Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Kr01edoMQxhesX18Z4-GULq1Opw.roa
File: Kr01edoMQxhesX18Z4-GULq1Opw.roa (raw, json)
Hash identifier: BhcCAiuwWkqKGnS1XoXvSZuPxDQAfXrPk8Pf/zdqvAY=
Subject key identifier: 2A:BD:35:79:DA:0C:43:18:5E:B1:7D:7C:67:8F:86:50:BA:B5:3A:9C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0190C594636E6D17F925C6C68AB162A1BC4E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Kr01edoMQxhesX18Z4-GULq1Opw.roa
Signing time: Thu 18 Jul 2024 11:22:34 +0000
ROA not before: Thu 18 Jul 2024 11:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 80.71.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Aug 2024 08:42:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:94:63:6e:6d:17:f9:25:c6:c6:8a:b1:62:a1:bc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 18 11:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2abd3579da0c43185eb17d7c678f8650bab53a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:5c:69:28:cc:52:30:0b:12:4b:b3:f0:1b:
b2:d4:ce:d2:72:b8:a5:96:d3:05:c0:8b:c3:35:12:
dc:c5:9c:90:e4:35:34:dc:aa:eb:cf:11:1c:1c:07:
bb:70:05:0a:f7:4f:42:93:c5:51:44:94:7b:d2:45:
11:10:cc:aa:58:de:2b:2d:07:74:b2:3e:97:3b:c8:
d7:6c:0c:32:c2:e0:17:50:29:f0:4a:39:c9:b1:83:
06:9f:1a:97:4f:35:a5:aa:db:80:bc:4a:19:c6:00:
25:c5:44:a0:de:84:d8:8b:8b:90:93:cf:7e:fb:f5:
45:e4:58:40:3c:0c:0b:70:cc:00:5a:88:ac:38:a9:
6b:cb:98:92:6b:d6:bc:f2:14:33:e2:c8:bb:85:dc:
5a:a8:2c:4e:fb:2a:03:05:74:a4:43:32:7a:6f:92:
be:5b:5c:73:f7:3e:3c:19:9f:8e:da:cb:41:26:9d:
5b:c4:ff:33:ce:c5:12:46:eb:e2:8f:a7:87:18:a5:
56:bf:8b:81:39:41:36:64:53:1e:b0:e3:d2:74:21:
75:24:ec:38:bd:ff:a0:29:ea:16:65:d2:57:cb:0a:
1a:b4:93:d5:b3:53:e9:22:f1:c8:47:5e:00:7b:9c:
4d:ee:55:04:f4:22:7e:90:60:a1:29:2c:52:fd:dd:
b8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:BD:35:79:DA:0C:43:18:5E:B1:7D:7C:67:8F:86:50:BA:B5:3A:9C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Kr01edoMQxhesX18Z4-GULq1Opw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:ed:8f:e0:a2:e2:c3:70:41:bf:3a:56:5b:cb:46:b9:38:9b:
35:fe:f5:dc:ae:55:11:08:46:4b:90:67:62:2b:49:3b:2e:44:
37:19:37:a4:26:a9:01:6c:0c:7c:d0:2a:33:5f:5a:2b:6c:81:
c8:14:99:b9:8e:09:e8:7d:4c:a2:f1:7c:ed:d2:2b:c4:b2:b9:
48:73:42:a9:97:34:2f:e8:2f:2a:e6:b2:b5:d8:a3:a9:77:16:
1c:75:2a:88:75:bc:3e:24:2e:af:92:bf:00:78:4d:fc:35:0f:
e2:69:e9:6c:2a:83:02:54:d8:7a:d9:91:89:5c:52:ca:ab:15:
c7:a5:1a:00:80:d0:2c:2b:da:da:23:f6:19:95:e5:fb:96:d2:
93:47:24:c0:82:f6:ae:c5:fb:3f:be:91:60:35:f0:75:23:a2:
2f:3b:45:d8:e3:71:01:bf:64:08:cb:2b:bf:8f:54:44:b2:c9:
f6:e1:50:1a:10:a8:9e:87:56:de:04:09:4a:6f:0c:0f:3a:33:
86:33:6e:83:5f:65:e3:84:a4:23:db:8b:8d:1c:d6:fe:9b:76:
84:16:10:57:c9:8e:f0:4a:ec:04:73:91:85:8b:ac:1b:be:7c:
5b:88:99:34:08:9d:a5:71:25:31:32:a5:a6:be:73:28:2c:f0:
3f:fb:b2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 22 10:22:55 2024 by rpki-client on console-fra.rpki-client.org