Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/En09SS95SFsbd3IqONO0Llx3CiM.roa
File: En09SS95SFsbd3IqONO0Llx3CiM.roa (raw, json)
Hash identifier: Wc3RwFqnv+cMHR+QyLpc7DfyA+r6wA8bMNBJtw0UtMc=
Subject key identifier: 12:7D:3D:49:2F:79:48:5B:1B:77:72:2A:38:D3:B4:2E:5C:77:0A:23
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A65E1BF8BCC7656F4D98B3D234F9EED0B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/En09SS95SFsbd3IqONO0Llx3CiM.roa
Signing time: Tue 05 Sep 2023 15:06:48 +0000
ROA not before: Tue 05 Sep 2023 15:06:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 81.29.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:e1:bf:8b:cc:76:56:f4:d9:8b:3d:23:4f:9e:ed:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 5 15:06:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=127d3d492f79485b1b77722a38d3b42e5c770a23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a3:00:48:6e:50:65:b3:be:d9:41:69:15:55:
9c:d4:9c:e5:a4:94:2f:ee:9c:f2:84:13:f1:51:01:
b9:50:22:2f:6b:ae:93:b5:6a:e0:c2:2c:89:ec:81:
31:b0:c9:7b:fa:b9:cd:99:45:ed:64:34:1d:e1:02:
c2:58:67:85:82:9e:02:27:31:70:b0:5d:db:97:47:
75:9d:c3:5a:8a:fc:68:2e:16:a3:89:3d:29:e9:7b:
fa:1f:ec:2f:e5:41:d0:cf:06:86:eb:a6:62:a3:b2:
cf:d9:4f:9b:ae:92:de:f4:3e:08:d2:ce:32:e9:81:
7d:8c:53:7c:d8:b7:0e:1f:b6:ec:04:53:8f:f9:5b:
35:f7:64:88:c7:eb:cd:49:a1:ed:ab:b8:ba:d7:07:
8e:c6:61:0d:b2:a8:bc:f3:58:a6:a0:c4:ca:ee:ac:
66:9e:0c:79:c8:34:18:13:ad:ac:c9:c9:bb:9f:51:
d0:d8:90:c3:36:a5:1e:e1:cc:17:cd:50:22:4c:41:
77:8b:e3:43:8d:5e:0f:8a:5c:4a:33:7a:87:52:2d:
b6:43:a6:01:c2:4a:23:83:36:52:f7:96:81:37:b1:
91:f7:c1:cb:7c:d8:b8:10:2e:0a:bf:e5:36:82:e9:
49:e1:e5:04:23:8d:64:81:9c:33:f5:f4:06:0b:76:
82:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7D:3D:49:2F:79:48:5B:1B:77:72:2A:38:D3:B4:2E:5C:77:0A:23
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/En09SS95SFsbd3IqONO0Llx3CiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
Signature Algorithm: sha256WithRSAEncryption
88:8f:0b:41:8d:ed:55:f8:eb:11:60:f0:ff:81:e3:9c:4e:4a:
30:1d:74:d7:50:5c:14:8a:a3:ae:e2:95:ef:51:c6:24:36:fc:
cd:60:dc:26:bf:6c:2c:2b:51:a2:c5:3f:1a:4f:ee:2e:71:b3:
36:d4:b5:ac:d7:14:6b:d1:02:7f:c2:c6:89:78:0b:d1:ac:fc:
a8:54:7c:ec:8a:43:da:e4:2f:cd:68:34:1c:7b:0b:14:aa:12:
9a:c0:ca:d5:13:8c:2f:77:c4:82:53:86:aa:f1:29:35:63:e9:
b0:e1:e8:43:88:55:69:99:55:fe:5d:58:24:cb:4b:fe:58:e3:
58:f3:40:31:90:c2:28:30:33:68:e9:49:04:65:9f:b4:44:e0:
82:eb:99:7f:53:aa:8c:a6:23:a9:cd:ab:7d:5b:b5:34:8b:83:
40:29:a0:83:16:6e:d0:9c:87:aa:f3:f0:b7:53:cc:1b:17:ca:
d9:f1:9f:f9:0f:01:81:49:03:ee:0a:15:d0:b7:d5:49:c9:93:
a8:df:83:11:2c:b1:94:a3:40:41:a6:3b:0f:fe:d3:fd:97:d7:
7d:34:78:69:35:9a:77:48:79:14:d4:20:26:50:5c:e5:4e:7c:
cb:e1:f8:ad:a2:cb:d3:b7:57:c8:27:27:ac:28:5e:55:5b:66:
1e:3d:77:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpl4b+LzHZW9NmLPSNPnu0LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwOTA1MTUwNjQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdkM2Q0OTJmNzk0ODViMWI3NzcyMmEzOGQzYjQyZTVjNzcwYTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6MASG5QZbO+2UFpFVWc1JzlpJQv
7pzyhBPxUQG5UCIva66TtWrgwiyJ7IExsMl7+rnNmUXtZDQd4QLCWGeFgp4CJzFw
sF3bl0d1ncNaivxoLhajiT0p6Xv6H+wv5UHQzwaG66Zio7LP2U+brpLe9D4I0s4y
6YF9jFN82LcOH7bsBFOP+Vs192SIx+vNSaHtq7i61weOxmENsqi881imoMTK7qxm
ngx5yDQYE62sycm7n1HQ2JDDNqUe4cwXzVAiTEF3i+NDjV4PilxKM3qHUi22Q6YB
wkojgzZS95aBN7GR98HLfNi4EC4Kv+U2gulJ4eUEI41kgZwz9fQGC3aC9wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJ9PUkveUhbG3dyKjjTtC5cdwojMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvRW4wOVNTOTVTRnNiZDNJcU9OTzBMbHgzQ2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2RMA0G
CSqGSIb3DQEBCwUAA4IBAQCIjwtBje1V+OsRYPD/geOcTkowHXTXUFwUiqOu4pXv
UcYkNvzNYNwmv2wsK1GixT8aT+4ucbM21LWs1xRr0QJ/wsaJeAvRrPyoVHzsikPa
5C/NaDQcewsUqhKawMrVE4wvd8SCU4aq8Sk1Y+mw4ehDiFVpmVX+XVgky0v+WONY
80AxkMIoMDNo6UkEZZ+0ROCC65l/U6qMpiOpzat9W7U0i4NAKaCDFm7QnIeq8/C3
U8wbF8rZ8Z/5DwGBSQPuChXQt9VJyZOo34MRLLGUo0BBpjsP/tP9l9d9NHhpNZp3
SHkU1CAmUFzlTnzL4fitosvTt1fIJyesKF5VW2YePXfl
Generated at Tue Sep 5 16:05:36 2023 by rpki-client on console-fra.rpki-client.org