Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1P3dsmAJJ9YiTThXo3wz6tkj0L4.roa
File: 1P3dsmAJJ9YiTThXo3wz6tkj0L4.roa (raw, json)
Hash identifier: 7YjuX1unn0WUxsVZsyPgSj36H6ZYZrWDdzVh2uHhzYA=
Subject key identifier: D4:FD:DD:B2:60:09:27:D6:22:4D:38:57:A3:7C:33:EA:D9:23:D0:BE
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0187C74B1D81035648247A5275D7A25A5D84
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1P3dsmAJJ9YiTThXo3wz6tkj0L4.roa
Signing time: Fri 28 Apr 2023 09:56:41 +0000
ROA not before: Fri 28 Apr 2023 09:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 81.29.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c7:4b:1d:81:03:56:48:24:7a:52:75:d7:a2:5a:5d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 28 09:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4fdddb2600927d6224d3857a37c33ead923d0be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c9:61:e1:6e:58:18:97:cd:ef:dc:cb:ff:27:
94:23:7e:09:d2:75:de:53:0c:cf:fd:fd:7f:a0:96:
28:55:99:5c:ba:d5:7d:fb:d4:ba:95:38:ad:7b:66:
2a:95:53:e5:1e:c2:0f:9a:cb:ad:38:82:3f:01:0f:
fc:62:b8:8d:be:c0:c6:b4:84:e7:0d:30:e0:46:db:
ee:ba:66:7a:c5:2f:6a:17:74:40:07:3e:c9:b6:8f:
a8:29:25:d9:b5:b8:2d:c5:d7:b4:b2:34:e5:97:e6:
fc:d9:71:b0:2f:cb:7e:22:8f:10:5b:38:9e:29:8d:
02:63:71:c2:2e:1c:bc:51:e4:d1:38:2a:2e:6e:be:
21:7d:79:a6:ee:90:c9:85:61:24:56:db:cc:ac:d5:
9e:ef:dd:58:ab:59:da:e4:30:52:bb:1e:76:31:b5:
52:8d:2e:f0:44:fa:6c:15:37:e1:af:ee:00:87:34:
23:74:8e:32:76:4b:1d:05:88:a1:e6:e0:bc:04:a9:
6e:4d:45:7d:4c:56:22:f2:22:7f:ae:ea:b2:a4:53:
f3:46:5c:30:97:2e:76:9c:cf:76:c4:68:8b:7d:17:
0a:e8:88:2f:bc:c8:f1:59:e2:e3:75:40:44:45:aa:
b0:5c:f7:a6:9a:fb:fa:31:8c:92:20:13:99:09:dc:
4f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FD:DD:B2:60:09:27:D6:22:4D:38:57:A3:7C:33:EA:D9:23:D0:BE
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1P3dsmAJJ9YiTThXo3wz6tkj0L4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
Signature Algorithm: sha256WithRSAEncryption
82:17:db:50:62:b6:47:9e:a4:24:9c:8f:1d:45:02:0c:b3:37:
07:32:bb:df:6d:1e:af:4a:f9:34:59:9d:5c:39:81:1b:d5:aa:
b4:98:9f:e6:a8:47:bb:14:4b:17:92:8c:8e:f0:c0:c2:02:78:
a1:92:fd:33:84:eb:89:54:80:ca:09:d4:f2:5b:4f:dd:e9:77:
ea:2c:7a:09:27:5d:75:36:3f:89:a0:8c:89:ca:53:82:fb:5f:
90:10:e3:10:f7:e8:f8:37:90:f9:aa:5d:06:86:2d:45:ae:94:
b9:e7:a2:ba:ab:e9:53:0c:d2:3e:05:c7:ea:62:ef:b8:62:8d:
96:c2:47:ca:82:26:40:e8:0e:5a:22:4f:1b:1d:7f:c9:42:9a:
1a:30:9f:f1:28:c2:42:00:ba:e1:a6:db:ab:6a:0b:76:b3:31:
6b:51:5e:84:b1:40:78:15:be:50:03:b2:3f:b5:0d:55:96:91:
c8:49:24:8f:dc:39:70:44:a4:4e:cc:6f:44:9a:c1:da:cc:78:
c0:13:6c:78:c8:d9:32:f3:0c:b6:bf:cd:2c:28:58:9b:23:bd:
98:5f:1b:dc:51:9d:43:28:af:ad:84:f8:53:ab:55:31:a7:66:
1e:91:7a:52:be:17:e8:0e:d1:01:5b:25:40:6d:03:a0:42:32:
b3:c8:6f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org