7:7c:53:a6:e3:76:10:aa:11:
47:14:f4:ea
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org