Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4L0ePfoUotv3GI9q99XxSZ8_g1Y.roa
File: 4L0ePfoUotv3GI9q99XxSZ8_g1Y.roa (raw, json)
Hash identifier: ZPlw6JUl8Q3yzp+yruLfm/SAWR0puweuYpHKH6VcgHw=
Subject key identifier: E0:BD:1E:3D:FA:14:A2:DB:F7:18:8F:6A:F7:D5:F1:49:9F:3F:83:56
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188721581B7E378BFFFF33B2B1AEFF5C344
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4L0ePfoUotv3GI9q99XxSZ8_g1Y.roa
Signing time: Wed 31 May 2023 13:53:12 +0000
ROA not before: Wed 31 May 2023 13:53:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.230.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:15:81:b7:e3:78:bf:ff:f3:3b:2b:1a:ef:f5:c3:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 31 13:53:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0bd1e3dfa14a2dbf7188f6af7d5f1499f3f8356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5b:5d:38:3e:0f:5f:c8:cd:9a:5c:2e:8c:a0:
4b:cd:4b:76:f8:d9:fc:17:99:86:9f:ea:a9:ac:cb:
1e:e9:92:9d:af:dc:57:e3:2f:b3:5b:57:ba:fa:fb:
38:6f:1b:cf:86:26:b3:98:72:15:c8:0c:5e:23:75:
e8:b8:b8:d6:c0:b0:5a:f8:9e:1d:f7:e1:d4:eb:8d:
7c:6d:8e:62:82:f9:dc:1e:87:0c:c6:b8:6c:ba:80:
5c:bd:16:63:5a:72:95:4c:2d:54:66:4d:e7:4e:be:
ce:0b:86:b9:61:fb:c8:97:f2:32:89:ea:3d:4d:b6:
e6:8d:ea:f3:82:94:ec:1b:d9:6f:ac:92:56:a1:dc:
b6:6f:f5:7b:89:dd:05:17:b2:6e:fa:b9:3d:1d:18:
44:d6:4d:9f:8a:ec:fa:4e:cf:6f:70:d5:76:a2:ed:
e8:fd:ad:db:9d:11:56:f8:2a:78:bd:2e:70:d4:70:
3a:91:2f:a1:ec:57:c4:fd:45:05:38:18:64:d5:73:
25:24:79:eb:c7:22:97:49:fa:d0:8b:fe:e2:91:cf:
fd:71:74:04:7c:14:40:e0:02:30:b9:2a:ce:6b:00:
4b:17:5a:1e:87:13:4b:40:c9:9b:00:77:81:62:d0:
aa:52:6a:5f:e2:3e:64:05:9b:ed:c3:f2:97:14:f3:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BD:1E:3D:FA:14:A2:DB:F7:18:8F:6A:F7:D5:F1:49:9F:3F:83:56
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4L0ePfoUotv3GI9q99XxSZ8_g1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
81.29.149.0/24
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7b:92:55:9e:43:45:75:45:7f:93:96:2c:a3:cf:83:f8:e3:
c5:13:f3:a1:10:e8:91:90:33:b6:3a:58:2b:e9:4a:dc:6d:7f:
00:49:f4:62:8d:fc:e2:76:d4:28:58:f9:01:5c:2d:e3:d1:5a:
66:67:c9:c0:c1:ec:d5:ae:76:67:e8:29:ba:6d:c1:25:f5:00:
f3:15:62:95:cd:25:fb:31:5b:c2:4f:15:6e:fa:68:f3:31:63:
3b:59:78:b7:d0:35:37:cf:3a:d6:ea:6f:a1:8b:b0:33:b2:b3:
22:e6:99:4c:c6:59:52:6f:82:94:c0:c1:c5:ce:d8:4f:72:eb:
fa:bd:31:8e:28:a3:b0:87:ad:d7:5f:fd:eb:5a:e6:3e:b8:15:
60:42:a0:e2:cf:ab:ad:ac:25:8b:30:04:02:25:16:45:9b:36:
c5:41:53:1a:13:6a:6f:a2:23:c2:1f:b8:38:76:52:b7:70:55:
ea:1f:03:e0:4e:02:f6:d8:69:40:9e:cb:29:1e:8e:26:16:67:
0e:ff:1b:9b:7f:0e:21:b3:ce:91:d2:db:3c:57:10:a8:00:7d:
71:71:84:b2:b0:b5:fd:55:fa:17:f8:0d:1d:e8:f6:dc:10:4a:
06:13:b0:c7:77:a0:80:00:3d:b1:b8:67:65:ec:c3:9a:23:e0:
c7:49:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org