Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3HUFGeXZIHR6CO7uJE1Z9LbBsWY.roa
File: 3HUFGeXZIHR6CO7uJE1Z9LbBsWY.roa (raw, json)
Hash identifier: pmfm1Re9yyADxfkAl4HRBsYBUvruPFINoya0iFItBJg=
Subject key identifier: DC:75:05:19:E5:D9:20:74:7A:08:EE:EE:24:4D:59:F4:B6:C1:B1:66
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0186A124CEB2E73E1ADDCF1B91683650814C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3HUFGeXZIHR6CO7uJE1Z9LbBsWY.roa
Signing time: Thu 02 Mar 2023 07:06:29 +0000
ROA not before: Thu 02 Mar 2023 07:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.149.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:24:ce:b2:e7:3e:1a:dd:cf:1b:91:68:36:50:81:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 2 07:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc750519e5d920747a08eeee244d59f4b6c1b166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:88:de:e4:bd:f4:01:4d:c5:54:ca:4d:ef:c9:
10:6b:18:f6:a4:8f:ac:f5:d1:a6:b7:8a:31:5a:c2:
42:cd:82:27:0d:ab:5d:69:38:72:42:13:78:37:99:
2a:13:6d:60:b3:0b:62:97:a7:d9:ab:35:17:aa:31:
46:a6:d7:97:ee:57:45:63:94:da:3e:16:75:7d:eb:
42:c1:dc:57:a4:68:51:72:aa:4b:92:41:55:d2:78:
4e:14:83:49:ab:fa:ab:7a:84:db:68:ff:f1:03:b0:
e9:ae:5b:68:76:e4:d2:67:81:dc:d6:96:3d:e7:82:
a1:d0:68:6d:46:17:ac:71:a1:81:b8:24:7c:27:bc:
a5:4f:2d:22:f4:68:11:7e:08:72:52:c4:5f:22:0f:
28:e8:dd:1a:67:a3:72:b0:db:ee:73:51:d9:59:4a:
24:9f:b8:2f:3d:ee:6a:8a:9c:de:a9:8c:01:fe:46:
21:36:b0:a9:8c:fa:33:3c:da:d4:b9:a6:a1:cb:0d:
f8:dc:8c:5b:65:8d:7f:4e:52:7e:be:1e:4f:5a:00:
ac:6b:d3:dd:62:80:d3:87:71:1f:e9:e9:82:b5:ff:
fd:c4:7e:3f:20:c4:13:69:c3:45:fd:57:7d:b5:89:
e7:07:c8:fd:5c:7e:2f:21:cd:68:b1:90:3c:0d:90:
75:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:75:05:19:E5:D9:20:74:7A:08:EE:EE:24:4D:59:F4:B6:C1:B1:66
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3HUFGeXZIHR6CO7uJE1Z9LbBsWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.149.0/24
81.29.155.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
51:ba:5b:9d:b8:14:62:24:82:73:80:7c:ea:a8:a3:fc:34:02:
93:e0:74:d7:9b:53:7b:aa:3d:a1:ae:ab:37:00:f1:0b:fc:da:
fe:c0:21:bf:73:b0:51:11:bb:4a:23:35:2c:2e:79:df:59:98:
44:5a:a1:c0:be:10:8f:62:dd:28:3c:f1:45:cc:25:e3:59:09:
fc:01:8d:9b:54:30:e4:ac:fa:6e:ac:0d:35:a4:f1:74:c8:30:
02:e0:2e:7c:ed:99:1f:27:a3:3c:41:ae:8f:43:73:71:04:b9:
8c:29:da:6c:3a:a9:4b:5d:3a:f3:05:1f:4f:60:f3:cf:a6:d3:
06:f8:7b:eb:04:a9:c3:69:2d:91:ad:26:21:60:9d:06:02:df:
1e:cf:e5:da:74:50:35:40:3d:ec:f9:2d:18:b8:c5:11:e5:ea:
e9:23:ff:59:06:f5:43:74:fb:be:5e:ab:d3:4d:6f:16:43:1b:
56:5f:77:79:43:83:f9:a4:ff:47:51:90:d8:c7:aa:44:33:17:
e0:a1:ad:69:26:42:33:8a:2a:e0:74:d0:14:a1:cd:33:fd:82:
d0:5d:e3:d3:75:5b:b7:ee:af:69:ae:f8:90:db:94:29:f6:e5:
10:67:63:0e:d5:e5:92:5a:d3:84:98:0f:c8:a7:c2:be:1b:ab:
14:aa:fa:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org