Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3-Rn7o6V4eWnpeHW0Y15oWJLKQM.roa
File: 3-Rn7o6V4eWnpeHW0Y15oWJLKQM.roa (raw, json)
Hash identifier: FyId5z1tOOKPLdkO1VgOFuQboHZBTbVe1dw25+Qc0l0=
Subject key identifier: DF:E4:67:EE:8E:95:E1:E5:A7:A5:E1:D6:D1:8D:79:A1:62:4B:29:03
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01885834F29076CAD8AC9F889B646DA2EEE0
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3-Rn7o6V4eWnpeHW0Y15oWJLKQM.roa
Signing time: Fri 26 May 2023 13:17:24 +0000
ROA not before: Fri 26 May 2023 13:17:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 80.71.226.0/24 maxlen: 24
80.71.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:34:f2:90:76:ca:d8:ac:9f:88:9b:64:6d:a2:ee:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 26 13:17:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfe467ee8e95e1e5a7a5e1d6d18d79a1624b2903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9f:d6:89:82:9c:9b:1e:99:a6:f4:ee:7a:43:
36:76:d2:b2:cc:c6:8d:96:45:2e:a5:43:5d:81:e8:
de:1b:4b:91:22:2e:f3:f4:9c:68:59:c3:6b:2f:36:
81:e0:cc:2f:d4:61:40:41:35:61:e3:44:c1:3a:ba:
3a:50:2d:e3:e2:0a:53:c7:90:f4:3a:74:d5:58:1a:
8d:35:48:e2:dc:f4:2c:8d:89:0c:34:dd:24:67:76:
f4:da:65:01:67:d2:2e:ac:9b:ee:66:62:09:c5:20:
58:55:33:79:58:39:d0:76:97:bf:7a:f9:fe:36:7d:
00:09:1b:d5:35:e4:f3:4b:5a:8e:04:0d:a4:b9:cd:
65:3c:7b:bb:0a:1a:19:36:83:3f:a7:98:3b:3f:31:
df:b5:56:8f:12:cc:29:1a:5e:ac:20:be:04:cb:46:
8c:fc:a1:8f:c3:ea:73:d5:ee:26:7b:66:b2:b6:a8:
47:e3:c0:09:71:4f:c2:53:9c:e4:f7:c5:d1:bd:5b:
81:8c:4a:4e:10:ae:78:c9:66:ca:bb:ac:1d:24:73:
d4:38:72:ab:30:f7:07:76:6d:48:cc:71:97:1c:b8:
ff:3c:c1:eb:53:78:79:7f:56:ca:49:3a:20:26:36:
d0:62:26:ac:53:2e:0f:c7:1e:1a:bf:ab:af:7b:f6:
24:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E4:67:EE:8E:95:E1:E5:A7:A5:E1:D6:D1:8D:79:A1:62:4B:29:03
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3-Rn7o6V4eWnpeHW0Y15oWJLKQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
80.71.226.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:fc:dc:7e:b4:32:f9:4e:59:c1:1d:3b:68:a8:1d:5e:e7:67:
08:b4:64:ab:fe:46:03:55:23:ef:20:fa:2c:45:99:b4:9d:8d:
3b:a7:af:d0:b4:15:d5:f1:58:30:49:59:88:a7:bb:31:1e:c5:
78:c8:61:c1:0b:89:ba:95:1b:9e:41:3e:cc:e5:c7:b8:10:0b:
c6:bd:c0:49:f5:d3:a7:7b:66:f0:dc:e2:24:c1:00:07:99:23:
8c:88:f8:00:11:f9:da:f7:2a:71:02:0d:ea:85:7c:a6:d6:c2:
25:7d:96:e2:08:06:37:3a:9b:bf:c0:70:79:c4:0e:2a:d2:25:
1a:a8:35:39:0f:75:c8:95:cb:24:30:14:30:b5:93:32:05:87:
53:dc:40:a0:3e:ea:15:78:7b:b5:bf:3f:a2:d8:d8:4b:53:b3:
d3:49:e8:b3:e5:7f:55:44:ed:4b:e6:c2:68:7a:21:df:a3:0a:
3e:88:98:6f:35:04:42:3e:df:bc:60:7b:d4:5d:57:1f:18:a4:
d8:e2:ca:86:34:13:38:6c:fc:f9:cf:0e:56:24:53:73:d8:c2:
30:40:84:ce:8c:0f:ec:5a:2a:66:61:f4:ce:e5:7f:21:82:58:
6c:63:10:56:9f:fb:a3:47:81:19:1e:c2:2d:c8:32:c2:4c:4c:
3d:43:db:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 30 07:08:51 2023 by rpki-client on console-fra.rpki-client.org