Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/h7YYnymiaw3ja_w4DAtIWHDzlts.roa
File: h7YYnymiaw3ja_w4DAtIWHDzlts.roa (raw, json)
Hash identifier: tL41cZGW5PcPmBZ27WenFE+0LtGW3jL1cDXO7VFUZXs=
Subject key identifier: 87:B6:18:9F:29:A2:6B:0D:E3:6B:FC:38:0C:0B:48:58:70:F3:96:DB
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188BA0B9E17A71AAF28DA782FAAC7BDDD5C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/h7YYnymiaw3ja_w4DAtIWHDzlts.roa
Signing time: Wed 14 Jun 2023 13:15:03 +0000
ROA not before: Wed 14 Jun 2023 13:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 81.29.158.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Sep 2023 12:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:0b:9e:17:a7:1a:af:28:da:78:2f:aa:c7:bd:dd:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 14 13:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87b6189f29a26b0de36bfc380c0b485870f396db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:12:58:66:d8:56:1c:cb:2d:b1:9c:db:13:
ee:e7:1a:d1:9f:bc:62:3b:66:ec:44:b8:fa:a4:8f:
fc:5a:12:4e:a2:0a:a5:69:7d:54:eb:2a:b1:12:98:
67:43:79:50:43:a7:47:5e:10:3d:20:2a:10:6d:7a:
2d:fb:2a:b9:28:a6:fc:34:29:f9:90:c7:95:d1:60:
f9:43:e7:a8:fe:03:2b:16:00:a4:e9:a9:c2:20:93:
d3:68:9e:17:2f:c7:15:b9:cd:fe:d9:7c:ce:fb:0b:
ac:6b:14:32:2a:b0:7d:39:8a:18:e4:73:77:cb:87:
4c:3d:85:d2:8b:6a:cc:19:ec:af:1a:e6:c1:9b:7d:
48:08:25:41:bf:01:5e:34:6e:97:2d:2b:87:42:0b:
82:40:dc:0f:1f:75:14:5d:52:eb:b6:dd:5b:50:91:
41:18:78:0a:93:a1:20:42:7a:cd:d8:69:57:5e:a8:
33:f6:fe:6a:da:e9:e5:0a:0f:20:0d:6e:f1:8d:b5:
1f:71:6e:61:53:72:6a:7b:0f:54:dd:1f:ce:06:fc:
03:0e:85:08:57:91:4f:ec:fc:86:32:9f:08:95:15:
e3:eb:0b:f9:9f:3c:b2:3a:29:04:3f:86:89:7e:91:
4b:1b:d2:7c:ba:01:30:d8:98:ed:6d:67:dc:c5:42:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B6:18:9F:29:A2:6B:0D:E3:6B:FC:38:0C:0B:48:58:70:F3:96:DB
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/h7YYnymiaw3ja_w4DAtIWHDzlts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:d4:87:97:80:06:8e:32:a6:8b:02:18:04:74:6b:02:8f:ec:
1f:0d:bd:6b:ba:7b:88:12:4c:a5:21:1a:61:72:26:0e:eb:46:
f1:ea:84:2d:37:ad:cc:a1:62:a3:3e:16:87:30:31:5f:80:45:
f5:5a:c4:53:57:e2:13:74:a7:c2:7b:e2:11:ce:26:bc:ee:fd:
73:b4:05:d4:74:65:7f:f3:a4:98:f5:72:4c:1d:23:b2:50:8b:
0b:86:c3:c0:db:36:31:d7:a8:f3:42:56:63:6b:19:b7:78:eb:
ab:d3:30:fa:4e:ad:de:ba:47:82:e1:3a:0e:f9:e5:ad:df:0f:
44:d1:1e:30:e8:fb:3b:c4:02:77:ab:87:38:36:1a:ea:90:0a:
b4:4e:05:6f:5c:46:60:45:90:cd:95:15:bb:24:df:d1:7b:85:
03:20:67:55:ea:14:6a:02:8e:24:ae:29:13:fd:b5:3f:e8:7a:
a5:89:00:d9:3c:ce:bf:5a:13:a7:99:2a:c1:bd:fa:6d:75:86:
49:75:1a:0a:70:f9:50:f2:b6:8f:a7:c6:57:60:de:c1:98:08:
36:41:61:2a:63:a2:81:f2:df:95:f9:b9:1a:43:10:aa:ea:74:
40:e7:d3:5b:08:47:17:4f:af:4b:90:b0:9d:38:55:4c:7c:4c:
ad:1b:6c:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:40 2024 by rpki-client on console-fra.rpki-client.org