Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_3vEv9muRftI2eIfkURjsNaHW4I.roa
File: _3vEv9muRftI2eIfkURjsNaHW4I.roa (raw, json)
Hash identifier: Qo2vDIYqWd68LP1FKNOq4m/wEezWtRt/HDb2CSCBW9w=
Subject key identifier: FF:7B:C4:BF:D9:AE:45:FB:48:D9:E2:1F:91:44:63:B0:D6:87:5B:82
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01916930AB0594E6F0F71EBDDEC746E515BE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_3vEv9muRftI2eIfkURjsNaHW4I.roa
Signing time: Mon 19 Aug 2024 05:51:22 +0000
ROA not before: Mon 19 Aug 2024 05:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44620
IP address blocks: 80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Sep 2024 11:33:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:69:30:ab:05:94:e6:f0:f7:1e:bd:de:c7:46:e5:15:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 19 05:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff7bc4bfd9ae45fb48d9e21f914463b0d6875b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:10:82:cf:83:be:e9:c8:6e:b1:54:72:7b:
0d:1a:bd:3c:ea:12:b8:63:0a:e5:3b:8f:1a:26:55:
05:c6:18:a4:09:29:09:29:7c:ba:6c:39:3b:c0:b1:
50:04:20:34:1b:99:92:d1:d1:03:f8:90:4f:64:cd:
5f:13:84:b2:1e:7a:a2:7b:61:d6:64:4b:af:86:36:
49:50:91:fe:50:9d:23:63:4c:7a:0e:7b:db:06:e3:
cf:ac:4a:6d:60:b7:80:f9:af:42:0d:00:cc:b5:82:
00:36:3a:48:0a:08:93:9a:c4:66:f7:6c:d4:a6:c0:
73:da:12:36:e5:aa:4c:af:ff:09:c4:70:f2:8d:6b:
c4:0d:62:03:00:bc:e6:b7:c5:36:bd:22:5b:41:7e:
53:94:68:0c:de:1c:58:dd:85:57:3a:ba:de:d8:fe:
f8:de:d0:c2:1d:b0:7b:5f:32:15:1b:27:26:b0:63:
ef:02:26:39:ad:0e:82:3e:00:18:d7:c0:dc:9b:04:
e4:0c:a0:7a:12:8e:73:0f:50:03:a9:67:4c:b8:6b:
d7:97:4d:07:be:d2:2e:5e:0d:61:a6:89:69:a3:67:
29:06:97:7f:8d:2a:ad:fe:af:2e:4c:34:f9:9d:e9:
67:8d:7b:da:0b:da:ce:ec:f4:e7:b9:6f:9a:5a:bf:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7B:C4:BF:D9:AE:45:FB:48:D9:E2:1F:91:44:63:B0:D6:87:5B:82
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_3vEv9muRftI2eIfkURjsNaHW4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7e:2f:1d:d8:43:5b:af:e6:86:c9:a4:ab:c5:8c:d8:f3:0b:
9f:6c:5b:40:4e:88:c3:9a:fd:13:ad:8f:90:19:6a:e9:e9:e8:
68:36:1e:99:6f:2c:ec:8f:e2:58:a5:08:5a:d4:ea:f6:c6:55:
51:2d:3b:20:c5:9c:87:7b:c9:52:18:33:93:37:12:70:fb:af:
0f:c2:27:c7:23:b3:8b:ff:4a:b8:8a:ea:e6:1d:ef:5e:4a:d7:
0b:d4:18:45:28:34:86:5d:90:a4:8a:90:d0:08:41:10:de:4e:
e3:38:eb:a5:4f:a9:42:62:4e:2c:d4:bf:8b:ae:b5:99:6c:8a:
00:59:83:69:a1:b9:e3:08:e7:55:e2:dd:b7:41:bb:cc:e0:b6:
31:d9:5d:10:9c:fc:6c:f6:97:8d:f3:6f:b1:66:a2:be:72:a1:
63:cf:d1:26:1b:1e:fe:5f:99:92:b3:ab:46:cd:41:d8:b7:a5:
be:82:6c:74:dd:25:b8:23:94:a8:0e:90:29:ef:89:35:74:0d:
6a:ee:da:cf:68:21:33:51:a3:2c:81:62:f4:05:ed:c8:39:c1:
02:5c:41:c1:0b:f7:aa:4d:a2:5c:ca:ac:e1:f2:4b:63:e7:8b:
80:e1:17:ce:21:de:95:dc:d7:10:71:68:57:aa:fb:57:3f:d5:
22:ff:b0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 14:32:39 2024 by rpki-client on console-fra.rpki-client.org