Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Hh3aQO6QIihC89hu7Jl3LzbISvA.roa
File: Hh3aQO6QIihC89hu7Jl3LzbISvA.roa (raw, json)
Hash identifier: ENurVLpr6DYzmVnaxPsL2PgdrUDNere2b0Ajc8uERY8=
Subject key identifier: 1E:1D:DA:40:EE:90:22:28:42:F3:D8:6E:EC:99:77:2F:36:C8:4A:F0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018792E03C2B3CEB93258B45DB49FA5099F8
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Hh3aQO6QIihC89hu7Jl3LzbISvA.roa
Signing time: Tue 18 Apr 2023 05:39:41 +0000
ROA not before: Tue 18 Apr 2023 05:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209408
IP address blocks: 80.71.225.0/24 maxlen: 24
80.71.228.0/24 maxlen: 24
45.66.224.0/22 maxlen: 22
81.29.145.0/24 maxlen: 24
81.29.146.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
81.29.148.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
81.29.156.0/24 maxlen: 24
81.29.158.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:92:e0:3c:2b:3c:eb:93:25:8b:45:db:49:fa:50:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 18 05:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1e1dda40ee90222842f3d86eec99772f36c84af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:18:84:1f:f9:b4:d2:f9:3e:40:52:ad:43:a6:
dd:29:a3:2c:3e:08:a8:70:f4:29:94:38:d9:ff:a6:
c7:50:9a:b9:cf:6b:3e:f5:b3:00:9d:c3:85:23:51:
40:6a:f0:65:d9:46:28:82:3f:0d:88:30:ce:c6:a7:
26:03:cf:16:bd:c2:49:dd:c7:82:0d:88:e8:ef:08:
26:51:25:40:ae:3e:f5:9c:3d:4e:f2:97:40:54:d6:
e9:28:79:86:af:3c:90:5f:42:f7:0f:44:52:52:27:
3d:f4:ed:16:ea:9c:ef:07:83:62:ed:f0:3b:31:c7:
ae:3c:10:29:fb:d4:a1:7c:aa:da:bf:ff:8f:0c:11:
51:df:6a:7b:b7:cb:10:79:d1:ec:5e:a3:5c:b8:7e:
93:12:63:1e:a3:e8:4c:d8:82:8a:10:5c:75:c7:97:
a4:57:00:f8:d3:c8:0a:39:4b:07:14:69:54:56:5f:
fb:99:59:96:aa:13:d0:bd:cb:aa:b0:aa:aa:5b:62:
a8:c9:33:52:19:36:b8:45:88:0c:49:61:63:22:1a:
6f:cf:65:39:e0:a4:ff:27:58:fc:ad:43:dd:41:57:
73:66:a7:3e:0b:97:f7:c8:1d:f0:af:40:8d:08:66:
09:09:ab:38:28:44:6b:5c:df:9f:29:cb:99:4d:98:
af:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1D:DA:40:EE:90:22:28:42:F3:D8:6E:EC:99:77:2F:36:C8:4A:F0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Hh3aQO6QIihC89hu7Jl3LzbISvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
80.71.225.0/24
80.71.228.0/24
81.29.145.0-81.29.149.255
81.29.156.0/24
81.29.158.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
60:e7:c6:db:50:ef:88:59:da:01:a2:e3:92:38:45:d2:14:0c:
21:e6:e5:5b:05:0b:71:bf:9e:a4:b2:95:80:0a:8c:af:76:91:
62:76:0f:23:fa:61:1d:90:80:fb:f5:65:32:80:7d:20:0e:63:
a2:78:54:b3:6d:a2:5e:68:30:22:74:35:93:04:a3:85:4b:33:
da:ae:89:f7:7e:f4:94:40:e9:c4:88:b5:b1:b5:8a:c1:57:f8:
c1:3b:6e:35:6c:c4:15:e8:ea:33:b9:59:0f:b4:7f:18:68:48:
d2:df:28:08:76:70:49:64:ee:48:18:7a:8c:64:0c:38:65:5e:
94:e3:8b:3c:72:9a:0c:f1:c2:9b:ea:07:3c:1c:9d:fd:2d:43:
76:9c:e0:b4:a5:8b:a0:34:db:f1:cf:c1:4c:f0:c2:d0:51:f6:
22:4a:40:05:2c:bc:7f:09:ab:60:f5:c1:a3:e3:5c:47:5f:cf:
77:00:fc:48:b5:31:2d:76:f4:9e:59:ca:c4:db:7b:68:0a:4e:
99:f1:43:f0:6f:f5:75:ee:59:ee:4f:64:c0:1d:11:63:98:e7:
d8:db:b3:6e:27:2d:a3:3b:1b:59:91:75:be:ce:81:b4:8d:fe:
e5:2e:39:f7:0c:4c:d9:cb:81:09:98:40:25:93:b4:f4:02:a7:
10:54:46:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org