Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/JzI-iiw0Jibv1k79XJf5KaQOiEg.roa
File: JzI-iiw0Jibv1k79XJf5KaQOiEg.roa (raw, json)
Hash identifier: hW5IhTboPJD3upyiqtYsxIFORUhuOVdSiPkkRy5007M=
Subject key identifier: 27:32:3E:8A:2C:34:26:26:EF:D6:4E:FD:5C:97:F9:29:A4:0E:88:48
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018C11A47C03BE83CC526B1BDAE0D81A2921
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/JzI-iiw0Jibv1k79XJf5KaQOiEg.roa
Signing time: Mon 27 Nov 2023 16:37:21 +0000
ROA not before: Mon 27 Nov 2023 16:37:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 81.29.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:11:a4:7c:03:be:83:cc:52:6b:1b:da:e0:d8:1a:29:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Nov 27 16:37:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27323e8a2c342626efd64efd5c97f929a40e8848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fc:10:6b:df:a1:92:98:26:85:36:b9:bb:5a:
0c:9e:b9:a9:a1:15:4f:af:13:95:47:b3:08:41:2d:
9d:82:83:4a:c2:6f:48:31:c6:95:73:fb:1a:10:86:
94:89:10:14:d9:88:ae:0d:06:54:f0:27:e0:7a:4d:
88:0c:ba:ca:ed:bf:f5:85:d4:58:39:9a:9e:c9:db:
cc:0c:b8:bb:5d:ad:0c:c7:bb:0e:8c:a1:f6:7b:35:
5a:a2:69:f1:1e:1f:73:4e:78:dc:77:bf:5a:15:ad:
5b:d1:aa:2d:df:ce:b2:c8:2f:ca:dc:fc:a7:5c:d5:
75:eb:32:01:68:cc:31:57:24:06:ae:02:de:ba:f1:
d5:0d:a9:47:7d:b8:ed:83:62:ab:69:c8:e1:91:be:
6e:6d:73:00:fb:77:3d:29:8a:e1:8d:15:4c:65:28:
49:bd:c9:a4:89:c7:76:50:e5:80:33:30:50:32:76:
ef:09:43:c5:32:17:56:62:47:84:d8:48:1c:3d:6d:
54:ca:ff:8f:5c:25:3d:d6:36:68:15:70:56:19:68:
9b:0d:cc:83:71:c6:07:20:54:0f:b7:85:23:69:fe:
63:94:e6:02:2b:b6:a1:1c:02:01:e9:7b:aa:1f:c0:
e5:04:09:a5:59:1b:2f:24:fd:fc:b9:32:3e:07:d0:
f0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:32:3E:8A:2C:34:26:26:EF:D6:4E:FD:5C:97:F9:29:A4:0E:88:48
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/JzI-iiw0Jibv1k79XJf5KaQOiEg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1e:3f:ce:ed:d7:09:f5:f1:b0:63:c1:84:0e:d6:59:75:2b:
45:2d:dd:82:60:e6:6a:dd:f0:60:f0:b6:bb:37:b0:fe:b0:b4:
bb:b8:9e:43:de:f0:e1:df:5a:5f:41:3f:59:04:8b:30:74:a4:
13:f1:2c:32:a0:4d:fb:3c:c4:84:67:46:83:34:b8:82:da:49:
be:55:8d:a1:19:26:2b:c6:01:5e:0b:da:6a:a9:a6:8a:14:70:
b4:55:aa:dd:ad:19:68:44:59:61:65:37:6f:d4:13:09:76:b2:
0b:c3:c5:b1:d2:f3:5d:7f:af:37:86:e7:55:35:8a:f5:d8:7c:
b1:49:c2:b9:79:62:49:c1:7e:6d:53:d0:f2:b2:4d:d1:68:3f:
6d:aa:d9:df:ee:f2:cf:5f:aa:83:83:b3:7b:9b:27:b5:79:e9:
7f:f7:23:85:05:2e:86:19:2c:1d:87:85:86:6e:8d:44:7b:e6:
bf:62:65:fc:f4:d2:95:84:a2:c1:0e:05:f5:44:41:dd:77:55:
4d:89:43:8d:ad:4e:c5:96:49:2c:5c:93:d3:4b:22:01:56:0b:
88:27:5e:78:9f:2f:b1:57:42:6b:bb:d8:d3:cc:36:fd:d1:b9:
65:32:17:17:1c:d6:d8:f9:35:d0:a3:4c:2e:88:71:f8:c9:5d:
75:bc:b1:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org