Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UX2StiUJ_mupyEIKXhI-kxYYFUo.roa
File: UX2StiUJ_mupyEIKXhI-kxYYFUo.roa (raw, json)
Hash identifier: +docVtOfgFdyo4bAqUtz0WQHH22+cRoTGpp0mhURs3c=
Subject key identifier: 51:7D:92:B6:25:09:FE:6B:A9:C8:42:0A:5E:12:3E:93:16:18:15:4A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189926EE40E9290F5784458BB4973C36F27
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UX2StiUJ_mupyEIKXhI-kxYYFUo.roa
Signing time: Wed 26 Jul 2023 13:41:28 +0000
ROA not before: Wed 26 Jul 2023 13:41:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 80.71.229.0/24 maxlen: 24
80.71.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:6e:e4:0e:92:90:f5:78:44:58:bb:49:73:c3:6f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 26 13:41:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=517d92b62509fe6ba9c8420a5e123e931618154a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:eb:4b:0a:ff:c3:c5:64:ba:9f:ad:18:a6:91:
6d:7f:8d:59:d2:06:93:1e:d5:d0:7d:72:fd:83:e2:
16:4e:13:27:ea:0f:71:bf:b9:65:8c:9f:95:04:26:
24:52:2a:44:d5:8b:47:12:f6:5c:16:be:62:6f:0e:
94:ca:a2:91:92:31:ad:f6:95:92:ba:2b:dc:8d:84:
fa:1d:02:79:07:67:01:ca:8e:36:20:ac:6c:b1:ff:
b2:9d:88:b3:43:a0:11:27:e5:89:47:d4:54:a4:b9:
5b:ef:66:f5:d1:ee:e6:8a:17:fd:8c:85:1c:12:11:
ea:4b:1d:e1:84:2a:8a:08:42:81:27:92:f4:c0:36:
6e:9f:2e:07:fe:62:36:74:57:f0:2b:e5:79:36:54:
b8:1c:d9:03:29:6b:8a:53:5d:f1:59:55:46:52:b8:
20:cf:5b:5d:ca:bd:99:1b:ea:be:99:5c:d4:e2:89:
af:ae:ab:f9:09:53:f7:6c:41:6b:2d:95:0c:ae:31:
50:49:8f:31:c9:a8:eb:ac:4e:cc:ed:05:df:a4:cf:
40:fc:fa:b1:d7:1e:a4:f5:7b:97:7b:87:c3:a2:ce:
73:50:cc:a6:92:07:b5:c4:45:46:49:7f:1c:f3:4b:
6f:f6:53:7d:f4:f9:80:f8:9c:7f:51:fe:54:c8:ed:
80:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:92:B6:25:09:FE:6B:A9:C8:42:0A:5E:12:3E:93:16:18:15:4A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/UX2StiUJ_mupyEIKXhI-kxYYFUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
80.71.235.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:c0:a6:4e:22:e8:92:3e:31:3d:fb:60:1e:f3:56:05:1c:f8:
be:c6:64:b7:c8:fa:87:d6:0f:4b:b6:c5:ed:5e:b0:f0:76:9c:
fc:83:ff:ef:07:73:eb:68:5c:63:c8:19:e3:dd:1f:ae:bd:12:
46:05:de:5a:51:59:9a:1d:4d:13:db:7a:d2:85:b6:12:db:e2:
17:ff:6a:7d:98:cf:5a:1b:6a:dd:7c:a7:a1:ee:58:28:e5:62:
04:6a:9e:b2:4f:2b:dd:bb:69:6f:de:53:e9:8a:cd:ca:fd:3f:
a0:c4:b1:3f:11:2c:bc:73:af:67:88:7e:b8:b9:0b:b3:11:02:
df:19:82:c7:bc:f8:ed:b9:7a:8d:c4:b6:39:0a:5f:46:5c:3b:
e8:a8:87:c7:7c:b4:f6:e9:61:f4:77:4d:a4:10:bd:5d:d1:d8:
0f:18:25:62:af:d6:eb:ed:58:ad:fd:7a:0b:8b:b3:25:74:a7:
79:9a:63:27:75:33:20:3e:e6:48:49:20:ff:95:c4:1f:32:7e:
30:16:a5:df:b4:14:bd:42:04:a5:84:4e:f9:aa:82:57:e7:0d:
ee:92:53:87:5a:13:9b:d6:02:e0:b5:dc:74:33:41:b3:80:0c:
9d:92:f7:d6:ed:a6:45:1b:ad:b9:d4:3a:4d:b2:15:c8:2c:97:
c2:bb:e4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 27 17:52:31 2023 by rpki-client on console-ams.rpki-client.org