Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/fUjVo60ckso1H9QaggAY5dWDOyM.roa
File: fUjVo60ckso1H9QaggAY5dWDOyM.roa (raw, json)
Hash identifier: jH/NykimZtVGRQ8e34O5xfbPM2vbVpE98FbQodtewKY=
Subject key identifier: 7D:48:D5:A3:AD:1C:92:CA:35:1F:D4:1A:82:00:18:E5:D5:83:3B:23
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01866DF3C4E7E1432948E8A527259E493A15
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/fUjVo60ckso1H9QaggAY5dWDOyM.roa
Signing time: Mon 20 Feb 2023 08:32:17 +0000
ROA not before: Mon 20 Feb 2023 08:32:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 80.71.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6d:f3:c4:e7:e1:43:29:48:e8:a5:27:25:9e:49:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Feb 20 08:32:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d48d5a3ad1c92ca351fd41a820018e5d5833b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:21:9f:b0:29:d4:bf:55:86:49:8a:74:93:61:
a4:69:89:82:63:29:49:64:21:2a:5f:8f:84:32:1a:
4c:41:e9:73:cf:40:fd:88:d4:7d:ad:dd:eb:22:9c:
af:e4:53:bd:70:be:d1:1d:56:41:df:a4:50:da:b7:
c7:27:2a:1c:11:78:1e:59:64:1b:f3:bc:57:75:ea:
56:03:8d:45:89:86:9d:5a:d0:52:8b:9b:0c:01:0b:
d9:ef:9b:5b:b2:4c:f2:b6:64:ab:7e:43:69:d2:13:
08:bc:0c:4b:a2:ca:f8:55:92:47:b8:83:a8:e2:ce:
59:31:b7:2a:26:ae:00:c8:62:5f:c5:e0:c4:21:fe:
dc:6a:5f:b5:3d:4a:2a:85:5e:d3:af:9b:df:36:81:
3a:39:22:57:75:13:37:fc:06:de:e0:26:d5:6c:3f:
69:d2:87:79:59:41:d9:48:2d:e5:da:44:43:6c:83:
df:96:3a:7e:4e:18:42:fb:20:df:6f:0b:2d:85:0e:
14:82:da:07:b9:ed:54:8c:47:a1:0b:e7:44:d4:80:
07:59:20:68:0d:eb:79:5b:e9:fa:12:e0:62:3f:0d:
b9:5f:74:50:da:0d:f9:f8:f0:3f:36:ae:f8:9e:a2:
50:f0:9e:3a:31:7b:ed:5d:bf:2c:72:a5:ed:a2:e4:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:D5:A3:AD:1C:92:CA:35:1F:D4:1A:82:00:18:E5:D5:83:3B:23
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/fUjVo60ckso1H9QaggAY5dWDOyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:b1:80:26:3f:a5:67:32:79:9a:1a:b5:0a:49:f7:26:32:cc:
ed:73:8e:88:56:39:77:13:e5:d6:d3:26:40:f5:a4:23:b6:36:
50:70:77:07:3c:1b:75:ca:88:40:c1:63:10:0c:d4:d9:ed:25:
95:e0:99:84:ae:17:ef:61:0f:72:74:28:4c:2f:03:b7:c2:35:
77:62:b4:58:01:cb:f5:31:df:88:ee:a0:bf:0f:46:5e:a6:59:
78:ad:7d:d8:9a:d8:15:1f:29:3b:f5:e6:3e:00:cd:69:fd:ed:
27:f2:57:07:e8:5b:2c:3e:9e:22:88:1f:e5:d6:e9:af:a1:f3:
c0:33:4e:42:a2:ca:c8:be:b7:f6:bd:f1:43:1f:12:90:7d:6f:
f6:a0:8a:6a:93:e0:53:e5:b7:66:ff:e9:01:23:97:66:57:96:
f6:dc:b1:00:87:c7:cd:c0:c3:4e:0b:be:1e:3f:60:11:7d:60:
6e:84:52:c4:61:b7:12:51:1c:d7:15:46:07:24:2d:6a:b8:a2:
50:74:f0:a5:f4:ff:6f:d3:6d:20:2d:4a:17:aa:44:82:ff:25:
0b:d0:be:8d:60:fe:76:36:86:b6:ea:27:28:24:81:58:90:49:
68:02:99:6e:fb:95:74:cf:7d:f6:e6:0e:7c:3f:08:c3:81:8f:
7e:1e:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org