Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Gyjhf9hQIx3UcaGOJT8HoA6rP6A.roa
File: Gyjhf9hQIx3UcaGOJT8HoA6rP6A.roa (raw, json)
Hash identifier: fAXVjzN/XTW8f60yLd9wXg80C1c0HWidCjwEjJ5xN0k=
Subject key identifier: 1B:28:E1:7F:D8:50:23:1D:D4:71:A1:8E:25:3F:07:A0:0E:AB:3F:A0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A8344B3F04A32BD73FDEA72049A3A4A3B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Gyjhf9hQIx3UcaGOJT8HoA6rP6A.roa
Signing time: Mon 11 Sep 2023 08:03:52 +0000
ROA not before: Mon 11 Sep 2023 08:03:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.236.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:44:b3:f0:4a:32:bd:73:fd:ea:72:04:9a:3a:4a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 11 08:03:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b28e17fd850231dd471a18e253f07a00eab3fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:cb:15:11:be:36:fe:cd:c8:fe:be:51:c8:0a:
1e:0b:13:c6:f9:f5:c2:11:0f:a0:7e:87:74:59:63:
89:41:ff:a0:06:5a:68:83:d9:05:36:73:47:fa:a2:
64:fe:6c:25:54:8d:43:56:bc:61:fb:63:4f:d2:08:
b3:bb:14:b3:ab:b6:0b:18:33:81:69:15:49:e9:8e:
63:04:be:a2:44:46:83:4b:51:83:16:a8:63:9a:9b:
59:17:93:89:94:4c:31:ad:48:b8:af:76:82:aa:9a:
f5:a6:de:48:14:3a:2a:e7:fc:5f:ad:98:a1:31:98:
1e:e1:53:66:b4:64:c6:4c:71:75:d4:1f:6f:62:a9:
28:50:74:2e:fe:30:aa:f9:30:7b:db:b3:00:1e:19:
33:4a:f8:37:4f:31:86:77:16:1b:e8:d0:22:8b:e8:
fd:c1:71:c0:6a:f8:ee:0f:20:ff:6e:1e:56:8d:7f:
76:f8:21:da:c9:cb:33:ce:16:0a:1a:2a:4c:9d:99:
10:be:4b:88:9b:a5:e5:c8:81:0d:51:6d:28:92:46:
a4:5b:34:ad:db:31:e0:a0:dd:06:a7:51:5f:fc:06:
00:10:82:00:0d:ca:2f:50:74:cd:a5:7b:95:65:9f:
e5:d4:73:29:9e:b3:6e:5d:e1:6f:15:cc:2b:19:a4:
cc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:28:E1:7F:D8:50:23:1D:D4:71:A1:8E:25:3F:07:A0:0E:AB:3F:A0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Gyjhf9hQIx3UcaGOJT8HoA6rP6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
81.29.154.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:62:a8:9e:b2:15:80:f2:c1:8b:a3:64:4b:82:46:0e:bc:a3:
78:8a:90:a0:5b:8b:2d:f6:4f:67:da:a2:5c:5e:95:0f:23:1f:
1b:e3:11:4d:a5:9e:92:9e:64:d6:d9:94:98:c2:b9:59:ff:0f:
f0:fe:48:5f:f2:74:2d:7e:38:d6:3c:c5:e4:df:5f:3e:14:51:
11:43:b2:6d:47:83:cf:2d:17:f1:16:a2:da:86:e3:67:f4:5c:
30:73:a7:f4:32:15:f3:96:cf:3d:23:46:b9:24:58:92:96:71:
3d:5d:9e:df:af:1a:3f:aa:38:cd:f0:e5:8a:e1:66:c5:95:25:
81:7f:1a:2e:f1:a4:27:bc:7f:ce:06:e6:1b:d6:c6:96:53:41:
3e:7d:c0:51:3d:11:53:65:90:65:93:e0:c1:be:b4:30:84:ad:
dd:f7:a2:55:6a:70:f1:2a:5c:3a:e1:b1:4c:55:e1:ae:55:d0:
a8:80:5c:01:14:43:21:d4:7a:5b:39:b9:a1:39:df:cf:74:ad:
b6:b4:65:bf:2c:0a:37:21:dc:59:d9:f3:57:d0:b8:a5:d6:26:
56:4f:82:7d:ad:35:c6:30:22:e5:d0:66:6a:5d:78:52:e5:40:
02:1a:01:ef:13:b1:d6:48:9a:ab:53:0b:ef:2e:c9:38:8f:69:
bd:cf:0a:f9
-----BEGIN CERTIFICATE-----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Generated at Tue Sep 12 14:09:35 2023 by rpki-client on console-fra.rpki-client.org