Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/FayPKg8mZOkpUjuBxiZTCSo4Djs.roa
File: FayPKg8mZOkpUjuBxiZTCSo4Djs.roa (raw, json)
Hash identifier: x3VsPCC32imtuuZSRTGc2k19t0MhthBvq++ZzT1txto=
Subject key identifier: 15:AC:8F:2A:0F:26:64:E9:29:52:3B:81:C6:26:53:09:2A:38:0E:3B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A6022BFBD093D864C8A0A82538D2CF698
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/FayPKg8mZOkpUjuBxiZTCSo4Djs.roa
Signing time: Mon 04 Sep 2023 12:20:04 +0000
ROA not before: Mon 04 Sep 2023 12:20:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 80.71.227.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
81.29.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Sep 2023 07:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:60:22:bf:bd:09:3d:86:4c:8a:0a:82:53:8d:2c:f6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 4 12:20:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15ac8f2a0f2664e929523b81c62653092a380e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d7:61:4d:28:e3:38:e5:23:f6:58:b4:7c:04:
23:a7:b0:7b:88:41:ac:40:df:08:e6:22:d3:ce:c4:
94:f7:dd:c2:74:20:89:2b:cc:af:e5:c4:7e:04:21:
5b:db:06:03:db:df:37:1e:7f:91:0b:2c:6a:f0:3d:
62:cd:8e:51:70:53:e2:1f:96:e8:f4:38:c4:7d:e3:
a3:6b:99:61:2e:eb:cc:32:0f:23:70:fd:41:b2:13:
6e:f7:c8:26:bc:85:ae:f9:e8:e6:42:a5:77:b9:b4:
67:aa:72:c5:61:a7:49:b8:1c:a3:73:98:8c:a1:db:
7e:39:42:f8:f1:21:03:f6:9e:bf:f4:5c:6c:05:ca:
cb:85:cf:a1:c7:23:d8:dc:13:bb:0f:3d:ff:22:47:
ec:50:dd:d3:43:d3:73:7f:79:6a:b7:93:fc:57:1d:
b3:cd:02:dc:9b:4d:ae:b2:43:ce:f5:d9:95:89:c1:
13:25:d2:0a:02:b6:47:53:71:8c:fb:cf:18:b7:bb:
50:a4:ed:30:86:7b:40:45:1f:a1:b5:b8:29:82:ef:
32:9d:df:70:c7:b9:36:a6:c0:f8:d4:ad:de:ea:17:
4c:12:b7:f7:48:d0:f1:31:29:c4:f0:2b:42:e7:e0:
29:75:fd:10:b2:39:3c:e5:79:eb:fb:07:66:f2:cb:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AC:8F:2A:0F:26:64:E9:29:52:3B:81:C6:26:53:09:2A:38:0E:3B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/FayPKg8mZOkpUjuBxiZTCSo4Djs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
80.71.233.0/24
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:d6:55:ad:03:f9:1f:23:85:10:2b:12:9b:e9:25:52:7b:2f:
37:65:71:1e:b1:d5:15:ef:dd:a9:f2:23:ea:a2:7a:ee:cf:ae:
b1:c9:71:08:82:0c:29:3a:c2:7d:98:95:2c:63:08:fb:dd:4b:
22:23:d1:15:5d:86:8c:e4:d3:16:86:2e:a0:a1:2d:0e:86:68:
2e:85:fc:12:8e:fe:a5:9a:85:68:62:7b:93:fc:ce:42:ba:4d:
2f:b2:45:18:e6:9f:fd:d6:b1:5a:0c:72:4f:5c:6e:d5:92:da:
55:85:e0:d8:85:f0:a0:37:8c:f1:37:b5:3d:01:1a:45:c4:a4:
41:15:d6:7f:45:12:ae:71:e4:25:ac:40:55:5e:4a:02:24:bb:
8f:96:44:a0:0b:86:90:69:78:9e:a7:b2:bc:22:9f:b9:b0:e7:
ad:8d:da:d0:94:4b:52:78:ff:5e:92:f6:01:a7:56:f0:77:cd:
48:6c:9f:e3:bd:c6:5f:01:d3:56:09:62:9e:12:bb:6a:0b:04:
b6:44:3b:37:f5:69:d6:64:2a:b2:99:94:9f:c8:8c:2c:bc:7f:
f7:e5:b0:1f:2b:97:d0:98:ad:88:d6:a5:86:d6:57:75:ea:4f:
ae:dc:db:ef:6a:ed:6d:db:23:d3:d0:b3:0c:7a:25:48:89:1a:
71:7a:16:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org