Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1x8Lkt0A6gSTd1WaNsq0AnHBrqA.roa
File: 1x8Lkt0A6gSTd1WaNsq0AnHBrqA.roa (raw, json)
Hash identifier: 5/tO9N8dfkYgV0upYz/ebvL2hAr5TK366E20u3plCKg=
Subject key identifier: D7:1F:0B:92:DD:00:EA:04:93:77:55:9A:36:CA:B4:02:71:C1:AE:A0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A9754C6A7845EC28242C06F1441297F12
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1x8Lkt0A6gSTd1WaNsq0AnHBrqA.roa
Signing time: Fri 15 Sep 2023 05:33:50 +0000
ROA not before: Fri 15 Sep 2023 05:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.236.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:97:54:c6:a7:84:5e:c2:82:42:c0:6f:14:41:29:7f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 15 05:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d71f0b92dd00ea049377559a36cab40271c1aea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:f3:0c:28:83:0e:2f:91:b8:f4:79:2e:9b:
3f:a9:26:75:17:93:d4:76:35:c2:b8:fb:36:94:8d:
f7:a4:41:e5:97:b4:4d:67:47:d8:e0:61:18:22:a6:
b2:2a:ff:17:b4:1f:59:00:b3:11:95:48:db:3a:40:
82:9a:ec:8b:85:31:72:70:3b:3d:ae:ab:41:34:2c:
ca:ef:82:90:de:d9:e0:af:54:69:52:ce:71:f8:35:
9d:72:08:f5:89:71:0b:78:ae:9d:17:9a:2d:1b:4c:
7f:85:56:59:fe:50:f6:56:5e:99:2e:fe:d7:7f:0c:
ac:8c:bd:63:4b:01:e9:d7:b2:49:62:91:23:7b:bb:
55:54:57:ef:13:ac:77:92:43:26:af:19:ef:20:db:
d7:03:2a:3e:84:8f:95:1c:2b:b3:6e:45:ec:5a:94:
9f:7c:9e:e1:d9:b0:5d:cf:ba:9f:ef:8c:40:2d:2f:
ba:60:e4:40:70:41:0f:bd:af:54:f3:a3:d6:40:8e:
e8:67:43:e9:e3:cf:f5:20:cb:dc:3d:70:0b:1f:01:
b9:cd:09:ab:94:00:89:93:d1:b5:84:c4:f4:c2:34:
71:4d:53:02:f5:d4:69:11:4c:87:eb:16:f4:8c:0c:
f4:5f:1c:97:8c:f6:f0:d8:a1:31:c0:a5:af:32:0b:
23:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:1F:0B:92:DD:00:EA:04:93:77:55:9A:36:CA:B4:02:71:C1:AE:A0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1x8Lkt0A6gSTd1WaNsq0AnHBrqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
81.29.154.0/23
Signature Algorithm: sha256WithRSAEncryption
63:71:b1:3b:25:04:b3:a8:0e:4a:21:f3:3c:78:d0:2d:f6:35:
7d:1e:b4:12:b1:3f:c9:57:6a:4f:32:b6:e9:eb:5e:b9:dc:fe:
3d:95:5c:8e:c6:e6:ea:dd:89:e6:3b:47:75:87:17:54:29:1d:
44:26:75:92:e4:b1:6c:56:74:eb:9e:0f:d2:45:f8:8c:50:f2:
d9:b3:63:e6:d1:67:e6:9e:b8:1a:37:6d:05:6d:8e:64:cc:d6:
9c:1c:9c:7d:d9:dd:0c:84:a9:01:b6:e6:b3:01:51:2f:5f:23:
81:25:8b:e9:3d:84:c8:43:ab:a0:2f:4f:75:b5:3c:05:4d:99:
e4:56:59:24:16:4c:8d:00:80:de:5c:6d:1d:71:60:d2:ec:0d:
66:88:3a:e9:c3:00:13:8b:f4:14:5f:63:0f:81:7a:6e:a7:38:
3b:35:bc:97:73:ce:0f:a7:76:35:b5:d1:d4:3b:cc:b4:d8:21:
cb:35:22:39:33:8f:c2:69:5c:0a:a0:31:7a:94:de:b2:86:a3:
98:93:b0:ee:18:b9:26:c3:65:c5:6a:d1:62:2e:67:d2:6e:2e:
80:86:9e:f2:65:a0:7b:c6:a2:4d:5f:21:ad:a4:08:43:b9:a8:
3c:2b:6e:fc:0e:2e:38:15:75:af:c6:64:9d:21:82:83:a8:d0:
9c:05:52:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 3 06:16:33 2023 by rpki-client on console-ams.rpki-client.org