Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9yazbOk3HgbT5hezlQaGnKxOpFA.roa
File: 9yazbOk3HgbT5hezlQaGnKxOpFA.roa (raw, json)
Hash identifier: 31IUYCevFfjmjaffst/TYmRYup0Zn85b6aAetVJW7EU=
Subject key identifier: F7:26:B3:6C:E9:37:1E:06:D3:E6:17:B3:95:06:86:9C:AC:4E:A4:50
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01885209AA105D91A5FD25FC814EFEBFAD11
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9yazbOk3HgbT5hezlQaGnKxOpFA.roa
Signing time: Thu 25 May 2023 08:32:24 +0000
ROA not before: Thu 25 May 2023 08:32:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 81.29.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 12:16:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:52:09:aa:10:5d:91:a5:fd:25:fc:81:4e:fe:bf:ad:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 25 08:32:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f726b36ce9371e06d3e617b39506869cac4ea450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:ca:50:fa:3a:9f:22:54:90:68:e7:7a:79:
0b:1d:12:80:85:5a:cf:37:c8:d9:16:b8:f0:07:92:
00:ad:e7:9f:2d:3e:9b:c3:09:3e:8d:e2:c1:7c:1a:
b2:c9:20:96:da:54:87:e4:b4:81:d7:80:e2:31:eb:
91:96:8a:03:af:db:29:9e:0e:0c:aa:d7:ae:59:b2:
2b:3f:e7:d9:9a:38:35:eb:f7:1d:33:a6:ea:b1:fe:
2e:92:f0:2e:07:8e:8e:6c:70:59:04:90:b9:03:bd:
b6:f7:5e:bd:99:b1:cf:1e:1e:29:6b:31:81:f4:5d:
55:b9:ae:8b:b9:6a:71:21:cf:52:dd:68:32:94:08:
35:a5:00:e7:03:d4:25:0f:a3:3a:63:12:a1:6d:ee:
be:37:90:5f:9d:77:a1:75:3a:93:a0:56:94:21:14:
29:2f:19:c0:22:c3:c6:85:62:35:9f:33:a7:8f:93:
23:57:90:a7:bf:70:ad:81:10:b9:29:2a:0a:d9:a1:
fe:4a:dd:9a:19:6a:07:56:62:aa:0a:36:88:27:bf:
68:97:f3:f4:07:12:87:79:06:b3:1e:86:d9:4a:16:
5a:90:3b:5f:69:95:e3:83:f1:c5:d4:10:d0:c0:3b:
5d:f8:58:72:8b:a7:22:63:a5:ba:ff:0a:6b:0c:26:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:26:B3:6C:E9:37:1E:06:D3:E6:17:B3:95:06:86:9C:AC:4E:A4:50
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/9yazbOk3HgbT5hezlQaGnKxOpFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
Signature Algorithm: sha256WithRSAEncryption
62:e2:b4:ea:1a:4f:a0:da:3e:cd:b2:5c:f3:05:28:b7:90:a8:
08:0c:67:60:22:80:3c:3a:31:3f:82:9d:a6:83:66:78:1c:62:
1d:c3:cb:31:15:b0:11:93:11:d0:71:84:21:43:d0:70:56:a4:
3f:47:fc:3b:8c:e8:06:1e:09:39:d0:6d:c2:ff:99:2c:6a:68:
bf:ff:13:62:f5:a6:c3:d2:c8:7f:0f:e1:ce:81:2b:59:85:b2:
10:d3:ba:ce:9f:9f:50:a5:7f:70:f1:a0:18:8a:f8:86:92:aa:
eb:dc:2b:67:f1:0a:d4:d8:06:1e:67:bb:da:08:2d:ef:78:fc:
86:cc:cf:2b:38:e1:92:1e:9e:02:b8:c3:45:1f:38:85:c1:f0:
ce:a5:e3:01:fa:96:c8:4d:6a:ca:9e:24:62:00:6e:21:c0:f0:
74:d8:a6:e3:fd:5f:07:e0:1e:17:e9:df:d7:90:b0:05:06:6b:
8f:be:75:a0:ed:b5:3c:36:26:b8:46:01:84:d3:6d:8b:31:ec:
8a:dd:a1:2b:55:64:61:06:35:e9:f4:a0:2d:fc:ac:07:4e:4f:
88:f0:5b:5d:7d:b6:eb:4e:11:f5:40:2f:10:29:7c:a0:2d:1c:
d1:a8:cd:d7:ed:69:08:74:f9:02:dc:88:c5:2c:ee:42:97:38:
cc:c1:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org