Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8uH9ZlTXPo7dGCcJ8OWxfxgeicc.roa
File: 8uH9ZlTXPo7dGCcJ8OWxfxgeicc.roa (raw, json)
Hash identifier: Rz8rW/y3qtl0DOfKApCE3Xr2Ay6f16vUKAHjyK5ec28=
Subject key identifier: F2:E1:FD:66:54:D7:3E:8E:DD:18:27:09:F0:E5:B1:7F:18:1E:89:C7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A359348F181544B49AF6C4E9C9C7F3CD3
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8uH9ZlTXPo7dGCcJ8OWxfxgeicc.roa
Signing time: Sun 27 Aug 2023 05:59:19 +0000
ROA not before: Sun 27 Aug 2023 05:59:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 80.71.225.0/24 maxlen: 24
80.71.228.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:35:93:48:f1:81:54:4b:49:af:6c:4e:9c:9c:7f:3c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 27 05:59:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2e1fd6654d73e8edd182709f0e5b17f181e89c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:4b:7e:e0:1e:aa:8c:a0:f5:72:05:80:9e:48:
66:b5:bb:92:62:2d:df:fc:27:21:96:6c:7e:76:64:
32:ec:0b:95:f6:64:28:b9:3f:5d:56:8c:40:14:f4:
38:71:61:c0:0b:c9:57:78:fe:84:21:81:01:1c:14:
7b:c1:83:e5:69:14:3e:2e:cf:dd:c1:27:bd:5f:1b:
fb:f9:0a:66:c6:e3:cf:ac:60:25:a0:64:1d:9b:4c:
0f:d9:f5:c5:8e:87:27:4e:51:7b:9b:73:53:8b:2c:
7a:2d:35:6b:81:1f:5c:5f:f4:43:f5:d1:51:6b:3f:
8a:9e:cc:ee:65:71:e3:e3:f0:ef:eb:2b:ea:2e:db:
54:c6:aa:22:7d:2a:fe:ea:34:b9:d4:34:5a:84:96:
e2:a3:39:e6:b9:44:60:42:63:fc:2c:69:4f:88:f3:
2c:19:00:64:62:d8:87:e8:b5:8b:0a:fe:8a:e4:79:
46:53:d0:3a:37:1f:d0:63:a2:f6:83:5a:aa:a7:a3:
7a:b5:ba:1c:ce:49:20:19:ec:78:80:8d:a9:41:ad:
3d:90:f7:96:0d:86:a9:6d:76:e1:5b:0b:88:b4:39:
73:62:92:64:68:18:07:bd:5c:8e:40:ff:d4:1d:c8:
2f:48:86:df:7f:19:a9:d0:26:39:85:29:4f:dc:fe:
6e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E1:FD:66:54:D7:3E:8E:DD:18:27:09:F0:E5:B1:7F:18:1E:89:C7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/8uH9ZlTXPo7dGCcJ8OWxfxgeicc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0/24
80.71.228.0/24
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
25:6d:94:74:c9:de:3d:8e:a1:71:e8:8d:76:bc:0b:1a:51:9d:
db:a9:86:e5:20:58:e4:bb:55:43:1a:df:1f:64:16:d6:3b:3e:
9b:15:1a:88:2c:89:44:71:cf:7e:25:40:83:9e:75:80:3c:0a:
5f:a4:a8:0c:b6:e1:7e:48:f5:9e:ba:f3:3b:5c:2e:c3:87:f8:
c4:ae:81:9e:06:11:38:5b:41:c2:ad:bf:cd:13:d7:ee:aa:2b:
1b:6f:c8:81:40:c7:2e:0a:82:e6:2b:dc:61:c6:dc:24:76:5d:
a0:f6:15:2a:db:f2:e0:03:f2:ed:ba:5a:49:af:c2:f7:2f:87:
d8:90:4b:98:82:d5:00:73:40:6f:ce:56:74:60:6e:c1:8f:26:
23:ca:36:cd:c0:9e:ba:4a:65:bf:f7:93:7a:f1:35:5e:de:80:
18:6c:80:c6:2b:63:df:82:58:2b:38:b6:a3:57:ba:78:e0:0f:
c4:a2:35:cd:da:04:be:4a:78:55:65:3a:5b:e2:cc:28:6d:17:
9c:4d:fd:14:c6:50:5c:5a:9c:e0:14:1c:b7:ce:e8:ce:b5:74:
3f:12:8c:fc:61:9a:9d:88:9b:b3:1b:9c:f4:86:3c:1d:d5:c6:
b7:4f:72:d3:7f:df:10:f8:d1:56:1f:1b:19:a0:aa:95:aa:d5:
42:86:91:26
-----BEGIN CERTIFICATE-----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 at Mon Sep 18 06:24:56 2023 by rpki-client on console-ams.rpki-client.org