Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/2M7lBxac7GtvSTnYjOh5-K1GLkg.roa
File: 2M7lBxac7GtvSTnYjOh5-K1GLkg.roa (raw, json)
Hash identifier: QWI5HTPxtPbjjsaH3sLY/7mJu+MA4UDuKviagm942Ok=
Subject key identifier: D8:CE:E5:07:16:9C:EC:6B:6F:49:39:D8:8C:E8:79:F8:AD:46:2E:48
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A899493271FCF3ED2B8E4D36C9F622079
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/2M7lBxac7GtvSTnYjOh5-K1GLkg.roa
Signing time: Tue 12 Sep 2023 13:28:50 +0000
ROA not before: Tue 12 Sep 2023 13:28:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.236.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 05:33:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:89:94:93:27:1f:cf:3e:d2:b8:e4:d3:6c:9f:62:20:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 12 13:28:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8cee507169cec6b6f4939d88ce879f8ad462e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:ff:f8:e7:71:44:ce:4e:1f:26:0a:7f:80:
47:34:24:f6:89:39:46:68:57:36:e0:b7:02:a8:87:
6b:1a:49:1f:8d:9c:ad:72:37:73:e3:bb:2a:30:cb:
3c:0d:04:ac:6c:8a:df:dc:83:8d:89:88:72:2b:22:
f7:3b:c4:f4:64:e9:4c:5e:53:6f:ee:cf:6b:c1:84:
96:f2:6a:57:d9:e2:8f:ee:46:a6:59:d5:01:05:85:
9d:85:8f:48:f3:be:cd:72:bc:87:0b:10:57:e5:66:
f7:4d:44:1b:98:f0:57:a8:4b:51:a7:d4:bd:59:83:
37:69:9d:6f:83:e0:e6:5d:a7:b6:72:fb:5d:35:51:
f3:2f:ba:fd:64:d9:0c:f9:d0:81:a0:4b:ca:e3:83:
a7:ae:8e:71:03:b0:29:6f:08:6d:92:42:79:6d:fc:
05:9d:29:2c:5e:b4:4f:c4:c2:92:4e:2e:d9:96:50:
23:08:b6:33:93:8c:76:0c:17:a2:a4:25:c3:51:95:
6d:cd:78:df:3c:35:ed:99:ae:87:ee:fc:73:ec:be:
b7:d6:98:f2:31:88:c8:df:75:ed:f2:a4:75:67:20:
c9:c2:de:8f:b1:c5:f1:9c:38:24:6c:f8:e1:7c:f5:
dd:37:5e:28:5d:5b:45:c8:6d:86:4e:9a:2b:73:2f:
25:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CE:E5:07:16:9C:EC:6B:6F:49:39:D8:8C:E8:79:F8:AD:46:2E:48
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/2M7lBxac7GtvSTnYjOh5-K1GLkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
81.29.154.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:a8:f1:1f:79:33:e3:18:e2:db:f8:4b:5c:6c:e2:5b:f5:b8:
ce:73:94:c4:89:f7:f3:e8:cf:eb:4f:d4:0e:31:06:d0:74:40:
22:34:b8:f6:e5:61:35:aa:a6:6c:29:ea:e8:43:4b:22:59:73:
08:c3:c8:55:4f:95:37:2c:ef:c9:72:e2:63:3f:ad:d2:e0:bf:
fb:37:83:98:b2:87:d3:ce:21:88:b7:f9:f2:4c:45:d0:36:8a:
00:02:85:ec:7b:bc:7d:ae:db:d8:ae:27:19:99:14:68:3d:48:
0c:cc:83:a7:19:70:e9:45:84:03:84:40:f9:85:7e:87:73:3d:
48:26:b1:9f:a9:da:6b:d5:af:c9:6d:94:b0:a1:78:08:d1:d9:
98:e2:19:74:19:e0:f6:db:ed:93:40:70:12:92:0e:3b:e9:12:
6a:94:a7:1c:ca:4b:82:c1:d1:d1:d7:98:50:84:71:f8:16:5a:
86:68:88:31:a2:73:53:e6:cb:7a:3e:34:f3:c8:0c:6d:1e:a0:
0c:08:a0:fe:88:eb:76:21:42:bf:82:68:f3:f6:10:d8:f9:cd:
09:23:b8:99:13:fc:4a:22:4d:fe:e5:56:d7:39:0b:84:23:88:
e8:e5:00:a8:b8:df:b3:bd:29:5b:7b:1f:8a:95:ca:0c:95:75:
ac:4e:68:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYqJlJMnH88+0rjk02yfYiB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwOTEyMTMyODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGNlZTUwNzE2OWNlYzZiNmY0OTM5ZDg4Y2U4NzlmOGFkNDYyZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+n/+OdxRM5OHyYKf4BHNCT2iTlG
aFc24LcCqIdrGkkfjZytcjdz47sqMMs8DQSsbIrf3IONiYhyKyL3O8T0ZOlMXlNv
7s9rwYSW8mpX2eKP7kamWdUBBYWdhY9I877NcryHCxBX5Wb3TUQbmPBXqEtRp9S9
WYM3aZ1vg+DmXae2cvtdNVHzL7r9ZNkM+dCBoEvK44Onro5xA7ApbwhtkkJ5bfwF
nSksXrRPxMKSTi7ZllAjCLYzk4x2DBeipCXDUZVtzXjfPDXtma6H7vxz7L631pjy
MYjI33Xt8qR1ZyDJwt6PscXxnDgkbPjhfPXdN14oXVtFyG2GTporcy8lGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNjO5QcWnOxrb0k52IzoefitRi5IMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvMk03bEJ4YWM3R3R2U1RuWWpPaDUtSzFHTGtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEfsAwQA
UR2aMA0GCSqGSIb3DQEBCwUAA4IBAQBaqPEfeTPjGOLb+EtcbOJb9bjOc5TEiffz
6M/rT9QOMQbQdEAiNLj25WE1qqZsKeroQ0siWXMIw8hVT5U3LO/JcuJjP63S4L/7
N4OYsofTziGIt/nyTEXQNooAAoXse7x9rtvYricZmRRoPUgMzIOnGXDpRYQDhED5
hX6Hcz1IJrGfqdpr1a/JbZSwoXgI0dmY4hl0GeD22+2TQHASkg476RJqlKccykuC
wdHR15hQhHH4FlqGaIgxonNT5st6PjTzyAxtHqAMCKD+iOt2IUK/gmjz9hDY+c0J
I7iZE/xKIk3+5VbXOQuEI4jo5QCouN+zvSlbex+KlcoMlXWsTmhV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org