Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ed4UOGRYFh3Csh38NJBXGwQoX7A.roa
File: Ed4UOGRYFh3Csh38NJBXGwQoX7A.roa (raw, json)
Hash identifier: 8YzCjUniMjV5zatJ+U2pPRRxvTgTtv5myjL6xY3Lgqk=
Subject key identifier: 11:DE:14:38:64:58:16:1D:C2:B2:1D:FC:34:90:57:1B:04:28:5F:B0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018B28AF8E54C6A824DDFFA79585A4CE139D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ed4UOGRYFh3Csh38NJBXGwQoX7A.roa
Signing time: Fri 13 Oct 2023 10:57:55 +0000
ROA not before: Fri 13 Oct 2023 10:57:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 80.71.239.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:af:8e:54:c6:a8:24:dd:ff:a7:95:85:a4:ce:13:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 13 10:57:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11de14386458161dc2b21dfc3490571b04285fb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:17:af:84:50:3f:04:c5:ff:b2:43:45:5e:af:
b9:16:60:ca:20:50:d1:0a:49:89:58:0f:1f:1e:3e:
14:17:48:0a:4e:0c:a8:db:77:36:1f:6e:be:68:f5:
a4:44:a1:2e:f5:ee:7a:ed:f6:c9:8b:fa:9d:87:5b:
65:1a:d7:9c:a4:fb:b5:db:db:15:fe:88:7f:98:56:
67:ed:c4:22:90:68:c9:ee:23:c9:88:8c:14:52:d3:
e8:f7:22:ed:c8:29:00:5b:98:88:84:24:81:de:4e:
df:f0:72:32:c7:75:ad:2d:61:51:34:e5:26:50:41:
20:91:92:7e:e5:1d:da:40:0d:09:bd:41:8d:cb:2b:
96:98:f2:2c:ea:00:0e:dc:df:c0:70:b4:27:9a:7e:
cc:d7:c9:78:23:06:14:00:8c:9c:2b:0d:b9:9e:63:
56:8c:ba:fc:61:45:9b:2f:fe:e2:9d:19:e3:6a:fa:
11:39:d4:ca:33:5f:a3:28:33:a5:cb:25:ff:9b:a4:
6d:17:1e:e2:57:77:cb:f9:83:df:c9:b0:e5:cf:8e:
b5:75:22:f7:d9:bd:2f:5f:a6:b4:32:40:c4:98:66:
03:f3:3e:f7:90:7d:34:8b:f2:30:81:8f:38:75:ba:
d2:fd:29:77:56:07:37:68:81:ea:aa:e5:49:b6:c2:
d5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DE:14:38:64:58:16:1D:C2:B2:1D:FC:34:90:57:1B:04:28:5F:B0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Ed4UOGRYFh3Csh38NJBXGwQoX7A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
80.71.237.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:e8:03:46:ae:8d:8c:e7:37:10:b6:1c:86:f1:c7:0e:b1:d1:
d2:de:2d:b3:4e:6b:0e:75:b7:22:a4:48:86:68:3d:88:da:fb:
cd:f5:55:f9:e3:7d:2d:f9:88:bf:ca:0b:ae:af:52:1e:5b:98:
07:27:16:cb:76:68:ed:d2:93:6b:2f:5b:e2:d4:62:14:3e:dc:
77:77:8c:ae:a1:9d:28:2d:eb:85:3b:c4:37:f7:90:41:89:8e:
f8:4a:54:db:a1:39:3f:35:e4:47:a2:50:31:af:53:71:98:d5:
c1:79:5a:8f:c8:18:64:09:1a:b1:86:a2:af:89:67:70:55:f6:
bf:83:69:b5:a7:a8:ea:d5:d0:c5:07:e1:dd:f4:d1:cb:1f:35:
61:81:f2:06:24:a3:89:76:91:00:57:a6:d2:cf:58:64:d7:e8:
cd:99:42:46:0e:4e:94:15:25:95:28:58:e6:02:2f:5f:1a:17:
c7:3d:11:5e:79:2c:93:f9:c3:aa:48:98:b4:b3:5a:17:8b:24:
1c:71:44:c7:ae:81:7b:fe:8e:94:87:4f:cf:0e:a5:65:51:5b:
9e:92:cb:03:97:8d:6c:5c:09:cb:af:72:ba:e8:01:45:74:ef:
7b:32:1a:06:57:a8:07:3b:97:93:04:b1:29:30:6b:12:d7:a9:
12:26:bb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:02 2024 by rpki-client on console-fra.rpki-client.org