Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/K2DaXNwmvUqEjcWqXdl4pwx-ZjQ.roa
File: K2DaXNwmvUqEjcWqXdl4pwx-ZjQ.roa (raw, json)
Hash identifier: jrwFiiY5orH9zQ0yrbkCt+hXJmMBw2PqM2vfWObtu0k=
Subject key identifier: 2B:60:DA:5C:DC:26:BD:4A:84:8D:C5:AA:5D:D9:78:A7:0C:7E:66:34
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018BCE6A093D4E1B29AF2DFA88AAEC8D81AD
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/K2DaXNwmvUqEjcWqXdl4pwx-ZjQ.roa
Signing time: Tue 14 Nov 2023 15:18:57 +0000
ROA not before: Tue 14 Nov 2023 15:18:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ce:6a:09:3d:4e:1b:29:af:2d:fa:88:aa:ec:8d:81:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Nov 14 15:18:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b60da5cdc26bd4a848dc5aa5dd978a70c7e6634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:2e:df:8f:84:fc:41:ca:07:97:25:b9:6e:
ba:e7:11:8e:47:eb:c5:db:48:70:84:46:1e:61:c8:
c6:68:64:a8:ab:6b:7b:6c:58:fc:36:f8:e0:8f:57:
17:01:27:ec:57:a5:2b:ff:d5:58:bc:20:9a:6e:b4:
63:2d:55:2c:8c:3a:79:ce:b6:d5:58:ff:9b:d0:82:
1e:ec:e4:2b:3c:b8:f3:15:06:b4:f3:df:6b:11:74:
8b:29:e7:f0:26:15:f3:b0:db:7c:e1:98:fe:82:54:
2f:a1:9d:3b:51:43:46:7c:39:a0:84:3e:ca:28:5c:
b0:b8:6d:b5:b4:56:ff:ca:37:cd:85:6e:2d:dd:cd:
d4:04:5a:e6:be:69:7c:db:a7:10:40:a8:32:29:df:
fe:ce:38:62:77:c9:18:fa:54:3f:f0:02:70:de:71:
93:58:05:3d:97:bb:81:cb:c6:0d:54:b1:4c:54:49:
f8:08:07:45:64:11:88:22:a7:c6:6b:ef:a3:a7:96:
1b:bc:8e:21:c0:6e:b4:87:e9:f9:a8:15:15:7b:d3:
8b:33:5b:96:15:52:f1:24:4f:d9:df:95:93:5b:0d:
2a:0a:25:04:c8:69:80:bf:1e:6b:52:bf:58:ab:96:
ee:7d:0e:0a:b4:e4:65:68:11:e2:32:5d:16:06:8f:
ad:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:60:DA:5C:DC:26:BD:4A:84:8D:C5:AA:5D:D9:78:A7:0C:7E:66:34
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/K2DaXNwmvUqEjcWqXdl4pwx-ZjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
91:2b:fa:2c:8d:df:c1:47:5c:81:51:ba:b0:42:fc:85:98:30:
a2:fc:d9:da:98:1b:81:21:49:48:1e:fe:c0:22:47:92:fe:04:
51:ed:ce:2a:84:e4:3d:ba:e8:b1:73:4e:f0:ee:3f:81:3e:82:
c2:89:e9:e3:a6:9a:5a:16:2b:0c:ce:89:5e:02:63:dc:6f:53:
35:04:53:a1:f8:4a:8e:06:e2:36:0a:53:89:75:24:d5:c8:9d:
3e:1c:ac:69:d1:c1:ae:5a:21:62:40:e7:3d:05:8a:83:08:a5:
8b:3c:7d:87:02:8e:fb:d1:bd:e1:cc:1a:eb:72:cb:8c:c1:e7:
15:77:a3:6a:7b:cb:5f:45:55:2a:12:4b:49:c9:29:d3:46:8e:
d7:3d:b0:1e:af:72:b2:88:fc:ca:c6:a4:72:22:ae:8e:bc:af:
ac:aa:fc:8f:1c:44:11:00:2c:d7:af:ef:b8:46:3f:d6:57:01:
47:ad:4c:19:3c:ff:25:d1:0d:5d:b3:30:50:d2:d9:bf:23:eb:
23:f8:24:80:a7:b1:91:49:60:2c:b1:86:30:38:00:e6:e5:29:
88:0d:92:ff:37:06:9e:a5:59:e8:53:be:48:b0:ad:86:94:4e:
b3:72:f1:92:4d:2b:0f:51:ce:ed:e0:6b:a3:e1:64:f0:c1:a0:
78:7d:74:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 14 15:26:12 2023 by rpki-client on console-fra.rpki-client.org