Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Rt9QLyUHgAkvDDbak_A-teUPQEU.roa
File: Rt9QLyUHgAkvDDbak_A-teUPQEU.roa (raw, json)
Hash identifier: wCbg2Xi6vEKPE7D0MbFal/3TpVEg3W+5Vs/kcNLmQf8=
Subject key identifier: 46:DF:50:2F:25:07:80:09:2F:0C:36:DA:93:F0:3E:B5:E5:0F:40:45
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01894475164ABF31AA7B3E27CCF4C1CA5145
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Rt9QLyUHgAkvDDbak_A-teUPQEU.roa
Signing time: Tue 11 Jul 2023 10:17:51 +0000
ROA not before: Tue 11 Jul 2023 10:17:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211256
IP address blocks: 81.29.148.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 17:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:44:75:16:4a:bf:31:aa:7b:3e:27:cc:f4:c1:ca:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 11 10:17:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46df502f250780092f0c36da93f03eb5e50f4045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:9b:73:7b:dd:2d:13:32:77:bc:16:80:56:
d6:cf:0e:5f:17:b5:a4:d6:a8:8a:99:6c:d1:fd:99:
bc:78:a1:22:74:81:66:7a:e9:86:db:8a:10:a7:95:
3d:3d:ac:41:02:e1:1f:aa:9a:c2:72:21:32:52:cd:
74:00:4f:bc:5c:81:fa:6b:d8:e2:b9:ca:5f:57:0b:
e6:9c:40:8a:72:48:c2:6b:9c:b3:cf:a4:ae:30:b2:
bb:6a:96:4e:9b:ef:ba:75:b1:ef:0e:0e:c5:35:42:
7d:2c:97:4d:db:14:cc:3c:f4:b9:37:29:3a:20:ac:
db:18:9c:9e:a6:41:5c:2d:01:6c:e0:97:d7:2a:13:
0a:00:d7:f9:cd:b6:49:4a:4d:97:21:98:c5:13:40:
23:fd:59:35:89:ad:0e:70:88:fa:74:3c:0a:c7:53:
4f:ab:a5:96:68:0f:81:98:f8:df:10:e3:d0:cc:95:
91:dc:e6:f9:04:f0:ff:27:3f:6b:d4:f4:01:10:87:
83:f6:ae:f4:2c:88:b7:cd:6a:cf:8f:ca:a7:31:ea:
6e:d2:c6:7b:23:31:3f:62:91:bf:29:16:69:70:ac:
0d:d4:78:50:e5:ae:4c:72:45:49:13:2b:cc:21:d5:
84:3b:cd:54:8b:27:7c:8d:54:84:d4:aa:e4:da:55:
c3:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:50:2F:25:07:80:09:2F:0C:36:DA:93:F0:3E:B5:E5:0F:40:45
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Rt9QLyUHgAkvDDbak_A-teUPQEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.148.0/24
81.29.154.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a4:19:39:49:49:a3:c1:12:eb:b9:b2:12:3d:bd:cc:22:fd:
22:1e:b2:25:2a:ba:38:30:d0:ee:e1:80:32:7a:f1:93:13:95:
9f:84:b6:10:30:1e:de:bb:fa:66:2c:03:e2:3b:90:a0:88:f5:
18:ef:ca:96:ed:f3:80:ec:ee:88:1c:e6:63:62:61:71:93:60:
1c:3b:ba:06:fc:95:79:54:75:da:fe:80:3d:51:80:46:56:4f:
d1:70:a9:b4:94:5b:de:a2:04:3d:db:6e:5d:1b:a3:a7:a3:a1:
42:13:31:77:9a:d9:38:5a:35:f0:18:87:54:5f:1d:85:d6:d6:
50:c3:07:8b:34:13:f7:99:56:16:7c:0b:31:ea:12:ca:89:93:
c5:e2:b6:e1:35:93:d4:d4:c6:37:3c:88:fb:30:db:34:bd:99:
b0:de:50:f9:11:a8:15:1b:20:c3:bf:95:cb:9f:cd:75:dd:7a:
d7:eb:29:06:69:75:22:d0:62:f7:c7:aa:21:4b:ad:cd:45:d7:
33:a8:af:a0:cb:8a:0a:1b:30:84:87:e2:f9:9d:ea:7f:27:d1:
84:04:31:5f:b8:3d:fa:2d:92:b9:05:36:07:5e:82:43:f7:2f:
92:c3:fb:7a:c8:a4:41:95:31:83:55:10:ef:08:8b:f7:b1:cf:
95:f3:34:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:39 2024 by rpki-client on console-fra.rpki-client.org