Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RDv7PZC3CGF3G8w-gRYt-6VpdFw.roa
File: RDv7PZC3CGF3G8w-gRYt-6VpdFw.roa (raw, json)
Hash identifier: fOGsiSGt5Vg0QO7hGL9uvvaAM1n2UHSqSq3yaJof1gQ=
Subject key identifier: 44:3B:FB:3D:90:B7:08:61:77:1B:CC:3E:81:16:2D:FB:A5:69:74:5C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A21CB348D0350B578E06B3F9F924EC94F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RDv7PZC3CGF3G8w-gRYt-6VpdFw.roa
Signing time: Wed 23 Aug 2023 09:47:59 +0000
ROA not before: Wed 23 Aug 2023 09:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 36113
IP address blocks: 80.71.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 09:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:21:cb:34:8d:03:50:b5:78:e0:6b:3f:9f:92:4e:c9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 23 09:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=443bfb3d90b70861771bcc3e81162dfba569745c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:88:fd:08:6c:d6:75:64:80:75:c5:9f:cc:
fc:5b:57:3b:aa:1c:2a:ca:d7:fe:a4:33:9d:a3:74:
d7:bf:40:0b:3b:12:7c:93:30:63:ad:b6:d2:2a:ab:
60:79:cf:42:ab:47:69:16:40:9f:ab:dd:2e:97:e0:
5c:e4:3e:8f:02:9e:a4:ef:ee:e8:62:62:17:fc:eb:
e0:02:26:be:a7:16:7c:53:29:9d:0c:e1:f0:db:4a:
e8:e5:17:bf:7f:84:c3:4a:e8:cb:2e:3a:06:b8:17:
02:b4:06:d4:24:df:db:2e:a4:c1:a5:31:61:f6:55:
da:42:56:5a:24:3d:6b:c0:72:2a:03:d1:56:00:77:
2d:98:88:11:4e:72:52:f0:a3:06:6f:40:ea:f9:2f:
bc:11:ec:e6:65:4e:21:cb:5d:ad:9c:18:d7:a8:31:
c0:bd:6c:5c:bf:81:1e:16:43:29:5b:22:8e:b5:f7:
a2:a6:e3:27:b1:43:54:bb:15:cd:f3:f4:cc:5d:20:
c5:76:ac:7a:f3:fe:a1:1e:15:2d:39:d3:fd:9c:63:
a9:1b:c3:bb:f1:03:b9:60:1a:7e:5b:03:26:23:72:
a1:f0:db:ae:02:99:aa:03:df:98:c4:99:05:2f:e3:
ad:04:45:86:d2:a1:86:33:70:85:28:bb:9e:56:1d:
e5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:FB:3D:90:B7:08:61:77:1B:CC:3E:81:16:2D:FB:A5:69:74:5C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RDv7PZC3CGF3G8w-gRYt-6VpdFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
Signature Algorithm: sha256WithRSAEncryption
86:17:74:f3:51:5f:bd:5a:ba:29:36:12:79:17:1a:64:95:4b:
cf:d6:67:24:41:9f:4f:2f:96:33:6c:40:4b:10:31:67:c5:07:
3a:77:4a:3e:54:7a:4a:ac:78:66:9f:0f:fc:af:43:34:7f:61:
2e:00:3a:93:2e:c9:50:0c:f6:1c:61:70:97:4a:1f:57:6b:b0:
81:fa:9f:46:0d:22:ef:e7:dd:9c:ca:b0:88:36:64:f3:27:87:
cc:ff:2c:4e:ae:f1:6e:4d:d0:d7:50:c2:a2:50:1d:f3:42:72:
45:80:7d:1b:5e:e8:a3:11:16:bc:4a:d7:4d:03:07:6e:1f:3a:
34:0b:43:50:27:6c:23:4e:82:0d:72:60:7c:42:f3:30:89:37:
cf:4d:30:38:1c:e7:a3:b4:5b:bc:91:31:18:2b:ae:0b:a0:89:
0e:dd:fc:cd:33:b1:01:91:a0:e3:bf:47:b0:83:6b:c5:7f:1e:
61:bc:13:0e:12:6f:e4:0b:4b:b6:5e:aa:26:e1:79:c2:ac:15:
6b:ed:3b:ea:9f:24:28:6c:c9:9a:d3:a6:75:02:14:5e:d7:af:
0d:9a:44:54:dc:ec:76:8a:16:07:09:c6:46:77:be:b5:d4:7d:
c9:9e:ba:2e:9d:e8:82:be:d4:56:ee:7c:8c:76:3c:8c:32:28:
f1:b6:b4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org