Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ODSUAy4X7XO1qszlpAdvkOrIcfk.roa
File: ODSUAy4X7XO1qszlpAdvkOrIcfk.roa (raw, json)
Hash identifier: qogVRT/KvIvqMkPnyYUOP9qwvj1pGCygoaa2y+FScRg=
Subject key identifier: 38:34:94:03:2E:17:ED:73:B5:AA:CC:E5:A4:07:6F:90:EA:C8:71:F9
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018649994AB47635929D81693BDB986A2787
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ODSUAy4X7XO1qszlpAdvkOrIcfk.roa
Signing time: Mon 13 Feb 2023 07:07:08 +0000
ROA not before: Mon 13 Feb 2023 07:07:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.150.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:99:4a:b4:76:35:92:9d:81:69:3b:db:98:6a:27:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 13 07:07:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383494032e17ed73b5aacce5a4076f90eac871f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:d3:38:7a:4a:cb:03:b4:96:ce:08:55:17:
b0:db:5e:b9:2e:fb:d7:63:7c:4e:c1:36:60:92:43:
8e:67:34:e8:63:1e:41:a2:5e:83:8c:bb:ca:97:77:
c2:fc:b3:94:10:47:63:7e:9a:b3:8f:d3:3e:55:71:
2a:90:90:e6:ec:81:d2:6b:1a:2e:22:c7:d9:38:7b:
e6:17:40:55:bb:1a:e2:a2:d4:cb:dd:fe:a2:20:fe:
90:5c:ea:09:1d:e7:73:e8:0e:05:b9:e6:e6:fd:c2:
e7:e6:8e:2e:26:c2:1d:59:66:3f:e6:16:0b:97:be:
ad:f2:f2:91:e3:f8:59:fb:86:3f:d8:af:c5:cc:67:
f9:d6:16:41:f0:9b:f4:3c:62:91:41:37:5d:4f:4f:
65:3f:32:b4:c9:8f:ea:77:58:ed:fc:38:b3:7c:d8:
78:fd:de:d3:df:b7:85:2e:61:71:1e:62:96:ec:7a:
9d:ad:a1:f1:67:75:8d:83:58:fb:8a:0f:f6:3c:23:
28:8b:df:a0:62:ee:a8:40:1f:2e:d2:c8:83:26:f0:
bf:35:c7:d3:07:01:8c:3e:6b:b9:34:88:78:de:74:
73:95:c3:c5:f2:86:14:58:88:57:c8:19:7b:31:c1:
29:a3:8d:37:a9:8c:0c:40:9c:ff:b6:ae:fc:6e:d2:
c3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:34:94:03:2E:17:ED:73:B5:AA:CC:E5:A4:07:6F:90:EA:C8:71:F9
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/ODSUAy4X7XO1qszlpAdvkOrIcfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.149.0-81.29.150.255
81.29.155.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
11:ef:80:e5:f3:92:b0:88:2d:ea:e6:29:b7:83:db:32:2a:5a:
3e:30:29:97:7d:be:b1:2e:4d:1c:b4:d0:db:22:71:a8:fd:29:
46:3f:fc:fe:34:bb:98:c5:73:84:b8:30:32:c7:a3:8d:17:33:
64:07:aa:0b:a4:7b:65:66:d5:66:e9:ab:32:a9:83:47:c4:a6:
f0:b1:d4:63:34:cf:64:9b:28:79:ac:74:34:40:55:73:c7:10:
5c:0b:c6:ae:aa:10:68:c0:2f:4e:48:72:21:42:d5:11:08:2a:
3b:c2:26:90:ae:43:a7:8b:89:26:c6:80:54:92:47:42:e8:bf:
d0:19:e2:f0:3c:4c:62:aa:e1:59:01:e0:e5:bf:05:43:ef:b6:
6b:15:ea:95:5c:19:53:48:2f:a7:16:2d:79:9c:9a:b6:47:dd:
08:40:ca:dd:92:f1:12:62:9c:a9:97:a4:86:0b:48:a5:ef:c6:
2b:69:55:a0:68:0f:ad:05:21:32:58:d7:85:04:56:90:4e:9d:
3b:e0:bc:07:9b:32:93:79:11:9f:3f:8a:92:c8:1a:49:7a:98:
6c:87:89:01:06:ac:b2:a0:ab:64:1f:10:6a:8c:48:db:05:3b:
96:1d:2b:dc:65:c6:0d:1e:5b:bc:bf:dc:ae:3d:bf:cd:b2:f3:
5a:a9:9f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org