Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/P3e41Mw2UvkgC9_mMxo-8w-FSL8.roa
File: P3e41Mw2UvkgC9_mMxo-8w-FSL8.roa (raw, json)
Hash identifier: rfwqgMhrDmbINHiONoBmilgrm83hpIhiq9TVqiSJJng=
Subject key identifier: 3F:77:B8:D4:CC:36:52:F9:20:0B:DF:E6:33:1A:3E:F3:0F:85:48:BF
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189BB73AC5E619AC6EAF7BDA270F2B84B76
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/P3e41Mw2UvkgC9_mMxo-8w-FSL8.roa
Signing time: Thu 03 Aug 2023 12:51:07 +0000
ROA not before: Thu 03 Aug 2023 12:51:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 80.71.229.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:73:ac:5e:61:9a:c6:ea:f7:bd:a2:70:f2:b8:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 3 12:51:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f77b8d4cc3652f9200bdfe6331a3ef30f8548bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9c:55:41:bd:b5:37:92:5b:86:8f:70:19:10:
e0:70:f7:ef:c7:33:20:b8:d3:38:2b:d5:20:d5:c5:
1a:76:2a:56:6f:93:25:99:c1:69:f6:2b:d8:48:66:
65:bd:c1:c2:6a:ea:19:a2:de:c5:5e:fc:b4:c9:1c:
b8:a8:ee:1a:c1:35:29:dd:50:63:ab:f4:25:04:e6:
9a:08:88:c1:66:39:c2:b6:98:b9:22:36:56:8f:11:
90:2e:6e:8a:fc:36:85:44:4e:ec:ec:91:ab:63:e5:
d7:79:74:3c:de:fb:1b:a5:d8:6d:88:49:bc:d8:ff:
e4:d7:11:bd:ff:cb:b0:18:30:fd:1c:c4:fb:55:53:
1e:6c:b0:d5:15:10:6b:36:91:9b:99:cc:11:1b:20:
48:9d:cb:bc:7f:14:2c:19:ac:49:ca:b2:ae:07:6d:
46:aa:cb:e0:c3:a4:38:e7:8f:cb:2a:d7:76:db:2f:
82:a2:44:56:c3:16:b5:1d:8e:fd:09:08:89:6d:1b:
19:b5:5e:d1:5f:a0:fb:73:9a:3c:53:97:90:bb:58:
23:25:35:9e:06:fa:80:97:82:b6:0e:4f:2c:78:18:
b2:6b:b4:22:b9:af:0f:90:04:9a:ba:0a:6d:8c:44:
84:fc:57:70:c0:ab:10:2e:e6:e9:3a:84:0d:a8:db:
e7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:77:B8:D4:CC:36:52:F9:20:0B:DF:E6:33:1A:3E:F3:0F:85:48:BF
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/P3e41Mw2UvkgC9_mMxo-8w-FSL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:dd:5b:5a:c4:d3:0a:90:1f:bf:e8:8b:45:a0:dd:15:2c:a6:
4e:2d:5b:5b:ea:44:b1:8d:63:f2:c4:fb:e0:f1:73:00:51:da:
58:a4:ea:72:50:76:31:b0:73:f0:de:5e:fd:c4:ab:1b:75:02:
c1:b9:34:61:9a:27:75:3a:24:5e:7f:af:8d:93:0b:b5:28:2f:
75:5b:66:c5:01:0b:35:cb:c9:d8:d7:52:b2:f0:47:e7:1f:21:
f1:63:06:aa:e8:8b:d3:45:ed:cf:12:9e:62:57:ab:4d:9e:c6:
c1:0d:c2:56:c5:2e:6b:50:2d:72:13:ff:c7:cb:6a:a1:d9:da:
d4:48:e0:c9:c3:bf:3f:74:10:5f:a3:0a:e4:df:df:b0:7b:d2:
3d:79:16:27:96:23:af:58:44:e1:a0:d3:08:17:46:1f:7a:3b:
f7:30:3e:82:1d:c8:f6:8c:a2:6a:29:50:97:df:62:62:31:2c:
18:e7:79:f6:da:5c:2f:a9:6d:7a:21:a8:7f:f6:eb:8b:a0:fc:
59:ae:d2:8f:08:2b:43:91:fb:ce:12:3f:35:db:55:23:50:f3:
0b:ac:98:6a:48:f5:bb:af:9f:70:39:dc:22:f5:c5:25:78:cc:
93:71:02:fa:44:dd:26:21:52:34:2a:82:73:41:b5:73:cb:b4:
7a:32:18:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 06:02:11 2023 by rpki-client on console-ams.rpki-client.org