Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kQFLg2gB7eIUTxy4YtTM1dK7xHQ.roa
File: kQFLg2gB7eIUTxy4YtTM1dK7xHQ.roa (raw, json)
Hash identifier: GsDF7IoP6eueG8dajgeDwAPy3njEb+Cnh2QqIpzsSfI=
Subject key identifier: 91:01:4B:83:68:01:ED:E2:14:4F:1C:B8:62:D4:CC:D5:D2:BB:C4:74
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01857BA66A71C74916B839482061EE984AC1
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kQFLg2gB7eIUTxy4YtTM1dK7xHQ.roa
Signing time: Wed 04 Jan 2023 07:19:41 +0000
ROA not before: Wed 04 Jan 2023 07:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 80.71.227.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7b:a6:6a:71:c7:49:16:b8:39:48:20:61:ee:98:4a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 4 07:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91014b836801ede2144f1cb862d4ccd5d2bbc474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c1:14:2f:c4:26:a0:07:71:80:53:7f:d4:63:
f3:dc:fd:3b:ea:3a:72:1f:00:e8:62:cb:3a:d7:b1:
9f:ae:a1:ca:d0:eb:80:31:9a:76:d9:46:12:58:44:
cc:b4:da:a9:0d:d9:6f:a9:3f:ac:30:b7:79:05:c3:
e3:9d:9e:b2:ff:3f:8c:8a:f3:f3:df:a2:0e:70:47:
2d:04:40:b9:e9:e5:49:b2:a3:94:de:43:aa:cb:5a:
10:ee:e9:7b:1f:48:ab:e2:a1:b9:48:78:a6:af:21:
17:3a:3d:5f:4d:e0:eb:0d:e5:10:2f:20:cd:c8:7f:
78:f1:4b:76:d2:5f:66:26:74:bf:46:b9:c2:ec:86:
29:9d:1d:e2:62:d5:7f:43:67:a2:83:b5:49:98:e5:
c3:dd:c2:1b:f0:2e:06:9c:9b:51:2e:d4:3f:4f:69:
8c:5f:32:e4:ce:54:f2:ed:31:b1:59:a9:99:69:87:
af:cc:c2:8f:14:66:3d:8d:8d:44:0b:f7:28:25:8e:
a9:7f:06:6f:e7:ca:b6:fd:f1:2e:b5:58:f7:93:12:
d9:65:ca:e8:39:4d:ff:d1:89:99:d3:9a:f8:b9:a0:
be:40:d4:bf:55:bb:c9:81:15:d6:ba:f4:26:52:0e:
78:e7:82:25:07:b8:5a:75:bd:b2:1d:56:4d:49:79:
ae:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:4B:83:68:01:ED:E2:14:4F:1C:B8:62:D4:CC:D5:D2:BB:C4:74
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/kQFLg2gB7eIUTxy4YtTM1dK7xHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
80.71.234.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:f4:43:0d:1b:50:aa:1a:84:ab:f8:44:a7:92:18:6d:aa:80:
88:2c:8e:f7:1e:49:c0:8a:9f:2e:c9:b2:b8:52:8d:0b:6b:96:
52:0f:64:d8:30:a6:ac:6e:ef:ca:10:83:eb:b1:af:e5:11:9d:
3f:41:36:d3:d2:7e:02:b5:b0:00:d9:fd:79:c2:e9:83:d4:05:
3f:72:49:a4:eb:45:da:ed:3c:c0:91:e6:29:4a:6a:45:f9:35:
6c:b9:6b:1c:fc:14:8b:83:01:ce:aa:58:9d:f6:c7:32:71:18:
0f:3f:35:bd:91:2d:94:51:17:01:ca:b4:6d:99:1b:30:5e:15:
78:8a:7d:05:08:8f:93:61:e7:62:1d:63:2c:c9:7c:0b:ff:86:
f7:03:6c:83:bf:61:a8:b5:6f:3a:4f:72:54:31:d8:0b:4b:47:
fd:6d:6d:99:c9:19:3b:43:45:ca:f7:66:43:e3:ac:59:bf:53:
ee:6a:82:58:d3:76:71:45:bf:2c:02:e2:ca:3e:0a:6f:3e:23:
08:b5:17:a1:6d:c2:0c:44:a4:85:c8:6b:36:15:a3:1f:1f:89:
55:90:40:0d:d1:30:68:73:c3:d4:30:07:91:95:89:6a:e5:21:
c0:e3:96:38:5d:ad:de:d2:e0:79:da:29:48:45:1d:f2:08:34:
fb:51:36:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org