Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Wk8tz5Yx8ReeYgBTauENTUh2Oxo.roa
File: Wk8tz5Yx8ReeYgBTauENTUh2Oxo.roa (raw, json)
Hash identifier: h8kXCKYMMNeU2kv4fbAaAOIr5rz3t9PQ/vVVCbL8dSk=
Subject key identifier: 5A:4F:2D:CF:96:31:F1:17:9E:62:00:53:6A:E1:0D:4D:48:76:3B:1A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 019179404C54A9F15E4928B99CF597B6AD95
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Wk8tz5Yx8ReeYgBTauENTUh2Oxo.roa
Signing time: Thu 22 Aug 2024 08:42:22 +0000
ROA not before: Thu 22 Aug 2024 08:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 80.71.230.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 09:27:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:79:40:4c:54:a9:f1:5e:49:28:b9:9c:f5:97:b6:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 22 08:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a4f2dcf9631f1179e6200536ae10d4d48763b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:20:82:a2:3f:05:01:52:f1:bb:a8:5f:6e:
aa:2e:52:9b:4c:4c:3b:83:f1:13:1b:ee:2f:6e:a2:
80:cf:e5:ed:29:7c:05:bc:63:e2:7a:41:4f:a6:1c:
e5:0a:fa:ee:47:3b:62:cf:18:1f:c1:b4:fd:52:29:
c3:c2:21:06:36:dd:85:52:a1:cf:d6:6b:99:5f:63:
09:34:1b:45:02:6d:27:24:3d:fb:15:bb:4d:54:64:
2a:10:85:33:a9:24:7f:a6:97:e8:8c:7c:c3:c9:9a:
33:4c:ae:d6:f4:89:d9:6d:71:df:65:59:38:87:9e:
8d:cf:24:86:47:7e:cc:83:51:3b:9d:c8:be:32:b9:
26:c6:d4:24:43:53:ef:f0:f4:b0:65:87:75:6f:c3:
96:2e:58:43:58:22:66:41:8c:7c:6a:41:f9:4c:1a:
e0:cf:bb:c0:9b:ba:08:a2:ad:d4:f0:d3:42:33:e5:
4c:eb:f4:66:f7:53:b3:33:f3:04:d6:88:a0:2a:56:
4f:48:85:44:73:56:07:38:2b:89:99:5b:65:ae:33:
ed:fe:3b:53:ff:b3:ae:f6:ce:6b:4c:55:5d:2c:19:
1f:f2:dc:c1:23:c6:4e:f9:7b:38:40:7c:1e:f9:44:
56:ae:f3:a1:73:29:ba:23:86:88:e6:7a:d2:2a:26:
7a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4F:2D:CF:96:31:F1:17:9E:62:00:53:6A:E1:0D:4D:48:76:3B:1A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Wk8tz5Yx8ReeYgBTauENTUh2Oxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
81.29.147.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:2f:19:c7:b0:a7:57:a1:87:f8:ab:52:32:c5:01:a3:32:bc:
9a:59:ac:3e:db:d7:a4:3e:1a:66:44:37:f2:43:48:bd:0f:0b:
84:7f:31:04:ae:30:f6:2b:0d:78:b4:aa:ed:82:93:51:e6:ce:
3c:9f:4a:53:c5:6f:12:72:ea:6e:fb:aa:9f:06:92:d6:ec:3a:
e2:8b:ad:85:9f:12:f1:06:e6:74:0a:ef:6b:86:b5:3a:e8:12:
e5:a1:1f:5a:8b:12:e7:73:1f:b7:70:b3:5c:f1:2e:d0:3a:5b:
71:d2:f1:92:b6:d3:e0:2d:28:35:4b:04:dc:79:66:57:be:5e:
09:68:25:74:b3:3c:fa:58:57:97:7c:f1:55:be:43:11:17:dd:
3f:e3:d4:86:1f:67:7c:54:cf:fa:5b:e7:08:dd:14:d7:f7:44:
2c:be:49:6e:5b:dd:b3:83:b5:5c:b2:6d:d2:7b:6a:39:d0:60:
30:75:14:dd:a8:e0:09:bd:9c:ba:99:37:e0:e1:3c:af:dc:57:
2b:73:0b:db:38:40:77:3f:64:62:d5:92:6f:ce:f9:3e:9d:a9:
c5:b8:f8:65:b0:6c:b5:a9:ca:bf:b7:17:d6:df:e7:43:fa:d0:
d5:ae:ec:c2:f3:b9:1b:d2:f6:5e:32:a5:57:98:1c:fa:f0:75:
73:d9:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 11:17:36 2024 by rpki-client on console-ams.rpki-client.org