Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Fk1E2LJwMJ4S5p1h1PBhsbQA3uU.roa
File: Fk1E2LJwMJ4S5p1h1PBhsbQA3uU.roa (raw, json)
Hash identifier: /RL7/OgC2euNfbpgx6g/2jDxRRu5lZnAaE3BgsE2bak=
Subject key identifier: 16:4D:44:D8:B2:70:30:9E:12:E6:9D:61:D4:F0:61:B1:B4:00:DE:E5
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01874FF8BF30DD53582F81612E7426D42C64
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Fk1E2LJwMJ4S5p1h1PBhsbQA3uU.roa
Signing time: Wed 05 Apr 2023 05:51:54 +0000
ROA not before: Wed 05 Apr 2023 05:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 80.71.225.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 10 Apr 2023 17:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4f:f8:bf:30:dd:53:58:2f:81:61:2e:74:26:d4:2c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 5 05:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164d44d8b270309e12e69d61d4f061b1b400dee5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:29:55:a9:cb:e6:e0:ba:40:d4:7c:7b:5c:8d:
59:ad:91:bb:06:15:81:7e:24:f9:ed:23:65:0d:3f:
36:20:a3:b4:ba:4b:c6:7d:77:cd:7a:cb:bd:e0:f2:
1e:95:17:da:8e:44:21:e6:36:76:0f:12:c7:78:be:
52:0e:f5:66:78:9e:b4:5b:7e:eb:f8:39:29:e6:33:
4d:e1:63:22:fa:cf:e9:ec:11:31:85:9b:4b:a9:a0:
84:3a:fc:e6:7f:b8:3d:37:6e:a5:9d:69:83:b3:77:
bc:6b:ca:cb:4f:dd:56:3f:95:d2:db:23:3a:98:40:
b7:ef:bb:e3:9d:46:b3:4e:fa:69:7e:f5:ef:86:10:
c5:d4:43:c9:47:0b:47:b0:0b:8a:1f:92:9c:b4:90:
74:bb:68:db:ca:cc:cb:85:7d:f7:b5:33:77:2a:ed:
5c:09:a3:5a:f7:c2:83:ee:9d:cc:2c:de:83:ee:22:
6f:04:9b:a0:e7:36:28:d9:13:de:12:1a:fd:bb:76:
2f:dd:ab:57:43:63:0b:db:10:e8:32:70:1f:c6:81:
30:60:ee:35:25:16:02:80:9b:19:3e:7c:89:96:54:
2a:29:8e:b0:e5:53:96:df:61:e4:61:7f:7c:ab:dc:
66:c3:13:76:56:b8:5e:e6:36:03:5a:06:da:d1:2b:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4D:44:D8:B2:70:30:9E:12:E6:9D:61:D4:F0:61:B1:B4:00:DE:E5
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Fk1E2LJwMJ4S5p1h1PBhsbQA3uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0/24
81.29.147.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:41:be:d9:b4:f2:21:0f:64:01:03:83:a9:19:70:2c:a2:c7:
e9:ab:a9:7f:69:98:1a:95:d8:42:5a:e7:2d:0d:fa:f0:70:f6:
d2:05:5b:24:5a:48:31:7f:a6:6d:66:34:96:9f:26:2e:f8:b0:
10:d6:a1:b7:f1:a4:da:ea:ab:8b:0e:e8:b5:6d:7d:74:16:56:
79:88:f2:a5:b4:43:30:d3:d8:0e:4d:bd:30:2c:39:be:a0:3f:
b6:ff:ec:35:04:ed:bc:da:00:a5:98:14:6d:f5:52:21:b1:b0:
23:5e:a0:55:c7:2e:c3:05:02:b8:65:16:17:c2:da:82:e8:72:
7c:f4:7f:df:52:63:7b:b0:4d:b2:d7:f1:dc:23:59:8a:59:88:
5b:40:16:d6:34:18:df:f9:df:25:ca:b7:69:29:a1:c6:bf:b7:
23:d2:b9:78:13:84:e1:9e:d0:82:e8:92:57:69:a0:d3:8b:db:
95:95:01:60:bb:14:7e:03:77:e9:f5:41:c3:3a:4d:a4:cb:29:
07:0e:98:52:ae:cc:ed:fc:46:da:c3:8b:52:4e:c8:73:0a:51:
cb:18:bc:bc:79:97:e6:b4:f7:54:ae:e0:2f:43:79:ab:cf:c2:
88:a7:0b:38:45:54:df:a0:4e:f5:7e:e4:30:0e:07:25:d8:a0:
8a:21:02:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org