Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VeW9Kt1FW3N7o-7k9dsbZudBdxk.roa
File: VeW9Kt1FW3N7o-7k9dsbZudBdxk.roa (raw, json)
Hash identifier: KxSQTsDAxxSEQQ7Vqxv4CnQnxWrt2w0dZDbTU1ep9L8=
Subject key identifier: 55:E5:BD:2A:DD:45:5B:73:7B:A3:EE:E4:F5:DB:1B:66:E7:41:77:19
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018B28AAFA41CC7D6887F976D4E84C63812A
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VeW9Kt1FW3N7o-7k9dsbZudBdxk.roa
Signing time: Fri 13 Oct 2023 10:52:55 +0000
ROA not before: Fri 13 Oct 2023 10:52:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216159
IP address blocks: 80.71.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:28:aa:fa:41:cc:7d:68:87:f9:76:d4:e8:4c:63:81:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 13 10:52:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=55e5bd2add455b737ba3eee4f5db1b66e7417719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:1e:cd:15:6e:bc:ae:52:86:76:0e:ba:1e:
2a:4e:c1:47:ec:e7:80:a6:af:f3:ed:d9:04:17:6e:
c7:71:5b:08:5e:94:ef:71:78:f2:0a:d9:f8:2f:d0:
1e:e7:21:c7:23:a1:46:a5:e4:b2:83:19:d7:c2:e6:
cf:f4:5c:d6:d5:66:6d:1c:7f:19:c3:f9:00:4c:01:
aa:cb:10:c4:d7:27:d8:24:13:bb:55:0a:9c:92:f3:
48:c5:98:8d:46:94:1e:9c:6c:db:fd:c5:03:90:f6:
e2:04:a9:15:97:d1:d6:76:d4:5f:e0:b7:ce:bf:53:
76:a0:f6:50:cf:dd:71:fa:ed:05:7a:91:99:d6:d7:
36:62:75:0b:cc:a4:6e:ca:a4:d8:aa:48:7d:81:ec:
5d:4d:00:59:3e:e5:62:db:64:f9:4c:0b:21:bc:8c:
c1:9a:39:7c:63:23:39:ec:1e:f1:7e:33:5f:c5:ad:
d3:30:18:e5:1b:a7:80:47:90:0c:ec:48:5d:f7:62:
99:04:c8:1a:a8:92:75:04:b7:32:a5:e6:9c:e7:f8:
84:51:6d:58:ab:d8:92:a1:27:47:78:b3:2f:c3:15:
73:ba:f0:0a:f2:7e:c1:dc:c4:c7:68:83:d5:0c:db:
76:73:b4:8a:87:fd:8d:c2:27:e2:b7:d9:4f:5f:16:
7a:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:E5:BD:2A:DD:45:5B:73:7B:A3:EE:E4:F5:DB:1B:66:E7:41:77:19
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VeW9Kt1FW3N7o-7k9dsbZudBdxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5e:de:78:a3:c0:a6:a3:ae:d3:54:a7:86:ad:e8:6a:ad:f5:
0f:9e:cf:6e:c6:5d:ae:bd:c6:8e:85:ef:da:55:74:e6:6a:90:
f0:cc:5e:1f:1d:6a:6e:f9:d3:1c:9d:67:e7:9d:10:25:54:d2:
94:af:3e:63:f9:b9:a3:bb:5f:87:95:6b:09:53:0c:17:87:b0:
58:8f:a4:cc:02:ad:b2:c8:2b:11:a0:6f:a2:93:85:93:d7:d3:
08:17:35:3e:c7:a2:62:db:44:91:03:92:12:80:f8:fa:d2:ec:
cc:80:e0:d4:08:93:87:d7:45:ec:9f:a1:1f:dd:41:79:40:33:
e5:9e:03:79:63:93:0b:82:bc:aa:b9:d0:d8:42:f5:f6:52:02:
d7:22:9d:78:d1:0e:af:70:d9:39:d7:dc:39:02:43:2d:9e:a5:
7e:2d:06:7b:47:cd:11:0e:1d:91:5e:c2:5b:6a:06:97:76:81:
07:e2:99:0f:09:b0:3d:a9:01:cc:cc:d2:e6:78:f2:69:aa:1c:
e4:aa:6f:77:97:c9:54:78:4c:02:56:dc:9c:93:b1:56:2c:90:
cf:56:9b:4a:0f:72:81:68:14:dc:3d:16:64:f1:20:a7:7b:95:
f8:09:e6:f1:cd:00:71:21:13:9d:35:c5:73:52:09:2d:69:ef:
cc:5c:ec:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 11:46:02 2023 by rpki-client on console-fra.rpki-client.org