Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lJDocWmFRIrPtbKeTuoETNz0lzM.roa
File: lJDocWmFRIrPtbKeTuoETNz0lzM.roa (raw, json)
Hash identifier: 7Hm6Qz1PI7NJo0uoNhIRk2Fy0vB0lq+MdtcRMcNRSv8=
Subject key identifier: 94:90:E8:71:69:85:44:8A:CF:B5:B2:9E:4E:EA:04:4C:DC:F4:97:33
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018D594D6092699C4C8C0BAFBA66200AB33F
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lJDocWmFRIrPtbKeTuoETNz0lzM.roa
Signing time: Tue 30 Jan 2024 07:37:39 +0000
ROA not before: Tue 30 Jan 2024 07:37:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 80.71.225.0/24 maxlen: 24
80.71.232.0/24 maxlen: 24
81.29.145.0/24 maxlen: 24
81.29.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 14:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:59:4d:60:92:69:9c:4c:8c:0b:af:ba:66:20:0a:b3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 30 07:37:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9490e8716985448acfb5b29e4eea044cdcf49733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:60:48:eb:bc:59:79:84:22:f5:87:e3:d1:0b:
f8:a8:25:69:c1:7e:ea:b5:82:23:4f:3c:d7:06:cb:
79:26:4e:fd:bd:02:98:9e:dc:32:cd:57:c2:56:c8:
b1:fc:17:dd:79:94:78:4e:b4:0c:f1:c7:9d:42:9c:
ac:79:05:c2:6e:50:d8:2a:e2:f1:5f:ef:87:db:18:
4b:c5:0d:8f:bb:9a:f9:45:f0:95:55:22:cb:53:47:
3f:72:ca:b4:e3:5e:1b:e0:7f:a2:e0:81:1a:bd:b9:
ce:80:4a:f0:60:94:40:53:84:d3:bc:15:8e:15:31:
18:b2:9c:9f:50:00:93:d8:bf:26:29:16:b0:71:aa:
d7:e2:f2:a4:d5:7f:dd:df:0c:81:7c:5c:41:be:78:
57:1e:f6:4a:8a:fe:6f:8c:95:de:c7:15:ba:c6:cb:
64:39:ad:86:76:3b:dd:20:6f:68:a9:c5:52:a2:81:
41:5c:11:d9:fd:14:4a:ae:62:c5:40:d0:49:bc:f5:
3d:b3:2d:8f:62:2e:5c:0c:ce:d4:d7:ad:0c:be:58:
2c:1c:fd:80:4a:90:73:66:80:99:75:a4:f9:48:c7:
99:9c:49:80:d6:7c:6c:48:93:2f:e8:97:13:84:9f:
03:11:04:e0:4a:39:56:ea:f9:78:ca:2d:0d:0f:f5:
b1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:90:E8:71:69:85:44:8A:CF:B5:B2:9E:4E:EA:04:4C:DC:F4:97:33
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lJDocWmFRIrPtbKeTuoETNz0lzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0/24
80.71.232.0/24
81.29.145.0/24
81.29.154.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1f:17:ef:0b:fe:3e:47:19:b9:a0:6e:0d:79:bc:1d:cd:da:
e2:66:63:47:73:c6:5a:c4:3e:fb:03:38:b6:3c:e4:ab:19:3f:
a2:52:17:e5:4f:59:ab:27:11:a0:c8:68:18:7c:32:2f:46:87:
03:b8:c0:32:fb:37:36:37:ec:53:ff:54:b4:ad:fa:49:1b:50:
e3:24:01:0d:9d:c3:d1:4f:c2:5f:4a:d6:d1:26:4f:a4:88:1a:
59:30:83:25:0a:4d:44:d3:f4:89:a8:9c:6d:ed:bf:01:45:52:
d0:7f:4d:27:d7:eb:6c:48:e1:05:35:9a:69:ff:67:c3:8d:66:
e9:c0:c8:db:0b:20:18:bd:62:c6:a5:d6:0b:ce:88:dc:08:6d:
0e:ed:36:0a:a9:bb:a7:38:d1:b9:1e:90:ec:3c:e6:d1:66:6e:
c6:93:99:d3:59:88:81:d4:c3:9b:72:74:d4:82:2e:2f:3e:c4:
c6:0b:7c:7f:ba:cb:5f:ba:78:78:b5:3d:c1:ea:61:f6:9f:14:
70:8c:9e:33:f2:c6:a4:3d:b4:7e:e3:ea:95:a6:a2:eb:f5:13:
c4:ec:5f:d4:e8:2f:c4:e0:33:e4:c8:35:dd:40:27:72:e3:59:
0c:fd:d7:ff:9a:70:01:15:0e:9d:ee:50:04:d7:3e:fc:85:a7:
a6:5c:4d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 2 17:38:54 2024 by rpki-client on console-fra.rpki-client.org