Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/HsVFpRLtsF741ME770wO4Pym8GU.roa
File: HsVFpRLtsF741ME770wO4Pym8GU.roa (raw, json)
Hash identifier: kc4+xldRcBW6zXd+//U0jr/s3o6Ei+oQSgp95WV78JE=
Subject key identifier: 1E:C5:45:A5:12:ED:B0:5E:F8:D4:C1:3B:EF:4C:0E:E0:FC:A6:F0:65
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01856F54B38C506E94071BB06391B7D19754
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/HsVFpRLtsF741ME770wO4Pym8GU.roa
Signing time: Sun 01 Jan 2023 21:54:59 +0000
ROA not before: Sun 01 Jan 2023 21:54:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 80.71.226.0/24 maxlen: 24
80.71.224.0/24 maxlen: 24
80.71.238.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
81.29.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b3:8c:50:6e:94:07:1b:b0:63:91:b7:d1:97:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:54:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ec545a512edb05ef8d4c13bef4c0ee0fca6f065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cb:db:27:83:9d:a4:b2:14:29:64:30:cf:9c:
9e:29:91:1d:cf:f3:c4:f4:2a:ab:69:1f:81:d7:ef:
e5:31:9f:db:01:f0:42:e0:fd:93:54:4a:f0:aa:ca:
dc:3b:e7:e3:10:a8:4c:7d:a4:c2:94:3d:30:5c:4f:
23:8d:76:69:5a:68:ea:89:d9:b4:6d:14:57:33:61:
6b:7f:34:97:91:5b:e1:e2:dc:ad:18:a5:ba:e3:57:
54:81:09:df:52:e4:66:30:07:78:26:9a:96:d5:5f:
2b:bb:2b:ef:03:4d:c2:db:bc:dd:8c:7b:6a:17:21:
d0:b8:cd:1a:2a:f9:02:05:54:3d:59:fb:66:8e:e7:
6f:bf:f1:30:ff:0d:06:94:93:bb:cd:04:36:69:e3:
eb:ca:d7:df:4b:27:80:11:74:92:42:a5:7c:6b:a9:
97:82:de:4e:74:71:05:bb:08:c3:af:a8:65:0d:20:
77:4a:88:23:5f:de:1a:60:6f:e2:22:4f:70:d3:d4:
80:5b:55:60:bf:60:47:91:41:79:0d:dd:82:20:8e:
9c:15:09:bb:33:b6:39:82:54:a5:86:b0:9d:33:f2:
8e:49:4c:34:7c:7f:45:21:7c:38:c1:5c:af:cc:a3:
34:54:dc:b9:b2:c5:9c:d5:80:9f:48:ac:0b:89:68:
57:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:45:A5:12:ED:B0:5E:F8:D4:C1:3B:EF:4C:0E:E0:FC:A6:F0:65
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/HsVFpRLtsF741ME770wO4Pym8GU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
80.71.226.0/24
80.71.236.0/24
80.71.238.0/24
81.29.144.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:d3:b5:c4:63:65:f3:c3:48:d0:dd:21:74:19:50:7e:f9:cf:
84:bd:b6:31:b1:ab:a8:cc:31:6b:e8:4e:22:fa:9b:bd:bf:c6:
71:54:5c:4d:18:b7:35:33:a4:3d:08:0d:4a:e7:14:a3:57:d3:
93:92:b3:5d:6d:51:55:39:d2:2a:ab:c7:6b:b9:51:c7:71:fd:
e1:95:71:6b:ae:2e:49:b6:99:c0:2f:f5:c6:52:b1:b7:bc:03:
97:1f:31:14:5e:39:cc:a8:57:f2:80:74:9b:4a:af:7b:3b:4f:
af:2c:e4:de:2a:b8:3a:0b:67:83:08:52:f6:de:98:df:7c:c5:
53:9b:9b:db:df:f0:32:f8:7c:93:c8:54:12:86:9f:76:46:2a:
34:73:a5:7c:c9:6e:ee:b9:ac:e8:35:67:e8:20:6a:d7:94:ac:
d0:9a:98:d6:c2:34:2c:69:5e:d4:ef:bb:a9:0b:b9:3e:f4:d3:
1e:7a:ed:59:cf:17:31:59:8f:88:e5:df:d2:48:71:e2:d7:1a:
7c:82:2f:25:d9:68:39:75:69:66:33:8d:ec:51:89:4e:39:e7:
d9:2f:50:4d:13:d7:9b:27:38:eb:a0:ff:6d:d8:be:e5:96:e7:
f6:1f:3c:1f:4e:cf:f1:b8:11:d2:61:22:6d:25:8e:fc:4a:cd:
9a:9a:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org