Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Hx4xXTuZGxU5UPC0b2TRoQOzRjU.roa
File: Hx4xXTuZGxU5UPC0b2TRoQOzRjU.roa (raw, json)
Hash identifier: TE+OzstArUUPxtd9RP5ztXe0B5n4vIHuFwXQ1OhS1as=
Subject key identifier: 1F:1E:31:5D:3B:99:1B:15:39:50:F0:B4:6F:64:D1:A1:03:B3:46:35
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189FCCD0847F32F4B021C82552276AC4B33
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Hx4xXTuZGxU5UPC0b2TRoQOzRjU.roa
Signing time: Wed 16 Aug 2023 05:24:02 +0000
ROA not before: Wed 16 Aug 2023 05:24:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 80.71.229.0/24 maxlen: 24
80.71.232.0/24 maxlen: 24
80.71.235.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:fc:cd:08:47:f3:2f:4b:02:1c:82:55:22:76:ac:4b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 16 05:24:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f1e315d3b991b153950f0b46f64d1a103b34635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:e7:89:6f:a8:aa:51:ab:d0:ad:5f:8d:d0:
f4:6e:ff:41:3c:98:06:bd:ca:97:30:9c:b9:97:4a:
6f:0b:74:fa:81:cb:a9:29:70:ae:62:4b:9f:fb:69:
f8:a5:5d:e1:4e:e6:e1:68:b6:94:29:db:77:f2:fa:
2c:2c:74:bf:01:a9:49:88:e3:a2:b9:a5:49:27:d9:
c6:06:09:43:af:c8:6c:71:c1:10:e4:9e:49:1d:58:
8c:d8:ba:15:78:34:39:bd:6f:ef:b9:6c:49:08:56:
58:b9:67:70:a4:34:31:ca:b4:7a:11:a8:38:53:e0:
fe:74:db:e2:f9:5a:09:11:f0:45:03:a3:26:ae:91:
c5:3d:1f:0e:da:86:8c:73:59:a1:80:8b:3d:cd:64:
86:94:2f:f5:94:16:68:b4:09:c9:f2:62:95:bd:fe:
d4:52:16:94:fd:a4:92:0f:44:1c:ab:dc:b7:22:6c:
2a:15:d4:59:22:11:d9:7a:9c:8c:7f:be:f1:36:fb:
94:35:6c:47:8f:0b:c0:ba:f5:f3:b1:db:96:0c:a8:
aa:e9:e6:7e:a6:84:58:a0:ac:1b:5a:b7:91:f4:83:
1b:9f:e2:40:fd:4d:44:fd:d5:88:55:00:57:b8:05:
8d:e4:bb:50:13:04:6e:73:b5:db:66:60:8e:f6:9f:
13:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1E:31:5D:3B:99:1B:15:39:50:F0:B4:6F:64:D1:A1:03:B3:46:35
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Hx4xXTuZGxU5UPC0b2TRoQOzRjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
80.71.232.0/24
80.71.235.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fa:94:fb:a2:d0:bb:bd:f5:8a:81:c2:29:0a:2a:f5:f5:e5:
95:d4:7f:c4:fd:e9:f8:91:da:c6:9d:98:98:bd:34:27:20:b2:
e3:4c:51:ab:89:32:e9:38:51:b1:29:53:c8:9b:4d:62:58:d2:
9c:09:f3:05:94:60:31:d3:9f:8d:02:d2:3f:ba:b1:cc:6b:65:
fe:08:20:8d:09:17:7d:28:ab:a3:ba:90:6f:a8:b1:9e:97:0b:
ff:fc:f7:0a:61:32:b9:ab:51:25:13:b3:fa:c3:01:6e:1d:6f:
65:66:bd:b5:24:50:e1:4a:c1:f7:67:26:1b:3d:39:fa:62:28:
a1:e2:96:56:87:d0:09:1a:db:c1:e6:ec:09:9b:0f:98:b6:f2:
18:e8:75:27:c8:1a:a2:7d:0d:2e:c7:4f:df:95:97:26:5a:f4:
91:e9:80:3a:b0:4c:55:ae:f2:73:88:85:2e:f8:ae:df:22:54:
36:c6:71:e3:80:c8:97:b1:ee:f7:29:e1:25:6a:1c:1b:ce:e4:
66:0d:70:c3:cb:e6:82:b9:43:6a:9f:07:90:6b:bb:90:5c:af:
86:aa:a7:02:73:95:5c:2f:2d:30:f8:03:b3:6f:d5:5f:4e:1f:
17:33:f4:b8:d3:a4:c3:68:d0:3c:e6:78:e5:93:36:a7:e9:17:
a9:85:68:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 22 10:18:05 2023 by rpki-client on console-ams.rpki-client.org