Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VkPLrH6Laj6UcqwWQ5zfddaJ8r4.roa
File: VkPLrH6Laj6UcqwWQ5zfddaJ8r4.roa (raw, json)
Hash identifier: Nj2muxCZwW5HWQ2qvdETVFSif1ta64eQzJ7l+xXm0S8=
Subject key identifier: 56:43:CB:AC:7E:8B:6A:3E:94:72:AC:16:43:9C:DF:75:D6:89:F2:BE
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189792A9C3855464DC23BC4C93BD921D2CA
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VkPLrH6Laj6UcqwWQ5zfddaJ8r4.roa
Signing time: Fri 21 Jul 2023 15:56:22 +0000
ROA not before: Fri 21 Jul 2023 15:56:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209408
IP address blocks: 80.71.232.0/24 maxlen: 24
45.66.224.0/22 maxlen: 22
81.29.151.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:79:2a:9c:38:55:46:4d:c2:3b:c4:c9:3b:d9:21:d2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 21 15:56:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5643cbac7e8b6a3e9472ac16439cdf75d689f2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dd:82:64:b0:77:ea:61:86:f1:dd:9b:7e:51:
ba:c5:4a:e1:2c:c8:9e:02:5b:6d:19:dc:a5:88:2e:
33:52:15:9c:81:d4:b9:96:a9:98:fe:cd:94:0b:bb:
63:ae:54:4d:d9:81:00:6b:09:88:ff:15:2f:42:93:
32:b5:60:49:93:11:1c:54:a8:00:4f:b7:d5:a4:c0:
d1:00:f0:24:d8:d5:83:81:8c:0e:34:0b:83:30:98:
cf:56:d2:6a:71:26:1c:df:cb:6f:7e:bf:99:fe:35:
93:a6:5c:5a:5c:47:7e:8b:b7:1f:52:2e:ca:d0:b7:
37:7c:21:a8:d2:a0:79:3b:19:77:c5:ca:51:17:59:
c6:fd:c0:a7:92:1b:59:95:0c:16:95:31:1b:4a:1c:
62:a4:0d:bf:43:4a:f3:75:3b:8c:79:82:d3:4e:26:
e1:82:f0:0b:6d:ed:1e:cb:0d:9c:f4:9a:60:92:0a:
8a:f5:0f:ad:e8:b0:fd:7b:dc:aa:cc:7e:9a:fc:65:
49:ee:58:95:f6:83:9f:4a:a0:55:bf:2a:e8:95:75:
ac:7d:37:4c:b8:29:04:87:0c:d2:b6:aa:e0:8f:87:
c3:c1:65:2a:ef:b8:b1:62:f1:9e:55:1c:0a:94:12:
0f:de:a3:04:1a:00:03:e2:3e:e0:5f:8c:32:23:86:
76:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:43:CB:AC:7E:8B:6A:3E:94:72:AC:16:43:9C:DF:75:D6:89:F2:BE
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/VkPLrH6Laj6UcqwWQ5zfddaJ8r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
80.71.232.0/24
81.29.151.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
82:53:f1:a4:2b:02:f2:9c:7b:81:10:c0:1c:60:76:c4:73:6a:
84:0f:b2:c9:32:88:cb:fb:e6:63:b3:9a:5f:99:be:99:53:09:
17:3f:c9:b1:38:88:66:f3:b7:20:22:a9:73:cf:80:dd:bf:01:
f1:77:80:9f:d8:42:63:59:04:b2:78:ce:bc:b2:1d:4a:70:b2:
a6:66:0e:e1:47:d2:43:6c:0a:82:b4:ef:32:d3:5b:ba:d5:c2:
a1:08:0a:c0:05:bc:e9:db:24:cd:18:ef:00:fe:1c:28:1c:49:
fc:2d:5c:4a:10:62:b3:bc:ba:77:a4:f1:f8:43:94:fe:a1:bb:
55:13:78:23:e6:ef:93:c6:ff:24:c1:79:36:20:88:8a:9b:f4:
34:56:08:47:99:6b:ca:98:cf:16:c8:27:14:7d:87:0f:c9:bd:
5d:85:ee:01:bb:e9:14:14:fe:c6:c4:a6:36:08:c1:fe:f5:91:
af:1a:cb:13:e0:09:2a:e0:49:6d:f1:eb:26:fe:2b:9f:70:5b:
d6:c7:e9:93:f9:d2:27:50:ab:22:e4:23:e1:da:96:37:89:6b:
16:7a:e5:79:f4:34:78:6a:7f:da:03:d1:dd:a1:ec:72:54:4d:
4f:46:99:c0:1f:32:55:88:fc:11:f2:27:1b:65:27:c9:80:eb:
a6:40:43:07
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYl5Kpw4VUZNwjvEyTvZIdLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwNzIxMTU1NjIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjQzY2JhYzdlOGI2YTNlOTQ3MmFjMTY0MzljZGY3NWQ2ODlmMmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm92CZLB36mGG8d2bflG6xUrhLMie
AlttGdyliC4zUhWcgdS5lqmY/s2UC7tjrlRN2YEAawmI/xUvQpMytWBJkxEcVKgA
T7fVpMDRAPAk2NWDgYwONAuDMJjPVtJqcSYc38tvfr+Z/jWTplxaXEd+i7cfUi7K
0Lc3fCGo0qB5Oxl3xcpRF1nG/cCnkhtZlQwWlTEbShxipA2/Q0rzdTuMeYLTTibh
gvALbe0eyw2c9JpgkgqK9Q+t6LD9e9yqzH6a/GVJ7liV9oOfSqBVvyrolXWsfTdM
uCkEhwzStqrgj4fDwWUq77ixYvGeVRwKlBIP3qMEGgAD4j7gX4wyI4Z2QwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFFZDy6x+i2o+lHKsFkOc33XWifK+MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvVmtQTHJINkxhajZVY3F3V1E1emZkZGFKOHI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCLULgAwQA
UEfoAwQAUR2XMA0EAgACMAcDBQMqCWxAMA0GCSqGSIb3DQEBCwUAA4IBAQCCU/Gk
KwLynHuBEMAcYHbEc2qED7LJMojL++Zjs5pfmb6ZUwkXP8mxOIhm87cgIqlzz4Dd
vwHxd4Cf2EJjWQSyeM68sh1KcLKmZg7hR9JDbAqCtO8y01u61cKhCArABbzp2yTN
GO8A/hwoHEn8LVxKEGKzvLp3pPH4Q5T+obtVE3gj5u+Txv8kwXk2IIiKm/Q0VghH
mWvKmM8WyCcUfYcPyb1dhe4Bu+kUFP7GxKY2CMH+9ZGvGssT4Akq4Elt8esm/iuf
cFvWx+mT+dInUKsi5CPh2pY3iWsWeuV59DR4an/aA9HdoexyVE1PRpnAHzJViPwR
8icbZSfJgOumQEMH
-----END CERTIFICATE-----
Generated at Fri Aug 4 06:02:11 2023 by rpki-client on console-ams.rpki-client.org