Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3vtjM3GfFaruLtAZn8fgRGPI808.roa
File: 3vtjM3GfFaruLtAZn8fgRGPI808.roa (raw, json)
Hash identifier: zotwM3ti+a6CDABfEToTEgDS3Ps0CTfKHXoiWB9mVIc=
Subject key identifier: DE:FB:63:33:71:9F:15:AA:EE:2E:D0:19:9F:C7:E0:44:63:C8:F3:4F
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189FCCD6B1AE067D69CD0F1F0CE0C1536D2
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3vtjM3GfFaruLtAZn8fgRGPI808.roa
Signing time: Wed 16 Aug 2023 05:24:28 +0000
ROA not before: Wed 16 Aug 2023 05:24:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 80.71.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:cd:6b:1a:e0:67:d6:9c:d0:f1:f0:ce:0c:15:36:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 16 05:24:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=defb6333719f15aaee2ed0199fc7e04463c8f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ac:55:aa:88:f1:8d:a4:88:ca:01:8e:5e:85:
e2:53:07:36:d9:24:d3:b0:b9:2a:01:0e:9a:9f:bf:
40:0d:66:91:93:79:59:9a:95:1b:e0:3e:c4:da:f9:
5e:0f:7a:5f:4c:fa:7e:d7:21:43:d4:19:a4:af:f5:
12:b3:84:0e:90:40:7a:8f:c7:3a:91:27:5f:12:d4:
c6:ef:8b:f7:31:fd:ba:8d:01:0a:bf:6c:10:d2:ec:
5b:01:5c:46:a1:9d:cf:45:cd:4b:01:99:7c:97:ef:
6f:ff:af:2f:87:55:9d:59:7d:67:7b:40:7c:95:93:
cf:a6:85:ee:ed:a6:86:f5:02:f8:55:d0:b4:98:44:
a5:ae:9c:1a:27:fb:bf:f4:12:19:1c:56:bc:b7:a0:
24:cb:0b:f1:3b:32:c0:c4:b2:16:b9:82:84:3e:0b:
31:c6:e3:a8:89:2c:eb:16:73:0c:b6:cc:39:94:89:
22:c9:b1:14:97:9e:50:76:e2:a6:3a:20:f8:db:0e:
d7:4c:55:0e:cb:c1:bb:b5:82:4b:7e:b2:42:67:48:
fe:bb:fe:af:7c:ad:89:95:1b:c1:68:d0:db:9f:3e:
8f:99:a6:11:0f:22:fb:e5:2d:31:50:62:8e:85:08:
5e:a0:3c:90:c2:bb:5e:06:64:56:21:50:9b:ef:be:
e6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:63:33:71:9F:15:AA:EE:2E:D0:19:9F:C7:E0:44:63:C8:F3:4F
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/3vtjM3GfFaruLtAZn8fgRGPI808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:4e:e3:df:a2:f3:e3:c8:27:aa:8c:fe:0f:96:0f:04:2a:66:
33:66:8b:29:6b:1b:ae:58:07:91:32:77:a7:d5:cb:1d:d2:ff:
d2:86:29:c1:ff:ff:b2:46:f7:a4:ca:d2:55:b9:89:c5:79:4e:
90:6f:eb:e1:81:37:25:fc:80:79:bd:9a:c8:87:e9:f2:da:cb:
3a:27:a5:73:ce:e7:bb:df:b0:d2:8d:18:65:8c:8e:7d:5d:64:
37:0e:3d:8f:23:71:2d:e2:52:5b:82:ea:ce:df:15:e4:ce:16:
6b:0b:97:f4:ad:81:6e:b4:37:da:5a:b5:32:d6:86:a5:6b:c7:
7b:2a:e7:ab:30:ea:2e:1c:30:ec:9b:c6:43:e4:25:d3:a0:c7:
98:ca:f9:3e:12:37:64:74:da:c5:67:75:63:1d:0f:88:7c:3b:
3c:24:3f:6d:46:b7:65:82:85:98:86:c2:91:c1:c9:a5:d3:14:
32:2d:12:d9:30:c1:dc:a1:89:af:fa:b1:51:75:a8:04:ea:64:
b4:a3:a7:ff:9a:c4:d2:63:3e:b3:b4:13:4d:6e:ee:d3:c3:55:
d7:57:9b:4c:43:4d:0a:8c:19:b6:8b:e6:8c:13:e2:2a:ee:16:
dc:13:f4:37:69:d0:85:69:4a:f0:07:61:98:78:78:b9:f3:16:
43:4e:b0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 13 13:01:27 2023 by rpki-client on console-ams.rpki-client.org