Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RGKaleRx-EqZZKEmuextEIQjOag.roa
File: RGKaleRx-EqZZKEmuextEIQjOag.roa (raw, json)
Hash identifier: lBxKvW87rux4NAph3vSSO0Jd8fqHYzKSiYsUBYiK3HA=
Subject key identifier: 44:62:9A:95:E4:71:F8:4A:99:64:A1:26:B9:EC:6D:10:84:23:39:A8
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188B878C88297678F602AD8F75A7DBAA549
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RGKaleRx-EqZZKEmuextEIQjOag.roa
Signing time: Wed 14 Jun 2023 05:55:03 +0000
ROA not before: Wed 14 Jun 2023 05:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 80.71.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b8:78:c8:82:97:67:8f:60:2a:d8:f7:5a:7d:ba:a5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 14 05:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44629a95e471f84a9964a126b9ec6d10842339a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:04:6f:6e:ad:b2:ee:99:82:cd:e8:eb:b3:ca:
17:d6:07:87:3d:d0:4a:75:be:e4:5a:cd:9d:d5:4a:
4e:3a:fe:55:73:75:c7:05:54:db:19:be:ec:13:11:
d2:10:c2:ee:f5:22:2f:7e:8d:7f:d0:3d:7f:7d:dc:
a5:c0:17:7d:cf:b6:41:d4:06:5e:93:7a:4d:80:94:
82:95:7c:d9:3f:c0:61:96:f6:7e:c0:da:02:5b:2d:
23:c4:2e:04:54:a6:b5:f2:c5:83:f4:75:4a:df:c0:
98:1a:68:6d:9d:54:1d:f8:f3:b6:e3:15:22:7a:0c:
c5:78:3f:cc:c1:fc:29:d0:6d:c0:75:10:8a:82:d1:
63:fe:52:5c:5a:7b:f5:12:28:8f:7e:bc:08:13:96:
f7:66:cd:f9:3e:dc:91:70:7e:87:4c:4a:e3:87:af:
9f:16:ea:e2:82:8a:eb:82:23:ab:72:1f:98:0b:83:
1a:e5:a6:df:93:e5:e2:04:96:df:29:b5:22:15:89:
b3:c2:98:4a:43:5c:31:dc:7b:24:81:43:6d:29:bf:
75:12:65:15:54:97:a7:01:29:0f:ff:2c:4e:e4:43:
46:d5:49:ab:08:dc:82:a2:75:4c:db:62:e0:b9:3b:
83:20:e0:41:d0:94:f2:fa:79:e6:d0:72:99:52:b5:
6a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:62:9A:95:E4:71:F8:4A:99:64:A1:26:B9:EC:6D:10:84:23:39:A8
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RGKaleRx-EqZZKEmuextEIQjOag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:94:15:bb:b6:aa:50:6d:81:6a:50:ab:47:fa:49:ad:01:7c:
19:89:48:10:d4:04:e1:b0:35:6c:62:47:66:57:35:03:11:99:
b0:b4:25:e1:76:a0:ff:ef:88:6e:84:de:dd:2e:47:08:4c:9a:
42:76:05:0e:8a:8f:8c:61:cc:44:02:7e:10:3d:ce:a0:19:05:
5b:3d:c4:41:14:18:2f:16:af:b7:48:ac:c9:b8:5d:2d:ec:30:
cf:15:95:85:b3:72:0d:67:21:be:49:b8:40:ea:a2:53:57:84:
0e:26:71:f4:12:fc:38:db:72:d3:ad:56:5b:79:4e:f6:b2:43:
5d:31:ef:5c:6b:c8:91:c8:a1:6a:0c:b2:22:f4:1a:a4:02:77:
06:c7:c4:f4:f6:9b:c3:36:78:72:32:a0:ba:04:24:c0:7f:98:
d1:59:fa:9d:7b:25:47:2c:60:42:b5:b4:f0:5f:70:e0:f0:4a:
b8:d4:be:c1:cd:6e:b0:b3:24:c4:b9:00:ae:25:13:ef:95:ce:
78:82:f6:5d:4d:a3:14:2f:06:6f:be:23:69:1e:02:d7:3c:02:
a1:a0:d4:72:fc:73:d4:4c:5e:35:a8:34:a9:b2:e6:4c:5b:f6:
92:e5:8c:ae:62:9d:17:2d:8f:f6:5d:c4:c8:9c:80:67:86:50:
f4:e5:16:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 2 13:13:47 2023 by rpki-client on console-ams.rpki-client.org