Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RJwD90dQPxLhW5lpLhETsuyLEUs.roa
File: RJwD90dQPxLhW5lpLhETsuyLEUs.roa (raw, json)
Hash identifier: zKR6HmCXYrhBvuLwIYAONFdv8fldqWs9rxRjWGL58q8=
Subject key identifier: 44:9C:03:F7:47:50:3F:12:E1:5B:99:69:2E:11:13:B2:EC:8B:11:4B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CF2A1B317A43631B41891EA29A79D7D75
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RJwD90dQPxLhW5lpLhETsuyLEUs.roa
Signing time: Wed 10 Jan 2024 09:08:52 +0000
ROA not before: Wed 10 Jan 2024 09:08:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 80.71.225.0/24 maxlen: 24
80.71.232.0/24 maxlen: 24
81.29.145.0/24 maxlen: 24
81.29.149.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 10 Jan 2024 14:38:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f2:a1:b3:17:a4:36:31:b4:18:91:ea:29:a7:9d:7d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 10 09:08:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=449c03f747503f12e15b99692e1113b2ec8b114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b7:e3:d8:62:ef:59:e4:63:03:9d:d4:cb:ed:
8d:41:30:8f:f5:fe:92:40:d0:6f:cb:d2:9a:b7:06:
04:22:3e:54:80:9a:76:13:2b:48:51:4a:66:11:06:
a3:95:45:1b:50:6a:d7:12:95:f4:ec:8a:2f:63:21:
b6:60:4c:82:46:b4:17:4f:99:45:76:a5:e4:17:63:
85:00:7f:3f:c7:2b:e3:e9:09:14:5b:7f:54:ac:a0:
79:0a:f4:e4:1b:dc:dc:2c:60:26:7e:6f:c0:98:12:
9b:86:c7:95:d1:a0:7a:37:d8:91:0f:dd:57:5e:6e:
55:c9:b6:80:76:1b:4b:5c:b4:dd:73:45:c9:b4:ac:
e5:d3:f6:8e:17:94:6f:4b:8d:e7:e3:98:8b:43:93:
f7:b7:0b:f0:a9:fe:11:8a:82:16:0f:e5:a8:a0:d9:
a6:d4:40:95:6b:b2:9f:bb:bc:93:0d:04:7b:db:51:
31:21:dd:9c:3f:b6:be:86:14:dc:d4:50:14:e9:8e:
0e:17:4a:4c:2c:2e:56:dc:98:c9:cc:7f:00:84:e5:
2e:46:d6:3d:44:30:7e:24:35:1b:b8:2e:bf:68:f4:
3b:02:2e:84:91:bd:19:26:b1:8f:41:d9:66:4f:2c:
ed:d9:0d:20:1d:93:98:f7:18:7f:70:ed:01:59:49:
c4:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9C:03:F7:47:50:3F:12:E1:5B:99:69:2E:11:13:B2:EC:8B:11:4B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/RJwD90dQPxLhW5lpLhETsuyLEUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0/24
80.71.232.0/24
81.29.145.0/24
81.29.149.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:44:66:a3:ef:04:52:63:09:e8:ac:81:a1:dd:24:43:af:21:
79:91:11:65:4c:05:3e:4b:69:8f:55:c9:9c:e2:09:3d:f0:a5:
9a:35:ca:ed:12:87:04:82:1c:ed:e2:58:d2:53:60:00:24:e6:
f7:b5:ba:f2:d3:b0:f6:9a:29:2b:05:99:b9:d5:50:92:be:7f:
0e:2e:56:c1:cc:e3:d6:4d:f6:13:95:21:c7:b5:0e:62:1f:c7:
56:0a:b6:3d:e0:2e:d6:11:6a:1e:97:90:cb:9c:21:60:ab:a2:
cc:20:52:e2:6c:ea:40:44:12:d6:52:87:dc:b5:d9:94:cb:9a:
10:9f:3f:77:30:8e:c5:c8:6e:91:e4:eb:25:dd:05:2e:cf:77:
c7:20:16:0c:bb:93:55:85:ef:1d:30:c1:5f:60:68:a2:a1:ee:
cd:62:72:76:e9:1e:18:4f:e1:c8:68:bf:74:04:38:ef:58:63:
93:a9:00:3f:3d:8c:10:ab:6c:82:56:22:9e:d1:ef:4c:22:ee:
e0:89:8e:01:0b:01:2a:01:95:4e:03:80:c2:5b:a3:52:11:db:
82:85:67:27:ce:45:3d:fe:f8:a5:aa:c7:42:a8:47:1d:0b:e3:
24:ed:d1:f0:28:c8:d5:c7:6f:5f:a1:ff:ec:1c:6f:05:60:10:
f5:57:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 10 19:13:18 2024 by rpki-client on console-fra.rpki-client.org