Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/hznY9gv929bL0zAiq_Y44tUywU4.roa
File: hznY9gv929bL0zAiq_Y44tUywU4.roa (raw, json)
Hash identifier: tGVJVIaSLr/vSu6UzIk07ncRPZsuawPnvOMErq34lrE=
Subject key identifier: 87:39:D8:F6:0B:FD:DB:D6:CB:D3:30:22:AB:F6:38:E2:D5:32:C1:4E
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CFCF67B3E94EE10CBBCC896E030F39EF7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/hznY9gv929bL0zAiq_Y44tUywU4.roa
Signing time: Fri 12 Jan 2024 09:17:40 +0000
ROA not before: Fri 12 Jan 2024 09:17:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207326
IP address blocks: 80.71.227.0/24 maxlen: 24
81.29.148.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 12 Feb 2024 06:39:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:f6:7b:3e:94:ee:10:cb:bc:c8:96:e0:30:f3:9e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 12 09:17:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8739d8f60bfddbd6cbd33022abf638e2d532c14e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:38:ff:79:e3:dc:d3:c0:98:09:cb:54:8e:
00:87:9d:3d:1d:59:77:a7:22:e1:94:4e:43:07:62:
1c:af:18:53:d3:79:5d:47:1b:79:7e:be:29:2c:25:
45:c3:6c:ef:a1:b7:53:ec:ea:f3:ea:2f:2a:c3:9c:
20:7e:54:88:88:d5:89:72:98:cc:75:33:46:0e:de:
28:11:71:b3:b8:14:ed:b9:b1:e7:31:a1:c7:a0:ff:
12:3d:69:5c:d8:f8:04:5f:9a:b6:bb:8c:2b:9e:8b:
db:9c:6c:e4:5f:e2:cc:37:9e:cb:19:a0:c7:c3:57:
13:91:0a:ab:44:13:04:b2:f0:70:fb:82:42:05:9b:
af:d5:97:53:f8:ea:eb:ab:2c:60:fc:96:46:24:5a:
2f:47:08:f7:fc:23:1d:8c:3f:df:c2:57:9a:49:bf:
0e:ac:36:35:cb:33:a8:23:0e:3f:f4:c1:52:92:df:
a7:13:1a:8b:c9:42:d1:c1:a0:c0:35:21:a0:71:b9:
ee:5b:fc:2a:29:5d:bc:8e:30:0e:83:7f:53:86:2a:
5b:11:09:df:1d:32:1a:02:9f:74:f2:cd:85:a1:2d:
42:74:56:8c:da:da:48:3b:c7:45:5b:69:01:fb:a2:
a8:f1:75:5e:01:65:93:12:96:5c:c3:c1:69:a2:2a:
a5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:39:D8:F6:0B:FD:DB:D6:CB:D3:30:22:AB:F6:38:E2:D5:32:C1:4E
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/hznY9gv929bL0zAiq_Y44tUywU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
81.29.147.0-81.29.148.255
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
32:53:0b:6d:a9:42:a2:47:eb:48:fd:ee:44:6f:ac:1e:a9:17:
76:d0:c2:61:4c:b4:5f:4a:ba:af:31:6d:85:76:41:d6:0e:45:
52:a2:c5:e7:65:99:30:db:90:15:ad:66:c6:85:b6:00:94:3b:
4b:a0:6e:33:0b:9c:31:84:a6:31:eb:cb:1b:ee:33:89:bd:ad:
fd:71:24:14:1f:35:2a:48:d1:ed:0a:03:44:27:79:21:63:9f:
ae:c0:1b:39:a5:52:ca:18:cc:11:ad:f9:0a:08:c5:02:6b:fc:
f3:5e:d0:b1:d7:67:08:d6:af:25:d7:81:f6:48:ff:5c:dd:ce:
81:6e:46:54:71:52:6a:19:d4:5f:3b:1b:60:1a:d9:43:93:6c:
08:57:68:56:d6:c5:86:df:92:74:77:dd:6a:16:f6:73:bb:7b:
8a:27:78:a7:1e:b7:9b:9d:84:14:e2:71:6b:7d:83:c5:23:e6:
fc:ec:ec:8f:27:67:2b:9f:79:15:f4:45:2c:06:dc:b5:f7:18:
4d:58:05:e0:10:e4:74:72:c9:0d:92:54:24:a2:59:60:5c:4e:
27:70:6d:50:48:e0:11:7c:82:17:1a:ca:3f:8e:99:51:b8:6e:
5f:ae:db:57:27:98:60:51:ca:04:db:4d:65:f1:ea:ec:53:a1:
f4:b1:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 09:38:45 2024 by rpki-client on console-ams.rpki-client.org