Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dKVu6QmxTvPCgWOFs6dSm1ptqLc.roa
File: dKVu6QmxTvPCgWOFs6dSm1ptqLc.roa (raw, json)
Hash identifier: QHNAuMlXZmDpcs3SuUhSbwmyvCbikTsCyxeZoMGyi8Q=
Subject key identifier: 74:A5:6E:E9:09:B1:4E:F3:C2:81:63:85:B3:A7:52:9B:5A:6D:A8:B7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0189CE8EE793795EAFBC1BF8DC714E835DAC
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dKVu6QmxTvPCgWOFs6dSm1ptqLc.roa
Signing time: Mon 07 Aug 2023 05:53:39 +0000
ROA not before: Mon 07 Aug 2023 05:53:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.236.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
81.29.159.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 05:47:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ce:8e:e7:93:79:5e:af:bc:1b:f8:dc:71:4e:83:5d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 7 05:53:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=74a56ee909b14ef3c2816385b3a7529b5a6da8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d6:ef:82:ec:bc:bf:bd:81:c9:b6:e5:51:81:
0c:63:4a:65:3a:d5:04:7b:9b:f2:ae:db:27:03:f4:
b9:e9:7f:b8:28:ad:35:2d:8f:f3:8d:66:1e:71:ab:
6f:a0:86:05:d3:33:da:72:4e:5e:36:46:87:08:c9:
5f:28:c4:d0:59:ce:79:64:66:6f:d6:2d:7e:17:00:
d3:8f:cf:35:ea:04:a3:3b:df:80:8e:da:c4:25:47:
2f:df:4c:ab:82:30:9f:30:d3:35:3e:da:6d:51:7f:
2c:06:a0:e1:cd:ca:a0:7e:aa:35:3b:9a:90:13:36:
e4:8c:fc:27:e0:1e:ed:f9:c6:72:7a:0d:8d:d8:1e:
e1:1e:69:10:4a:ab:64:f6:af:32:0e:52:24:29:20:
4a:a9:79:c6:6d:ab:d5:fa:b6:c4:a0:52:24:a2:d6:
f1:9c:5a:81:9d:70:9b:14:20:68:5c:8d:b4:87:d9:
ea:3d:e0:86:8b:c0:9b:f4:43:4e:da:36:4f:61:f4:
da:f7:23:8d:0b:4c:10:ea:74:5a:aa:1f:64:f1:09:
71:f0:99:6a:ff:a7:96:4c:bf:b5:bf:2d:a1:91:e8:
91:a0:43:a4:8d:cb:be:fc:db:4b:e8:09:cf:80:ab:
3a:31:c7:c3:13:5f:d3:35:af:e3:44:7b:ab:69:3d:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A5:6E:E9:09:B1:4E:F3:C2:81:63:85:B3:A7:52:9B:5A:6D:A8:B7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/dKVu6QmxTvPCgWOFs6dSm1ptqLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
81.29.155.0/24
81.29.159.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a2:a5:d6:8d:ed:62:ad:1b:e6:7d:be:55:03:46:9a:dd:d0:
5e:da:1f:cd:6e:76:1f:83:de:a7:9a:19:e4:70:ac:60:1c:4f:
31:c8:e3:c2:22:0e:95:2e:6e:af:d8:fe:5f:7e:43:82:dc:98:
c4:e1:93:cc:da:1d:ef:55:73:c2:80:18:ca:24:72:f1:b9:41:
ff:b4:41:38:f3:c9:d3:b4:39:10:15:c6:0e:b2:5f:46:c4:fc:
91:0e:f1:36:3e:d4:d0:a3:2f:68:5e:64:08:43:bf:fd:6d:12:
65:09:29:4d:9f:2d:0b:1d:08:e1:15:12:a9:17:68:d6:10:97:
7e:cc:5d:1d:18:8e:5a:ec:72:24:bd:e1:a6:06:0c:ba:03:a4:
05:3f:96:87:c5:3d:c7:5f:f2:54:ec:bb:9f:97:9c:94:36:dc:
64:ba:26:ef:dd:d6:34:ad:8e:23:2e:b0:16:b4:f6:4f:3e:bd:
4f:71:61:74:07:c7:ef:69:95:cc:5c:59:3f:8c:bc:3b:5e:58:
40:c4:ae:c1:57:00:72:8e:ce:72:c3:10:75:da:c3:30:ad:35:
5e:6c:63:87:c7:83:e6:ae:8d:71:1b:9f:f2:22:4d:17:f7:2b:
59:9e:0b:53:75:50:e0:ec:4f:08:60:3f:67:b7:2b:f1:5b:14:
7c:50:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:36 2024 by rpki-client on console-ams.rpki-client.org