Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/G2C8slBaGxRawtMmZ-SFLhUnD_A.roa
File: G2C8slBaGxRawtMmZ-SFLhUnD_A.roa (raw, json)
Hash identifier: aNOtnqRg/LhQ8f0KwctRjAYaXlqpk0Xssu2WYyF0H+o=
Subject key identifier: 1B:60:BC:B2:50:5A:1B:14:5A:C2:D3:26:67:E4:85:2E:15:27:0F:F0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CCA2A48BCAD188F25C664A6BBF87B6A7E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/G2C8slBaGxRawtMmZ-SFLhUnD_A.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211014
IP address blocks: 81.29.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 16:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:48:bc:ad:18:8f:25:c6:64:a6:bb:f8:7b:6a:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1b60bcb2505a1b145ac2d32667e4852e15270ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:70:6f:71:1b:18:45:6b:fd:e4:1b:f4:c3:
50:7f:1c:dc:9c:34:5e:7b:56:45:a6:2c:94:02:ff:
fa:db:a5:8f:87:88:60:02:8e:f1:f6:eb:7d:47:6b:
ef:ea:6b:99:0d:d7:96:c9:98:67:45:11:9f:6c:1e:
75:86:d7:b9:5a:53:4b:4c:99:d4:1c:3b:23:10:81:
fd:26:4a:ce:c3:4d:99:c1:5f:48:14:10:15:54:db:
4f:7e:4e:e2:a4:a3:4e:21:8f:ae:e9:0d:5a:b7:fe:
b3:1d:2c:bf:79:68:2c:c1:c5:b4:2c:65:f5:6b:f1:
50:2e:6a:80:41:a4:f7:96:e1:0c:fd:34:5a:3d:75:
0d:17:a9:20:1b:19:99:a8:fa:3d:9f:5d:9a:4d:62:
0e:ce:75:77:6d:e1:39:b1:43:ea:d4:d0:6b:7f:36:
20:99:80:a0:13:8a:65:e5:31:09:ca:1f:c4:e0:fc:
04:a2:8b:e6:f5:76:2c:d5:5d:91:c0:12:22:b6:c7:
41:1e:0e:9e:6c:e6:fa:b4:e0:c3:f1:13:15:dd:80:
a7:b3:47:e7:d9:99:dc:a4:92:7d:06:ec:c3:1c:87:
52:02:56:9b:12:f2:5e:f5:42:cd:8e:ac:f6:9e:2b:
65:28:48:58:7f:cd:46:12:fa:e6:1a:1a:7b:9e:93:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:60:BC:B2:50:5A:1B:14:5A:C2:D3:26:67:E4:85:2E:15:27:0F:F0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/G2C8slBaGxRawtMmZ-SFLhUnD_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cc:a0:df:12:99:cb:65:ad:97:14:9d:b7:55:c8:16:64:44:
c9:1a:55:81:50:9e:b2:83:15:f3:1c:3d:60:96:5f:78:6a:f7:
4d:90:4d:97:54:90:b8:f4:00:41:79:75:45:6e:2a:54:9d:7b:
30:1f:e4:03:66:9e:c2:9d:80:ce:51:d5:47:81:b3:0b:94:45:
f4:ba:02:1f:61:d7:a0:69:58:c8:02:5b:86:f0:25:3a:98:39:
45:e2:1d:cc:3c:14:93:98:b7:18:00:c8:fa:70:6d:6a:e2:7e:
4d:76:4f:97:9b:15:73:2e:97:98:82:ac:34:4c:8d:a9:ee:eb:
00:9b:a3:f4:69:3e:98:ef:2c:b5:d3:1b:26:9e:6f:e7:d6:3c:
ea:a2:49:2d:aa:c2:d5:f0:c0:49:a2:cd:86:81:d4:6e:e6:cd:
b9:01:77:25:6a:80:49:a2:4d:e1:75:bc:34:d5:12:c8:ff:7a:
0f:7b:f8:17:f9:5e:d1:e8:8b:2c:50:59:c0:70:05:84:df:ee:
4c:a0:dc:16:2f:4a:b9:25:c6:9a:02:aa:d7:1b:7c:77:c5:51:
ff:d4:11:1b:08:a0:f7:87:2d:0a:90:7e:94:40:f3:0f:17:cf:
f8:6c:85:42:ff:12:2c:58:95:a9:f3:77:92:f9:e5:e1:6f:ac:
5d:d0:fa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 21:50:57 2024 by rpki-client on console-fra.rpki-client.org