Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VF7a-Frb694-cWI65Y653Hy3iIg.roa
File: VF7a-Frb694-cWI65Y653Hy3iIg.roa (raw, json)
Hash identifier: ag4P5cKVMA8dkEOXTBvq8VustsBCTW52p2vjlgIOip8=
Subject key identifier: 54:5E:DA:F8:5A:DB:EB:DE:3E:71:62:3A:E5:8E:B9:DC:7C:B7:88:88
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A1CA884296B5C9244C2A0DDD0C6EC8731
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VF7a-Frb694-cWI65Y653Hy3iIg.roa
Signing time: Tue 22 Aug 2023 09:52:00 +0000
ROA not before: Tue 22 Aug 2023 09:52:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 80.71.229.0/24 maxlen: 24
80.71.232.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1c:a8:84:29:6b:5c:92:44:c2:a0:dd:d0:c6:ec:87:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 22 09:52:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=545edaf85adbebde3e71623ae58eb9dc7cb78888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:66:2b:66:93:8b:74:65:85:48:b5:ae:dc:46:
ed:36:a6:6b:e5:3e:14:26:ff:6e:3e:c3:88:ec:a0:
c4:5b:e7:0c:1b:cd:f2:ab:8b:30:7d:52:55:43:c6:
88:df:83:7a:2b:0d:fb:1a:78:3a:6f:3a:af:68:18:
47:14:2a:06:8f:f2:58:3d:e5:69:28:d9:3c:ad:71:
78:f5:36:5d:06:06:26:2b:2e:3f:da:5f:a9:31:05:
7b:54:c6:41:e0:d6:5e:be:92:9e:e1:65:20:9e:a1:
92:74:f2:c5:72:65:fc:cd:8b:fe:b6:3d:eb:87:92:
83:1d:be:ac:6f:c3:d6:65:2f:8a:8c:0f:81:03:83:
05:6c:34:a2:b2:1d:4f:02:ac:d7:f9:68:a6:86:80:
88:20:81:b5:6b:4f:17:9b:d7:54:f7:4c:66:cd:2d:
5c:6d:b1:15:6f:d1:ca:fa:71:8a:85:a5:76:8a:49:
93:8d:ba:24:e6:73:25:34:e3:3b:8f:db:e3:24:b0:
ad:9a:e9:9f:74:8e:07:74:58:c2:de:93:65:5a:95:
a1:14:e4:a0:ad:02:7b:08:b2:cc:c9:e7:93:67:22:
37:ba:d1:2b:48:cf:7f:fb:87:f4:25:1e:1b:36:81:
c7:1f:da:a2:c4:1b:4a:ed:e3:07:5d:ca:6f:00:37:
0b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5E:DA:F8:5A:DB:EB:DE:3E:71:62:3A:E5:8E:B9:DC:7C:B7:88:88
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VF7a-Frb694-cWI65Y653Hy3iIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
80.71.232.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
96:48:9f:5c:0f:94:e8:09:7b:22:ae:3e:2f:1f:b8:06:5f:0e:
e6:d2:54:bc:e6:7d:4e:61:3b:c1:39:3a:de:47:24:99:45:fc:
df:1a:c4:91:78:e5:74:29:20:70:7b:1a:07:e4:c1:13:1e:cb:
89:0c:f4:c6:f3:1d:08:37:b8:64:b8:71:20:cb:54:1d:fb:ca:
53:87:f9:12:d2:77:52:76:8a:46:66:7f:0b:a7:89:6d:f0:7f:
aa:a2:c5:8d:c2:28:12:d8:6c:84:10:48:c9:18:74:e8:76:7a:
c2:3a:44:37:ca:21:8c:0b:16:4e:92:f5:83:c3:63:6c:af:69:
87:1e:f7:0c:b2:31:7d:55:0d:0f:ed:53:72:eb:3b:46:da:9c:
5d:fb:6c:d0:17:ea:48:bd:a0:98:9f:ab:38:bb:f9:b2:2e:29:
73:b7:54:63:de:db:1f:c2:4e:24:20:ce:31:1b:d0:f8:1f:4a:
30:62:85:7f:dd:32:b7:f3:10:de:7f:17:e1:5e:c8:f0:1a:1b:
d3:e5:6f:59:51:ac:f6:5f:9a:c3:b1:27:f4:7e:42:db:aa:bf:
4b:1a:96:cc:0b:c3:84:2e:4e:4b:d2:68:46:e0:fc:e1:24:0b:
86:5b:67:90:f4:5f:75:1c:22:a9:89:89:37:41:b2:0d:fb:72:
1e:d3:7f:6b
-----BEGIN CERTIFICATE-----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 at Sun Aug 27 06:35:29 2023 by rpki-client on console-ams.rpki-client.org