Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/EuxGxLFN-lmpS_RjZp0zXX_T5RM.roa
File: EuxGxLFN-lmpS_RjZp0zXX_T5RM.roa (raw, json)
Hash identifier: 2QcZD0+tOJHVApUEk4z7ALVKCOvRLMPvnTgQVdT/z9A=
Subject key identifier: 12:EC:46:C4:B1:4D:FA:59:A9:4B:F4:63:66:9D:33:5D:7F:D3:E5:13
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018C241A6FADC6A848C972BCE62D2036D705
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/EuxGxLFN-lmpS_RjZp0zXX_T5RM.roa
Signing time: Fri 01 Dec 2023 06:39:21 +0000
ROA not before: Fri 01 Dec 2023 06:39:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
80.71.235.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:1a:6f:ad:c6:a8:48:c9:72:bc:e6:2d:20:36:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Dec 1 06:39:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12ec46c4b14dfa59a94bf463669d335d7fd3e513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d4:d9:3a:e6:7c:a7:c6:60:8e:29:ff:41:8a:
6b:71:85:b8:31:e1:18:44:6a:99:63:d2:63:2d:31:
98:98:f3:4e:34:5e:98:13:7d:ec:d9:fa:02:2b:ae:
e8:95:68:e1:d6:e3:12:e4:58:a9:80:60:c1:e4:d4:
8f:4f:c5:c0:f8:92:f0:19:5b:8c:67:d2:00:c1:a4:
fe:80:d5:28:a8:19:72:90:a5:02:22:73:0b:a8:a2:
6c:0e:bc:77:18:8c:b5:b0:c2:9a:2d:fb:2a:b2:7c:
81:09:d2:ac:69:7d:40:86:84:c8:ff:ae:b1:01:2c:
e0:7d:49:4c:b3:99:23:99:48:95:e8:72:d6:2b:e0:
d6:c0:d0:54:1c:bb:aa:0c:eb:4d:3a:0a:f6:8b:65:
c1:7c:b7:7f:69:53:23:f6:e4:75:bd:de:20:2d:95:
64:d5:7b:1d:ac:44:5a:cf:4b:d2:4c:d2:e4:35:e9:
9d:e2:44:01:cb:0d:ad:34:0f:f5:aa:55:f4:23:e7:
6e:fb:69:56:b2:e5:96:d7:d6:92:3d:b4:17:38:c3:
99:10:34:a5:58:01:21:68:10:d7:ea:e6:ea:d2:5e:
f6:00:06:2c:b7:59:46:a1:3d:22:ad:c8:42:62:13:
e0:76:21:31:12:25:77:50:f2:6f:8c:0f:84:d1:0c:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:EC:46:C4:B1:4D:FA:59:A9:4B:F4:63:66:9D:33:5D:7F:D3:E5:13
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/EuxGxLFN-lmpS_RjZp0zXX_T5RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.233.0/24
80.71.235.0-80.71.236.255
80.71.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:df:d8:c0:22:7b:95:87:b3:a9:b6:f8:e0:41:3a:d9:59:eb:
32:0e:62:29:49:a7:e0:91:a8:ac:b7:ba:5f:4c:3b:e8:80:16:
84:fb:a9:53:54:c3:52:c2:2a:49:67:a8:fb:d8:7e:51:b7:55:
af:93:10:2f:51:2b:13:21:ea:c0:19:fa:e9:28:8a:3d:d4:b1:
53:25:59:f3:73:96:38:14:b0:57:05:f2:ed:f8:6a:ba:9e:88:
fa:6e:f6:55:5c:08:ed:f1:90:37:7a:cf:51:0d:23:48:51:82:
b0:f3:6d:68:07:b4:8f:e7:59:23:21:19:ea:7e:30:6e:e0:b8:
a5:e4:ca:e2:53:ea:7d:4e:d9:1d:f0:7f:d3:1b:19:ad:ce:4f:
56:c7:9c:6c:60:e2:c0:fb:46:be:68:49:07:1f:7b:c8:1d:7d:
bd:75:78:68:01:d7:bd:d1:39:f1:6c:a2:42:89:a7:70:60:17:
c4:31:a0:c5:cc:73:03:fd:4c:c6:74:8a:5b:ac:19:11:39:99:
a0:5e:e6:d4:01:d3:7e:2b:e7:5d:d1:dc:d4:20:7f:0a:76:8e:
df:be:de:0d:97:c9:36:a2:a1:72:0b:4e:32:94:fb:ed:5c:b3:
3e:f9:6f:06:0c:c2:d9:a8:15:17:76:d3:71:b1:e6:3e:57:62:
b6:e9:32:e8
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYwkGm+txqhIyXK85i0gNtcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMxMjAxMDYzOTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMmVjNDZjNGIxNGRmYTU5YTk0YmY0NjM2NjlkMzM1ZDdmZDNlNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNTZOuZ8p8Zgjin/QYprcYW4MeEY
RGqZY9JjLTGYmPNONF6YE33s2foCK67olWjh1uMS5FipgGDB5NSPT8XA+JLwGVuM
Z9IAwaT+gNUoqBlykKUCInMLqKJsDrx3GIy1sMKaLfsqsnyBCdKsaX1AhoTI/66x
ASzgfUlMs5kjmUiV6HLWK+DWwNBUHLuqDOtNOgr2i2XBfLd/aVMj9uR1vd4gLZVk
1XsdrERaz0vSTNLkNemd4kQByw2tNA/1qlX0I+du+2lWsuWW19aSPbQXOMOZEDSl
WAEhaBDX6ubq0l72AAYst1lGoT0irchCYhPgdiExEiV3UPJvjA+E0QxVoQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFBLsRsSxTfpZqUv0Y2adM11/0+UTMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvRXV4R3hMRk4tbG1wU19SalpwMHpYWF9UNVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAUEfnAwQA
UEfpMAwDBABQR+sDBABQR+wDBABQR+4wDQYJKoZIhvcNAQELBQADggEBAFzf2MAi
e5WHs6m2+OBBOtlZ6zIOYilJp+CRqKy3ul9MO+iAFoT7qVNUw1LCKklnqPvYflG3
Va+TEC9RKxMh6sAZ+ukoij3UsVMlWfNzljgUsFcF8u34arqeiPpu9lVcCO3xkDd6
z1ENI0hRgrDzbWgHtI/nWSMhGep+MG7guKXkyuJT6n1O2R3wf9MbGa3OT1bHnGxg
4sD7Rr5oSQcfe8gdfb11eGgB173ROfFsokKJp3BgF8QxoMXMcwP9TMZ0ilusGRE5
maBe5tQB034r513R3NQgfwp2jt++3g2XyTaioXILTjKU++1csz75bwYMwtmoFRd2
03Gx5j5XYrbpMug=
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:43 2024 by rpki-client on console-ams.rpki-client.org