Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3R43pE2JKdf4AOiFbpPTgmszHfE.roa
File: 3R43pE2JKdf4AOiFbpPTgmszHfE.roa (raw, json)
Hash identifier: ea2cegg1j9SrKq62cR/lO52WOosghtix1EqvXy7i+U0=
Subject key identifier: DD:1E:37:A4:4D:89:29:D7:F8:00:E8:85:6E:93:D3:82:6B:33:1D:F1
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018AFA99304733492021A00490B741A883F5
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3R43pE2JKdf4AOiFbpPTgmszHfE.roa
Signing time: Wed 04 Oct 2023 12:10:57 +0000
ROA not before: Wed 04 Oct 2023 12:10:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 80.71.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 12:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:99:30:47:33:49:20:21:a0:04:90:b7:41:a8:83:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 4 12:10:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd1e37a44d8929d7f800e8856e93d3826b331df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0f:88:16:76:33:88:19:40:1d:6c:af:4e:44:
9c:64:20:09:09:8d:8c:d0:fe:6d:fe:e6:6b:88:b6:
52:55:45:ba:c2:56:ee:a9:1d:2b:cb:92:2d:be:e1:
63:0e:7e:c3:60:b3:0a:ce:e9:4c:ee:3c:42:c7:c8:
3f:ff:5c:f2:da:26:c3:d2:b9:49:d9:b8:63:6e:e2:
ac:14:8a:f5:82:05:6b:6e:65:6a:56:b5:0c:1c:e0:
02:e8:8e:7a:da:48:82:21:2c:30:9b:f9:1d:3c:70:
94:99:4f:ba:d2:09:48:bd:5a:d4:aa:f5:ba:a2:45:
98:65:b6:65:c7:03:93:39:4e:b3:ad:98:e0:99:57:
87:af:82:73:6f:de:72:2e:48:c1:3d:13:78:ca:bf:
54:95:bd:eb:2e:e8:cf:f2:fe:b4:83:02:85:7c:c1:
eb:da:43:33:e5:15:63:9b:22:53:d1:75:85:5d:7c:
e7:92:7f:94:5e:a4:36:50:27:03:c5:32:2a:6a:50:
f0:13:0a:a0:de:36:6f:e8:7a:51:bf:de:97:62:34:
e6:50:99:5e:62:e0:ed:cd:f8:7e:19:f1:34:57:12:
4a:b8:2c:99:cd:a1:98:8b:72:a8:2f:6e:71:44:9d:
0f:69:56:8a:5a:b0:c1:d2:66:42:53:6e:72:90:52:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1E:37:A4:4D:89:29:D7:F8:00:E8:85:6E:93:D3:82:6B:33:1D:F1
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3R43pE2JKdf4AOiFbpPTgmszHfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
49:43:a8:23:11:79:9c:c5:dd:07:eb:6d:b0:75:00:c4:dd:a0:
c7:92:98:19:5d:4b:32:37:93:cc:f9:a1:e8:51:af:ad:1f:d9:
6e:00:9b:5f:02:38:d7:17:42:d6:72:5b:b7:ed:b3:e5:87:b6:
aa:8e:3d:79:86:99:f8:ed:4b:2c:e9:94:63:38:32:e8:76:02:
70:06:15:84:48:7d:a0:8a:a5:02:67:96:b5:03:dc:25:48:db:
2f:b9:e1:3e:11:80:46:56:8d:ad:41:b3:c1:bb:b1:c9:2f:23:
c7:f1:42:8b:47:5b:ee:dd:0f:b6:64:c7:09:8d:b7:89:9d:76:
62:93:96:a0:30:4d:31:62:35:6c:96:4a:eb:9b:f1:a4:25:18:
b7:9a:34:1a:fe:4d:9c:8d:b2:15:99:32:c1:56:59:08:b5:33:
b5:68:46:2d:7e:f0:ad:f6:6f:18:fd:9b:cd:54:2b:89:4c:80:
53:b0:50:1a:b3:f4:fd:a7:f4:ec:7d:d4:7b:73:30:c0:3b:01:
a1:7b:e4:24:08:dd:d1:54:17:e3:9d:54:a5:6b:1f:b4:13:31:
ba:58:25:b7:5f:70:91:bc:c8:17:f7:16:30:0e:7e:7e:69:55:
e0:50:28:ca:6c:38:d2:1a:54:3c:bd:23:aa:33:ee:e4:dc:2d:
f5:69:33:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org