Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PlvOo4XyNKnVUYHgqZAHXOwVAqE.roa
File: PlvOo4XyNKnVUYHgqZAHXOwVAqE.roa (raw, json)
Hash identifier: 0yoB8TXrDB922BOm91IoR9D7JblmqsBmvhKb5mXnZ/Y=
Subject key identifier: 3E:5B:CE:A3:85:F2:34:A9:D5:51:81:E0:A9:90:07:5C:EC:15:02:A1
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A690795FC33936CAC76225B74F7D476D5
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PlvOo4XyNKnVUYHgqZAHXOwVAqE.roa
Signing time: Wed 06 Sep 2023 05:46:59 +0000
ROA not before: Wed 06 Sep 2023 05:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203377
IP address blocks: 80.71.238.0/24 maxlen: 24
81.29.145.0/24 maxlen: 24
81.29.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:07:95:fc:33:93:6c:ac:76:22:5b:74:f7:d4:76:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 6 05:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3e5bcea385f234a9d55181e0a990075cec1502a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:89:17:25:f7:06:7a:91:64:11:f3:e3:ab:da:
3f:47:fb:a4:16:10:d5:3d:34:30:7f:8e:a4:56:7d:
5e:d1:09:8a:ce:ce:07:73:0d:f5:bc:fd:d0:21:4e:
d0:47:b5:60:aa:a2:2f:7e:a6:48:34:22:cb:f2:94:
7f:2b:b8:a4:ab:a5:79:93:67:4d:a8:a1:64:5b:8f:
79:ae:b4:a0:76:a4:e5:bd:ee:e4:97:04:cd:e0:db:
99:06:a9:f7:63:eb:97:b1:29:a1:53:9c:8b:48:60:
cf:b3:13:01:72:a5:f3:be:f8:e4:27:c2:56:1c:d1:
70:e6:1b:ef:73:e5:59:4f:e8:63:15:dc:58:f8:a4:
29:ed:55:76:b8:f0:6c:ea:cb:6f:d8:0d:c5:93:c3:
ea:ff:6b:e9:1c:ce:e0:03:4d:dc:d3:de:85:49:4f:
00:e2:7f:97:30:7d:3b:44:9e:3a:e6:92:51:99:4a:
2f:1d:fe:b0:2f:a4:e6:95:32:eb:89:4d:73:08:6c:
94:f6:f7:5f:34:f7:d3:83:da:f5:39:ce:e8:dc:8a:
c6:ae:ae:2e:20:b5:3b:ee:88:86:5b:a6:96:31:0c:
52:77:6d:8a:1f:33:1b:a3:e0:b8:46:e1:30:18:62:
bb:e8:96:70:87:f4:1a:4f:88:f2:fb:3d:67:75:8d:
f8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5B:CE:A3:85:F2:34:A9:D5:51:81:E0:A9:90:07:5C:EC:15:02:A1
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/PlvOo4XyNKnVUYHgqZAHXOwVAqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.238.0/24
81.29.145.0/24
81.29.148.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:f8:2c:5b:f1:3c:1c:39:d5:08:ad:dc:86:4b:79:06:63:76:
fa:1e:cd:77:e4:83:9b:a6:03:e0:8e:7f:67:38:b9:cd:7d:e8:
ff:26:f8:e7:fb:1d:fa:31:e1:45:8b:82:3d:95:74:af:8b:f3:
d4:58:5e:8c:e6:6a:fc:58:a9:c6:53:d1:db:3b:b3:5f:6b:c9:
ce:d1:d7:f1:11:d3:46:8c:bf:08:94:fd:6f:cf:db:0e:5a:08:
e3:0b:c0:3f:7d:3a:a5:91:18:e2:ad:ec:88:d3:66:2d:ae:ce:
b5:a5:37:c0:dd:4e:2a:8a:9e:dc:08:ab:bf:1c:46:8e:d1:d2:
65:d6:f0:c3:06:12:60:c0:87:a2:bd:67:ba:b6:25:fc:fe:78:
21:f7:e4:36:13:bc:e4:d0:fa:f6:b9:3a:a7:f7:f4:c1:a6:6d:
9e:cc:3c:91:31:ec:28:43:60:8e:de:77:cb:b0:73:50:13:6c:
f9:6c:d4:4a:19:6f:a6:5d:cd:5f:14:52:b3:9d:1d:b9:a3:4f:
96:55:e8:00:a6:c1:c5:44:30:e0:cd:66:56:cb:4a:62:50:19:
78:47:85:cd:0f:90:0e:5e:92:b7:c0:01:b5:b3:70:fe:19:be:
37:44:5f:cf:fe:68:5e:28:a3:9f:c2:5f:ad:06:61:04:30:6c:
55:ae:d7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 11 09:58:25 2023 by rpki-client on console-fra.rpki-client.org