Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/H4OYjM0dbrQgU4V2Ftfs42n1Yvc.roa
File: H4OYjM0dbrQgU4V2Ftfs42n1Yvc.roa (raw, json)
Hash identifier: h/Vqam+wbuFYN4WQPMT9tKjY3E90IlW9hfyv+jkzacs=
Subject key identifier: 1F:83:98:8C:CD:1D:6E:B4:20:53:85:76:16:D7:EC:E3:69:F5:62:F7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189F28B3E01E53D599041D9047106A65B39
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/H4OYjM0dbrQgU4V2Ftfs42n1Yvc.roa
Signing time: Mon 14 Aug 2023 05:35:58 +0000
ROA not before: Mon 14 Aug 2023 05:35:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212219
IP address blocks: 80.71.228.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 14:45:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f2:8b:3e:01:e5:3d:59:90:41:d9:04:71:06:a6:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 14 05:35:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f83988ccd1d6eb42053857616d7ece369f562f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:29:09:e9:1a:ca:02:5f:4f:10:df:47:55:00:
aa:72:8a:9d:e7:6d:45:99:fa:96:f5:dd:c8:56:57:
a9:9d:a0:c2:cb:7c:ca:df:eb:b7:25:12:c8:b9:90:
5a:58:76:5a:9d:87:e3:87:ca:63:91:84:9a:84:21:
81:e4:bd:03:1f:7f:57:ca:79:0c:1a:2c:2d:89:c9:
fb:73:6c:5e:ab:92:39:58:c8:29:a2:93:a1:43:52:
2d:9a:60:2e:75:af:29:5b:4e:ad:d5:21:42:11:87:
2b:cc:55:b4:d9:eb:9b:b3:95:3e:67:43:e4:94:e0:
71:5d:67:ee:76:81:36:ed:dd:60:c5:31:41:af:08:
c3:71:43:8b:83:3e:64:14:7e:48:71:fc:aa:74:7a:
5e:06:54:7a:b0:74:20:b3:b2:05:b8:75:47:93:17:
56:21:88:98:c2:1f:34:f9:54:8a:0d:d8:a0:a9:fe:
b5:c1:c6:74:8b:e0:a7:47:73:42:eb:13:e3:d2:9d:
80:77:94:5e:e9:d4:88:b3:69:70:d5:60:a2:67:6d:
76:e4:5a:81:c3:9c:f5:8c:4f:b2:ed:51:c1:fd:ea:
65:83:4f:d5:27:af:ff:4c:95:61:d5:13:c0:2e:3c:
a2:a8:78:65:c3:34:58:a3:ea:9f:a8:80:43:0d:12:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:83:98:8C:CD:1D:6E:B4:20:53:85:76:16:D7:EC:E3:69:F5:62:F7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/H4OYjM0dbrQgU4V2Ftfs42n1Yvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.228.0/24
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
98:47:a8:29:8c:bc:f2:da:f7:63:7a:bf:cb:d4:fc:52:11:2d:
8a:7e:45:12:f2:66:7f:73:1f:a7:c4:ce:e5:80:37:23:fc:fa:
2a:70:8d:0d:52:b6:d4:0e:59:9b:e6:1b:7b:75:bd:6f:3e:29:
c2:0a:e0:b7:2a:5a:d6:5e:57:21:60:32:c2:63:27:06:cd:1b:
0c:9c:2e:53:e1:57:fb:22:46:93:88:3d:b3:42:84:7c:14:ed:
bb:c8:f9:5e:21:b8:d4:4e:87:87:58:b0:36:62:11:40:7b:6a:
88:b2:bd:22:c9:1f:70:4c:d5:9b:61:ff:bb:2c:2d:9d:5b:89:
e4:e2:b0:c2:91:05:6f:e1:9f:de:71:e0:d1:a2:8d:b3:3c:37:
74:98:6d:e9:39:49:96:b6:6f:ba:5b:31:2c:1f:b2:30:e2:a3:
76:1f:70:a9:22:83:62:89:89:46:88:05:1b:83:fd:2d:54:f1:
d6:25:18:5d:3c:bc:c5:56:f0:98:c4:dd:18:48:93:73:c4:3f:
fe:17:e1:65:36:ae:4d:e0:2e:e4:81:53:fb:1a:74:7a:db:37:
10:73:7e:51:15:46:5e:3f:da:f3:5f:e9:1e:c1:4f:c6:10:a6:
ce:6f:6d:01:2f:e0:a6:a2:bd:82:4b:fb:d6:a9:dc:99:aa:b6:
dd:81:ed:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org