Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8ow1_3-fhKXhIn_L8naKmc0QVv8.roa
File: 8ow1_3-fhKXhIn_L8naKmc0QVv8.roa (raw, json)
Hash identifier: Hg2oqqUDWoigqMd6VW7RM5iJ+BYvMQ9Zpcp5rk+u4Ls=
Subject key identifier: F2:8C:35:FF:7F:9F:84:A5:E1:22:7F:CB:F2:76:8A:99:CD:10:56:FF
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018C5CF8EC0715F3B9E5FE0C0082352E189C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8ow1_3-fhKXhIn_L8naKmc0QVv8.roa
Signing time: Tue 12 Dec 2023 07:41:06 +0000
ROA not before: Tue 12 Dec 2023 07:41:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210107
IP address blocks: 80.71.224.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5c:f8:ec:07:15:f3:b9:e5:fe:0c:00:82:35:2e:18:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Dec 12 07:41:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f28c35ff7f9f84a5e1227fcbf2768a99cd1056ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f2:6d:30:b6:08:8b:74:bd:24:b5:9d:54:98:
4e:ee:da:d6:7b:60:7f:13:3b:4d:7f:34:b8:35:02:
9c:dc:a6:37:78:9e:70:47:e8:84:12:72:cf:b3:1c:
cb:d5:9d:32:de:e8:4e:a5:f7:ad:c8:4d:6d:20:e6:
eb:85:be:af:6f:02:70:17:78:6b:9e:ab:f9:d5:f0:
96:ad:77:0a:6f:af:e3:ad:e8:05:15:88:58:c6:bf:
b0:e7:4e:fa:a6:78:76:0c:fc:b4:6c:23:86:72:33:
8b:02:d5:ec:ea:90:6a:46:0c:88:57:44:ab:a3:ad:
cc:3d:d5:a4:fd:94:6e:11:f1:26:e6:ea:19:5b:34:
5c:a6:be:c2:ed:94:16:5a:87:fb:5d:73:72:bd:31:
01:ef:58:20:7f:e2:07:51:5e:47:75:a9:f7:7e:7e:
a8:03:63:15:6b:bc:8f:6b:eb:dc:18:37:c9:da:aa:
e1:1e:2d:5e:cb:51:df:d3:50:53:62:f9:fd:1f:f8:
47:4a:7d:3d:31:25:37:d7:4b:58:87:b5:cc:e4:7f:
b7:4d:f9:20:ad:aa:9e:7c:3b:0d:25:b6:fc:c8:67:
09:28:7a:df:72:92:91:22:07:5c:4d:eb:fb:6d:1e:
42:0a:43:0e:f4:f3:3c:66:d7:29:14:6e:94:6e:a3:
93:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8C:35:FF:7F:9F:84:A5:E1:22:7F:CB:F2:76:8A:99:CD:10:56:FF
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8ow1_3-fhKXhIn_L8naKmc0QVv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
Signature Algorithm: sha256WithRSAEncryption
02:35:1f:9e:24:4c:18:52:07:38:73:c6:54:05:94:c9:b7:5e:
9f:9a:82:75:b4:e9:04:d3:42:89:c0:c0:cd:82:9e:42:b0:f0:
c2:83:2e:3f:d4:7c:00:cc:68:83:00:5d:bc:a1:28:2d:1d:ed:
91:7e:a2:f3:ca:c0:a0:1e:d4:cd:99:33:1a:78:0b:b9:f4:f0:
0a:cb:1f:72:e2:49:a5:69:05:1c:48:4b:f6:0e:d6:83:30:ed:
11:0b:af:84:a4:d3:ba:3c:f3:2e:39:21:ff:b8:af:d5:f7:ee:
23:86:46:85:eb:85:0c:6c:bd:f6:cc:8e:f9:6e:52:3d:dc:ff:
e0:d2:91:89:88:34:be:10:a5:fb:fe:87:aa:e5:9f:b0:88:72:
db:b0:83:ff:6f:fb:d1:5c:bc:3d:93:0c:3e:16:10:a6:0c:4a:
b5:ce:81:7c:f9:82:48:cc:26:3c:0e:18:d3:ac:2d:e8:ce:a6:
2e:ba:b5:29:98:ab:cd:8f:c7:63:65:0d:33:72:ab:a7:cc:de:
96:1e:9f:09:59:e4:f9:45:03:59:a5:ab:28:9d:87:8c:a4:99:
96:db:de:f7:c2:f0:2c:31:be:33:fd:58:11:ad:0e:c5:5a:71:
0e:44:05:e1:7e:a8:6a:1f:b0:61:3a:47:dc:35:b5:f4:a4:3f:
63:2f:27:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:02 2024 by rpki-client on console-fra.rpki-client.org