Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4hMd7rSNynJnrfEcHmNhX69VONw.roa
File: 4hMd7rSNynJnrfEcHmNhX69VONw.roa (raw, json)
Hash identifier: i/oHjfTbn/U4WMcUIOltINPslu84AycYAcdrNpNphd0=
Subject key identifier: E2:13:1D:EE:B4:8D:CA:72:67:AD:F1:1C:1E:63:61:5F:AF:55:38:DC
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A20E4809F09B4FFD9A814D68992C8E596
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4hMd7rSNynJnrfEcHmNhX69VONw.roa
Signing time: Wed 23 Aug 2023 05:36:00 +0000
ROA not before: Wed 23 Aug 2023 05:36:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:e4:80:9f:09:b4:ff:d9:a8:14:d6:89:92:c8:e5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 23 05:36:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e2131deeb48dca7267adf11c1e63615faf5538dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:97:91:8a:2f:01:4e:c5:f7:e9:a5:c6:04:7d:
0e:df:d9:bc:af:38:b7:48:39:6a:dc:55:b9:73:13:
bb:3e:f9:d8:22:8a:1e:df:8e:03:76:52:20:38:84:
cd:9d:f5:88:01:f2:94:6c:ca:67:b2:a0:64:82:87:
97:dc:1f:70:bc:fe:2b:2d:66:60:a9:c0:84:0d:ec:
bc:10:b6:17:0b:21:38:8e:00:d2:aa:ca:b7:d8:6e:
82:1c:40:35:23:f2:f1:96:4f:3c:8b:ec:c2:9c:86:
6c:3f:76:c1:dd:6f:28:7b:a3:0e:31:b7:d9:bb:a1:
2d:eb:e3:9a:3e:23:bd:32:22:0d:ca:8b:58:93:ca:
22:56:ce:79:a7:2f:d8:71:4c:33:92:47:af:12:c6:
7f:46:e4:9b:5b:7f:43:f0:da:0f:84:8c:a0:c8:e9:
a6:16:65:46:44:2a:e9:c6:4f:02:05:5f:df:43:55:
18:c9:b5:4a:88:8f:2c:d9:48:12:56:3e:64:4e:02:
5a:d3:1e:ea:9e:78:0f:c4:c4:b4:33:84:65:07:9a:
bd:d5:6a:be:b8:9f:7d:ae:4a:52:cb:c3:9c:91:0a:
73:33:9a:22:db:00:73:fc:7d:d2:d0:1c:09:dc:98:
19:7e:36:21:21:1d:c0:e3:ae:b1:99:c5:d4:84:af:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:1D:EE:B4:8D:CA:72:67:AD:F1:1C:1E:63:61:5F:AF:55:38:DC
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/4hMd7rSNynJnrfEcHmNhX69VONw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.233.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5a:af:ed:a3:4d:d3:b1:27:e1:5c:14:25:11:c6:78:db:f0:
c5:0f:28:43:57:73:bb:04:f5:25:20:91:94:7e:3c:4a:75:dd:
86:81:c8:29:48:54:33:ca:cf:c2:51:3b:49:3f:44:1f:54:2a:
18:36:aa:44:e5:d9:e0:cb:09:0e:4a:bb:9a:bd:06:07:69:9e:
2f:b9:e5:84:bb:74:ee:d6:b5:f0:c6:bf:a8:0f:a2:db:52:03:
5f:e9:7f:cb:02:c9:70:08:05:8c:4f:1f:38:0d:65:0c:1b:dc:
ea:7e:15:60:dc:be:d7:00:8e:f5:63:42:33:0c:39:65:55:fc:
c4:e6:ca:1e:24:7f:03:cb:c7:f9:98:9f:40:6d:a2:27:2c:3f:
6f:ef:5d:23:ac:04:bb:3a:33:e6:c2:b1:20:7d:8a:03:8b:62:
88:50:82:18:60:4e:fd:f4:5c:e9:7d:ed:b6:bf:42:01:a8:11:
9b:36:6f:79:7c:f8:f9:25:11:13:d1:92:e4:91:ef:04:83:57:
71:11:27:71:f9:7e:bf:e7:5b:51:39:99:51:d5:8d:dc:f2:e0:
4d:ca:22:d0:b8:c7:ac:c1:2f:5a:0a:f6:38:da:43:17:ce:6d:
13:0b:92:91:9a:55:0f:94:45:f3:b3:4f:08:c1:ef:a4:fb:60:
c9:ae:d4:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYog5ICfCbT/2agU1omSyOWWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwODIzMDUzNjAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjEzMWRlZWI0OGRjYTcyNjdhZGYxMWMxZTYzNjE1ZmFmNTUzOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJeRii8BTsX36aXGBH0O39m8rzi3
SDlq3FW5cxO7PvnYIooe344DdlIgOITNnfWIAfKUbMpnsqBkgoeX3B9wvP4rLWZg
qcCEDey8ELYXCyE4jgDSqsq32G6CHEA1I/Lxlk88i+zCnIZsP3bB3W8oe6MOMbfZ
u6Et6+OaPiO9MiINyotYk8oiVs55py/YcUwzkkevEsZ/RuSbW39D8NoPhIygyOmm
FmVGRCrpxk8CBV/fQ1UYybVKiI8s2UgSVj5kTgJa0x7qnngPxMS0M4RlB5q91Wq+
uJ99rkpSy8OckQpzM5oi2wBz/H3S0BwJ3JgZfjYhIR3A466xmcXUhK8naQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOITHe60jcpyZ63xHB5jYV+vVTjcMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvNGhNZDdyU055bkpucmZFY0htTmhYNjlWT053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEfpMA0G
CSqGSIb3DQEBCwUAA4IBAQASWq/to03TsSfhXBQlEcZ42/DFDyhDV3O7BPUlIJGU
fjxKdd2GgcgpSFQzys/CUTtJP0QfVCoYNqpE5dngywkOSruavQYHaZ4vueWEu3Tu
1rXwxr+oD6LbUgNf6X/LAslwCAWMTx84DWUMG9zqfhVg3L7XAI71Y0IzDDllVfzE
5soeJH8Dy8f5mJ9AbaInLD9v710jrAS7OjPmwrEgfYoDi2KIUIIYYE799Fzpfe22
v0IBqBGbNm95fPj5JRET0ZLkke8Eg1dxESdx+X6/51tROZlR1Y3c8uBNyiLQuMes
wS9aCvY42kMXzm0TC5KRmlUPlEXzs08Iwe+k+2DJrtRE
-----END CERTIFICATE-----
Generated at Tue Aug 29 08:59:26 2023 by rpki-client on console-ams.rpki-client.org