Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/X6wNe7nIpYDlI20WwH8n_Ju-fLc.roa
File: X6wNe7nIpYDlI20WwH8n_Ju-fLc.roa (raw, json)
Hash identifier: gFVV3bH33b2XnZfnDegY0fhE+8ZmBuGeYw2jrXGKUWo=
Subject key identifier: 5F:AC:0D:7B:B9:C8:A5:80:E5:23:6D:16:C0:7F:27:FC:9B:BE:7C:B7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018848426ECDF8ED8E912CEF6BF0FB8F2016
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/X6wNe7nIpYDlI20WwH8n_Ju-fLc.roa
Signing time: Tue 23 May 2023 10:58:13 +0000
ROA not before: Tue 23 May 2023 10:58:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7411
IP address blocks: 80.71.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:42:6e:cd:f8:ed:8e:91:2c:ef:6b:f0:fb:8f:20:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 23 10:58:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5fac0d7bb9c8a580e5236d16c07f27fc9bbe7cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:e7:8c:52:b6:91:2d:19:10:50:35:d3:af:32:
2f:bb:ce:79:31:25:f9:30:e2:a7:f6:5c:71:1e:28:
e2:ce:d4:13:2b:dc:80:d8:1b:04:ff:e7:2f:bb:1e:
f3:ab:18:5a:77:70:2e:9a:4d:88:82:11:50:62:78:
b2:e3:e4:52:81:37:fc:3b:01:24:0b:1d:72:9e:d7:
19:4d:03:99:66:53:21:c6:dd:bb:e4:ae:e2:cb:1c:
ec:a9:0e:be:89:b5:83:3a:22:82:2b:ed:31:75:54:
4e:80:2a:f6:d7:a9:35:ed:d3:3b:e9:39:a9:9f:94:
e9:07:6f:21:5a:4f:62:04:b1:32:dd:68:e9:cc:d0:
1f:aa:5b:b1:97:a7:2c:5f:0e:c5:be:53:01:0a:6b:
e5:cc:a6:00:21:06:30:aa:51:c3:80:d0:68:fb:a4:
c2:83:b8:c7:e1:de:e2:37:b1:6e:ab:ec:ae:6e:03:
df:6d:ef:6e:18:de:b9:50:26:5a:7d:c4:e6:6c:c1:
64:83:93:7b:3c:50:4e:24:ff:9e:85:52:08:fb:18:
10:13:e5:98:d4:92:b2:2e:ab:de:3f:47:77:25:e3:
e7:96:7f:4c:05:34:52:5b:df:4c:56:29:b5:b1:b1:
3a:bf:45:91:89:96:a7:ff:90:32:9a:17:e2:b7:48:
7e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:AC:0D:7B:B9:C8:A5:80:E5:23:6D:16:C0:7F:27:FC:9B:BE:7C:B7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/X6wNe7nIpYDlI20WwH8n_Ju-fLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
40:0a:ee:00:7d:25:48:3c:1e:9e:de:a3:68:06:1e:0b:5d:de:
c9:0e:98:84:b7:6b:b1:d7:57:c4:2d:d7:f3:65:6f:8c:e0:96:
89:6a:2d:30:58:85:90:90:1d:ae:62:77:99:ff:97:d1:de:3f:
5b:3b:f8:26:ae:59:a5:c4:75:25:9d:3f:f2:22:aa:88:37:1e:
28:0e:6a:94:a6:e6:21:47:73:aa:6a:6f:79:9a:6d:d8:24:0e:
75:5a:42:1e:5f:b6:e0:71:65:79:9c:7c:7a:5d:04:8e:07:6c:
1d:64:50:35:71:93:28:45:72:e5:dc:0e:31:34:23:9d:24:4f:
b5:d3:64:cd:9d:a7:d8:f3:85:56:fd:bf:d1:0f:29:39:86:41:
7c:db:79:06:e5:f2:17:98:85:8f:88:49:da:f3:f0:f4:fb:d7:
c6:7d:87:9d:52:50:24:51:0f:46:4d:dc:d9:2d:6f:79:ba:57:
b8:45:68:96:c4:79:00:51:82:10:da:53:57:49:18:99:a5:f8:
2d:f1:43:ca:23:86:e3:14:88:58:85:0a:30:fa:65:ca:29:db:
a3:98:64:b9:2e:f7:d3:10:e5:64:71:45:0e:0c:2f:bf:77:89:
80:72:29:1d:a3:d7:c3:7d:49:b6:32:ea:e0:30:f6:fe:f0:67:
69:fe:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org