Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Zk8q3jdCTa9DPrW4unbHEHIFkJY.roa
File: Zk8q3jdCTa9DPrW4unbHEHIFkJY.roa (raw, json)
Hash identifier: 3IMTaYL0cvhPugHP1oGPkwGQ90RzqzTwNby7jli5dd8=
Subject key identifier: 66:4F:2A:DE:37:42:4D:AF:43:3E:B5:B8:BA:76:C7:10:72:05:90:96
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018625F3556C8463A11A24B038BF1FA9108D
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Zk8q3jdCTa9DPrW4unbHEHIFkJY.roa
Signing time: Mon 06 Feb 2023 08:59:09 +0000
ROA not before: Mon 06 Feb 2023 08:59:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
80.71.237.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:25:f3:55:6c:84:63:a1:1a:24:b0:38:bf:1f:a9:10:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 6 08:59:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=664f2ade37424daf433eb5b8ba76c71072059096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:21:5d:e4:ed:f0:bf:e6:05:92:5d:c7:c4:ab:
ed:a2:49:fe:ca:d6:3b:b7:e9:53:2e:05:7a:1b:e0:
3a:4a:f4:92:54:0c:ab:1d:45:4c:2b:98:92:1c:61:
2b:b4:c8:5a:13:6d:5d:10:f4:89:e9:8d:de:6b:9c:
31:fd:bb:22:02:e9:ad:ab:e2:b6:de:47:96:49:84:
53:f3:20:e8:9f:37:5c:17:f8:75:6a:e1:69:26:d7:
a7:f4:38:9c:c8:e5:4f:b3:20:54:1b:9f:94:c1:d6:
9c:af:8e:e9:66:c3:44:d0:14:bf:a8:b5:21:92:c2:
9e:04:29:eb:15:ba:ff:23:45:07:af:05:5c:f0:cf:
b4:aa:40:9c:b6:f0:d0:b7:86:0a:dd:8a:d0:34:3d:
92:5f:6e:da:58:6b:a1:f5:74:52:5a:20:a2:05:24:
1c:8f:69:20:db:51:1c:08:4f:69:0a:b5:af:c7:06:
53:23:4a:5d:a6:ac:94:9d:1e:9c:13:56:73:24:72:
f1:04:27:b2:f2:2b:96:ba:ee:36:28:57:59:7e:27:
ee:69:67:5a:11:39:1d:f7:3c:94:86:48:40:a9:f2:
74:9f:38:0d:33:92:68:a9:ce:cb:c1:a4:50:dc:52:
a2:a1:e1:d9:05:3f:2c:d3:06:2c:5e:1a:ec:eb:52:
15:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4F:2A:DE:37:42:4D:AF:43:3E:B5:B8:BA:76:C7:10:72:05:90:96
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Zk8q3jdCTa9DPrW4unbHEHIFkJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.233.0-80.71.234.255
80.71.236.0/23
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:f1:3e:70:83:b5:9b:cf:7f:51:48:98:71:a1:ba:e0:8a:cc:
3d:7b:33:0a:10:32:40:ca:56:41:69:e1:10:02:cb:d9:7a:38:
37:1c:06:c9:b4:7f:8e:83:43:f6:93:c0:a2:89:70:ca:bb:b8:
65:cd:bc:6c:c4:02:f7:28:43:e7:ef:58:ba:c6:e3:c4:08:4f:
9f:bc:12:e3:8f:f9:b8:3d:0c:96:e0:0f:c1:49:b4:49:2e:f8:
c8:4b:65:16:88:ee:6d:06:b6:53:eb:b4:68:80:4d:fb:3d:56:
9a:b0:d3:5f:1a:57:8b:de:bd:03:5a:0f:dc:58:9b:59:1f:54:
ec:c9:47:20:34:65:98:3c:85:ac:11:49:60:ec:9e:b0:c2:c6:
df:ef:fd:d0:a1:df:a7:15:2d:b8:ed:d7:8d:b1:51:90:8f:09:
02:b1:b8:29:8d:a0:b6:16:c3:07:db:53:6e:19:0e:31:ee:64:
a6:d5:3e:6a:7e:48:1e:f0:d5:72:71:f4:cf:3d:f9:b9:fa:ba:
bf:72:1e:69:90:11:e7:a5:20:f0:70:cb:47:49:0e:fb:3c:9e:
72:28:d8:26:16:58:ec:42:c1:9e:c7:1a:a4:cf:68:85:de:bc:
39:f1:4e:e4:c6:18:e6:d4:f0:06:2c:9a:ec:79:dc:a9:d3:02:
31:ea:12:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org