Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ILptMrpDDjjpTiGY7i9BfXFhrAU.roa
File: ILptMrpDDjjpTiGY7i9BfXFhrAU.roa (raw, json)
Hash identifier: RnCDiwRTjRbZntp71CApH1fK/vznX3CK7+jWFu3xmck=
Subject key identifier: 20:BA:6D:32:BA:43:0E:38:E9:4E:21:98:EE:2F:41:7D:71:61:AC:05
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CC8E67FF70899E0E908188A12D44A2CB7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ILptMrpDDjjpTiGY7i9BfXFhrAU.roa
Signing time: Tue 02 Jan 2024 06:39:58 +0000
ROA not before: Tue 02 Jan 2024 06:39:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 80.71.225.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:e6:7f:f7:08:99:e0:e9:08:18:8a:12:d4:4a:2c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 2 06:39:58 2024 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20ba6d32ba430e38e94e2198ee2f417d7161ac05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:9d:a0:c7:85:7e:f3:08:59:1a:cc:39:eb:
ee:d0:1d:9a:2d:3a:19:f9:45:bf:d9:d7:e0:f6:8f:
ec:04:34:9f:1b:65:6b:1f:16:8f:dc:7f:a4:8a:6b:
36:49:66:cf:cc:fa:51:59:9f:79:5d:13:33:6c:5e:
9d:9b:a2:02:3b:68:f6:ce:19:d0:f1:28:69:d1:35:
47:53:94:3b:0b:9b:7b:a6:59:ea:43:2b:54:05:44:
29:90:e7:e4:e6:9e:cf:9e:54:b6:2b:dd:2e:c0:37:
cd:81:7d:fe:82:15:05:fc:31:a8:0b:b1:55:73:2f:
23:32:70:d6:04:5e:09:09:34:a6:9c:d9:e8:e4:0d:
6f:f4:71:e2:f7:c5:3e:43:07:bd:62:6c:4d:14:2f:
a3:75:99:c0:7e:f8:e8:cb:0d:f5:86:fb:1f:59:a9:
69:e3:52:52:5d:61:73:36:cc:38:e1:54:ab:4e:16:
20:12:be:2a:b0:4d:4b:c9:14:83:8c:61:6a:0c:65:
62:c3:f4:03:3a:8d:f3:cb:e1:67:25:b4:0b:96:aa:
88:5e:9a:3c:62:52:b7:14:f8:8e:cf:2a:15:15:64:
a8:11:ad:30:7a:da:ca:d9:37:5d:8f:15:e7:df:95:
4d:a1:9f:30:4f:62:19:b5:97:29:69:cf:4c:1d:e5:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BA:6D:32:BA:43:0E:38:E9:4E:21:98:EE:2F:41:7D:71:61:AC:05
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ILptMrpDDjjpTiGY7i9BfXFhrAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0/24
81.29.149.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f1:09:05:82:e1:a0:32:71:1c:a3:8f:50:d7:ac:21:1a:69:
37:00:69:f7:6c:4c:e4:4a:11:e7:70:90:80:e1:be:aa:ab:d1:
f9:c0:5b:54:86:a4:54:09:33:5f:7b:ee:17:09:34:ae:cc:dd:
90:83:8f:08:e3:1e:ef:84:d6:c6:b4:8b:53:f4:26:50:17:26:
31:d2:30:63:69:5d:73:4b:a7:9d:70:2f:5d:cc:e8:ec:39:65:
4e:dd:de:6a:70:d7:8e:f4:6f:a0:b0:d5:cc:cf:58:5f:24:c0:
8e:96:c4:fa:94:db:d1:eb:73:d3:2d:c2:65:7d:7f:92:34:c8:
7f:cf:4d:be:f1:4c:f1:65:73:17:fa:65:f1:91:19:e9:2c:f9:
7c:19:85:38:2f:53:47:75:b1:a7:78:0f:2f:5c:10:aa:ab:27:
5e:00:9d:b5:7f:9c:f9:3c:ba:05:4d:49:a5:61:ea:fd:99:4c:
af:49:c5:47:d9:79:61:b3:aa:c9:e0:74:51:16:48:0a:b6:5f:
32:a5:d1:53:c9:40:d2:f8:64:c0:f8:90:bf:9c:3c:a0:6a:4b:
e2:07:ac:e0:6c:cb:26:5d:04:ce:60:e9:6b:db:bb:90:24:14:
31:6b:75:56:78:85:95:ab:12:73:e1:95:82:37:f4:b4:5d:71:
43:9f:9a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:43 2024 by rpki-client on console-ams.rpki-client.org