Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa
File: GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa (raw, json)
Hash identifier: umxS3dyb848rlW6E0/VQwWDTRBTjsb2V0ClzPjrb3nQ=
Subject key identifier: 1B:01:1D:D0:21:CE:62:DE:8B:BA:9B:1D:A2:D5:4D:7A:AF:D9:D5:D4
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018998700BE50B2D42E489A88F2F5BDBA3DE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa
Signing time: Thu 27 Jul 2023 17:40:27 +0000
ROA not before: Thu 27 Jul 2023 17:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 80.71.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:98:70:0b:e5:0b:2d:42:e4:89:a8:8f:2f:5b:db:a3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 27 17:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b011dd021ce62de8bba9b1da2d54d7aafd9d5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:a7:87:bf:c1:96:4c:88:07:3d:88:09:cc:
66:5e:e4:98:bc:3f:91:eb:9e:82:93:62:48:e4:45:
88:4a:76:05:85:43:5e:d9:2a:f9:21:1b:4b:0b:7e:
a8:c3:30:c5:93:33:51:69:18:81:9b:6f:ac:45:0d:
bb:b8:0e:f4:75:d8:b0:81:16:8a:c7:d2:d8:a0:57:
90:8d:1a:5b:2c:4e:18:0b:97:e4:cf:02:3a:a2:f9:
7f:d5:c8:f8:60:61:01:19:d3:1d:c6:d0:ed:a1:bb:
53:06:0e:4b:0b:09:76:cf:28:8a:a9:78:7e:16:0d:
d8:f1:6c:40:f4:75:17:11:0f:28:4e:81:d1:65:66:
5d:1b:a6:fd:f5:f7:76:ee:c8:10:9f:43:52:03:87:
ff:5c:3a:00:c2:78:ce:f6:27:51:06:32:93:ce:ff:
af:17:08:8e:09:e3:54:ba:67:8c:6a:b0:ea:09:d3:
9f:dd:96:07:45:4f:d2:e8:a5:6b:5e:12:99:ec:f4:
ed:57:5b:79:c0:29:f0:61:3f:e1:b9:f3:53:94:50:
1c:d5:63:44:66:6d:99:49:9a:4c:eb:7b:0f:5d:06:
8d:18:68:d3:d7:49:c1:1d:8a:44:92:bc:88:d0:8c:
67:3d:47:c1:25:87:ee:7e:17:60:05:27:16:8c:6b:
4e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:01:1D:D0:21:CE:62:DE:8B:BA:9B:1D:A2:D5:4D:7A:AF:D9:D5:D4
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/GwEd0CHOYt6LupsdotVNeq_Z1dQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:9b:57:6e:29:b2:ad:fb:fc:98:f2:28:5a:0f:04:fc:56:c1:
b0:bb:50:ce:08:79:d5:0b:51:a3:b5:fc:53:46:e1:86:2d:38:
99:33:85:4d:f0:7c:e4:02:e7:c8:1b:ff:e1:b4:53:ca:59:bc:
e0:87:bc:1e:af:91:a9:c5:de:bc:ad:b8:25:83:4d:24:08:5e:
42:3f:51:50:3a:4d:10:b6:85:53:11:dd:f4:ec:fe:e1:05:18:
d6:4a:85:1d:ad:3a:a7:c0:cd:37:ce:07:43:0a:35:50:18:72:
84:dd:de:cd:7e:dc:70:9b:1e:d9:a9:3f:83:4f:1f:af:8a:8a:
dd:37:a2:78:86:53:59:b1:28:e4:76:59:73:ca:13:7f:87:9d:
26:f7:b2:62:09:27:56:0b:0f:ee:65:56:e4:e1:06:b7:df:0a:
dc:f1:c9:80:d7:ca:26:21:a8:39:33:33:8b:7b:f9:d4:9d:17:
fc:b6:f7:e0:39:b9:1a:d5:ce:77:0a:8c:b8:da:a4:cb:bd:09:
43:6a:86:18:32:5f:75:c2:fd:30:77:9f:88:0c:69:8c:76:4b:
ee:6a:61:23:5a:8c:49:e2:88:55:0a:10:cc:0a:b1:93:36:2b:
58:10:73:c2:ce:8b:cd:8f:07:b5:b0:f9:86:6e:24:a6:3f:47:
b1:e1:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 3 13:24:12 2023 by rpki-client on console-ams.rpki-client.org