Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lJIfVNVteaqi5K-EwfbRRG2D46M.roa
File: lJIfVNVteaqi5K-EwfbRRG2D46M.roa (raw, json)
Hash identifier: fz/6+KqWexL+RkjJQKsxHr4/YpzweJMmh1hyPuXazHg=
Subject key identifier: 94:92:1F:54:D5:6D:79:AA:A2:E4:AF:84:C1:F6:D1:44:6D:83:E3:A3
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0186A124CE398385E126687929C140B8825C
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lJIfVNVteaqi5K-EwfbRRG2D46M.roa
Signing time: Thu 02 Mar 2023 07:06:29 +0000
ROA not before: Thu 02 Mar 2023 07:06:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 81.29.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a1:24:ce:39:83:85:e1:26:68:79:29:c1:40:b8:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 2 07:06:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94921f54d56d79aaa2e4af84c1f6d1446d83e3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:97:5d:c6:96:c3:26:71:42:ac:cf:43:8c:6b:
76:ac:ec:76:ba:b1:d3:92:b3:9e:c5:f6:5d:7f:98:
dd:e3:5c:6e:57:89:10:94:97:1a:f2:33:0d:9c:cb:
f4:99:1d:9e:18:53:eb:ef:32:87:57:bf:34:dd:b9:
14:10:67:3f:fe:60:4c:fc:91:40:db:74:da:09:44:
bf:14:e9:24:1f:2c:50:90:11:33:4b:2f:79:b3:3a:
29:4d:5b:9e:03:65:76:77:9a:29:e3:68:b5:a5:ce:
13:e2:e9:ba:12:c1:51:fe:bf:68:26:52:72:44:6b:
86:fc:60:3e:80:30:07:54:e6:c3:f6:27:3f:0f:f9:
28:44:89:70:88:bd:e8:c9:26:b6:1b:14:02:f1:cf:
d0:3e:28:3c:00:50:bf:db:31:db:ac:33:4b:4d:30:
7c:79:43:b9:80:4b:25:b1:14:fb:a2:4b:ed:3d:de:
53:8a:2c:7b:bb:1e:ca:d0:2c:68:01:b7:e8:45:a6:
f9:fc:69:3b:58:14:de:4f:04:23:79:49:19:ec:83:
cd:68:91:6d:fd:03:3b:39:a0:a6:59:e8:e1:f8:bc:
60:a8:5c:42:5c:40:4c:33:5c:0b:b8:4b:b1:3a:11:
40:dd:d8:1a:dc:28:84:31:6b:a6:4d:6a:19:93:44:
b3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:92:1F:54:D5:6D:79:AA:A2:E4:AF:84:C1:F6:D1:44:6D:83:E3:A3
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lJIfVNVteaqi5K-EwfbRRG2D46M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.150.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1e:00:7c:ba:e8:11:48:fb:32:87:7c:2c:0a:d1:98:36:7b:
e4:92:2d:85:e5:ba:97:a6:97:94:27:04:fa:09:85:7c:a1:fb:
10:97:e9:d3:41:09:8c:10:5f:d2:b3:d6:0a:92:30:88:4a:b4:
e3:79:b3:30:4e:3b:a6:d8:2c:d3:6b:7a:ff:68:72:eb:34:d6:
ff:4b:e6:ba:e0:38:45:1c:4b:66:8f:21:eb:40:4a:82:79:34:
6e:a1:88:11:9d:00:93:c1:11:9d:39:3e:ba:88:2d:cc:05:1e:
99:a6:30:10:00:16:ae:99:22:e5:90:d2:64:90:60:0b:86:f4:
3b:43:d1:f3:58:6f:60:e3:c1:d9:dd:ed:df:aa:94:8f:ca:2c:
13:02:a7:ff:fa:a7:ff:c3:46:fc:71:15:df:8a:fa:b6:80:25:
9c:e1:97:59:b4:03:bd:33:ed:a0:44:f6:77:6c:fc:56:aa:9b:
b9:8e:4d:7a:24:06:23:1e:64:7d:f9:6b:b3:21:1f:60:b0:f9:
cf:02:bc:61:07:32:06:34:aa:b9:5b:5f:b8:4a:fc:cf:90:81:
d4:10:6e:d4:b9:dd:a8:dd:5b:ad:a2:8c:76:eb:00:d9:1c:65:
eb:56:00:ab:75:8c:97:c2:ef:2f:d8:ee:45:29:a1:4b:2f:8e:
61:56:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:44 2024 by rpki-client on console-ams.rpki-client.org