Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_SxItq1RNn0iUOzVxflcWija9bg.roa
File: _SxItq1RNn0iUOzVxflcWija9bg.roa (raw, json)
Hash identifier: VMagsMOLlXv2dkZrXFIAle9MqzsNW1yodTGsWhJ2OdU=
Subject key identifier: FD:2C:48:B6:AD:51:36:7D:22:50:EC:D5:C5:F9:5C:5A:28:DA:F5:B8
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189BF11261C7BFBBFD536670AC41D59BBD4
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_SxItq1RNn0iUOzVxflcWija9bg.roa
Signing time: Fri 04 Aug 2023 05:41:59 +0000
ROA not before: Fri 04 Aug 2023 05:41:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200385
IP address blocks: 80.71.232.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 07 Aug 2023 12:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bf:11:26:1c:7b:fb:bf:d5:36:67:0a:c4:1d:59:bb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 4 05:41:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd2c48b6ad51367d2250ecd5c5f95c5a28daf5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3b:52:f7:bc:7c:07:bc:74:9e:5d:f8:cd:0c:
02:64:e2:5b:d8:cc:79:0f:96:b1:41:72:42:7b:7c:
a7:ef:1d:56:3a:1f:36:eb:fd:20:12:d6:b8:4b:bd:
e8:08:5d:24:59:45:d5:ae:7d:74:e5:07:10:1a:49:
9c:55:c2:b8:fe:26:b2:76:1e:a8:97:a7:ec:aa:06:
31:fb:67:6e:86:1f:03:3d:cb:0f:9c:5a:2b:1f:bc:
38:73:ea:c0:93:0a:80:c4:a5:ae:d4:c7:73:ae:dd:
1c:7b:89:84:83:2a:d5:0f:09:27:3f:ce:0f:25:4a:
3c:0d:9f:6e:79:be:ba:55:e0:5c:89:0c:4b:78:75:
a2:1a:cf:58:38:7d:ef:c9:94:af:a4:f3:f1:36:8e:
e7:8b:77:45:ac:20:5f:5c:33:3a:60:a6:da:2d:d2:
92:91:54:1b:b4:0e:8e:76:a3:51:18:62:cd:89:12:
5d:1f:3a:2e:85:66:a4:73:76:b0:2d:1e:2f:0e:81:
1a:3a:fa:0d:85:2c:3c:64:02:9f:42:7b:15:8d:94:
5c:db:78:4c:8d:dd:7c:a0:b1:30:ed:17:f0:6e:62:
07:68:92:37:95:f2:9d:90:8f:a7:da:0c:01:fc:8a:
87:66:73:4a:15:28:8c:29:54:e5:38:74:0a:28:93:
2e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2C:48:B6:AD:51:36:7D:22:50:EC:D5:C5:F9:5C:5A:28:DA:F5:B8
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/_SxItq1RNn0iUOzVxflcWija9bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.232.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
75:96:61:11:35:04:ea:81:93:34:c4:cd:9d:90:2b:ef:39:6e:
01:97:e4:6a:62:e2:85:de:4f:4a:4f:7f:d3:b0:b1:c7:8e:51:
26:68:01:a7:5c:bc:26:2d:35:33:c5:db:80:22:d9:80:04:f7:
31:54:89:76:40:d0:e8:53:20:f7:d3:ad:c7:c6:4b:71:74:3d:
ff:d9:48:e6:29:91:d8:a4:90:3b:37:fb:5b:5d:9b:cb:8b:38:
33:d7:2e:f1:29:4a:ea:3c:53:50:86:3c:c1:78:02:58:5e:fa:
78:91:ae:29:5e:f2:a5:c2:b9:f6:31:7d:a1:2c:27:16:61:05:
75:bd:c7:67:6e:c7:e1:15:5b:c0:af:47:1e:48:dc:b0:0a:05:
09:1c:32:a5:43:37:04:11:a2:f9:b6:eb:dc:eb:f8:34:af:2e:
a6:67:23:66:19:30:fa:68:38:a6:9b:20:b6:5f:23:b0:bb:e5:
1c:bc:2c:4f:5f:18:a4:2b:ff:e2:6f:1f:78:a8:90:0e:a7:98:
27:3c:65:40:a3:be:20:26:c4:2e:82:fa:b4:98:01:70:cd:d1:
ec:8c:82:a1:6f:7b:12:6f:2d:7a:24:f0:f0:91:a1:16:08:4a:
d7:e7:61:60:76:ea:86:3a:ac:b6:c6:52:6a:43:28:61:69:61:
47:25:cb:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:35 2024 by rpki-client on console-ams.rpki-client.org