Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9j0ACWilihPd5rYqICnWaStQAtk.roa
File: 9j0ACWilihPd5rYqICnWaStQAtk.roa (raw, json)
Hash identifier: O9Ey0dqBLhqMMYHY8+gI2+12dmh+5CaAc+aX6Rby6sg=
Subject key identifier: F6:3D:00:09:68:A5:8A:13:DD:E6:B6:2A:20:29:D6:69:2B:50:02:D9
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188D2CFA54A204A60B2C089E96221BDB920
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9j0ACWilihPd5rYqICnWaStQAtk.roa
Signing time: Mon 19 Jun 2023 08:40:03 +0000
ROA not before: Mon 19 Jun 2023 08:40:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209408
IP address blocks: 45.66.224.0/22 maxlen: 22
81.29.149.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 26 Jun 2023 07:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:cf:a5:4a:20:4a:60:b2:c0:89:e9:62:21:bd:b9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 19 08:40:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f63d000968a58a13dde6b62a2029d6692b5002d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:01:ac:1f:93:dd:e6:54:40:47:81:f2:5f:0e:
cc:a8:c3:40:b7:5b:d0:75:bd:e6:65:9e:37:0e:ed:
75:42:d0:5e:93:09:a7:86:1d:93:36:54:2d:e1:04:
82:ad:12:80:1c:a9:dd:45:5b:07:b4:b7:19:c3:69:
55:ab:9a:b5:7d:86:85:85:68:ec:4e:2f:f1:ff:f2:
ea:86:79:13:2e:d5:18:cb:a7:18:c7:29:04:e8:bd:
0e:3e:b9:4a:ea:c6:80:c3:f3:79:32:81:d9:d1:c5:
48:03:ab:eb:84:02:7b:b0:57:60:cd:8a:a3:4b:b6:
85:8e:12:19:f1:7b:2c:df:b1:cb:c3:d0:9f:b5:8d:
64:13:bb:41:42:52:35:0a:6c:b1:07:4a:fd:98:a1:
b4:45:e0:b4:0d:91:28:bc:2c:05:e1:5e:9e:bc:b3:
24:a6:2c:d2:20:09:41:22:ed:b6:bd:6c:72:18:1e:
62:cc:6c:d2:97:e3:94:8d:89:9c:3f:4e:ce:98:d3:
b5:32:02:21:91:9f:4c:14:54:b0:44:36:f5:5b:c9:
a8:85:1d:a2:d8:79:c0:03:a5:e1:32:15:11:24:3c:
83:3a:b4:30:0d:d3:f2:71:5a:7b:10:82:00:0d:d3:
29:6b:fb:8e:d3:81:0f:cd:a0:cc:35:12:b9:86:f3:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3D:00:09:68:A5:8A:13:DD:E6:B6:2A:20:29:D6:69:2B:50:02:D9
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9j0ACWilihPd5rYqICnWaStQAtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
81.29.149.0/24
81.29.151.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
18:d8:4a:a5:60:06:80:2c:97:c3:41:c7:31:f2:60:ee:f5:da:
74:d4:4e:89:e8:d8:4f:58:a0:c5:aa:3a:0d:62:24:11:9b:16:
9d:fa:06:c8:61:c2:d2:09:36:2a:f1:23:82:ac:c3:ca:48:8a:
d3:eb:b4:1c:cb:3d:a1:3c:b0:4a:c4:ce:5f:e7:84:cd:c5:0d:
30:be:2b:e9:4a:21:64:74:07:a4:e3:5d:9e:d2:a0:11:f1:92:
8b:ef:1a:5f:66:f7:28:43:2b:b2:20:ad:3b:60:05:93:37:d3:
ec:00:f5:70:16:ac:4f:01:c4:c8:ee:0e:1f:16:2a:e9:8e:69:
70:b0:db:29:59:4d:14:99:cd:30:18:44:15:ac:11:84:70:87:
99:60:b4:b8:7f:56:1d:c6:1c:71:1c:b0:a5:6f:14:8c:b4:14:
27:2c:f2:51:f7:f4:9a:a1:0e:ee:aa:82:ea:3a:66:ca:5b:8b:
47:fa:89:98:86:13:c6:13:b7:33:03:13:aa:89:50:9f:76:49:
55:17:4f:d1:ff:11:1a:37:5c:33:da:34:91:1e:f4:fc:8f:9b:
e0:8c:ed:33:10:a9:92:3f:ab:25:8e:ff:e7:a9:13:96:cc:a1:
b9:7c:9e:06:69:f5:b8:5a:78:cd:6e:82:3d:49:0f:0b:77:b1:
99:56:24:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org