Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lKkUIbTz0nETlpoWs8z4d2-_McI.roa
File: lKkUIbTz0nETlpoWs8z4d2-_McI.roa (raw, json)
Hash identifier: ORqYcPDrVzx8nTqegJVN/DE2GiWOpdmULKHx7YcHTvE=
Subject key identifier: 94:A9:14:21:B4:F3:D2:71:13:96:9A:16:B3:CC:F8:77:6F:BF:31:C2
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188483B4C5EF8EEDE7521B0D44187FBDC04
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lKkUIbTz0nETlpoWs8z4d2-_McI.roa
Signing time: Tue 23 May 2023 10:50:25 +0000
ROA not before: Tue 23 May 2023 10:50:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25369
IP address blocks: 80.71.230.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:48:3b:4c:5e:f8:ee:de:75:21:b0:d4:41:87:fb:dc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 23 10:50:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94a91421b4f3d27113969a16b3ccf8776fbf31c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5a:b7:84:cf:1c:68:25:c2:24:8b:62:05:c1:
8c:ae:fd:a6:03:e2:86:80:af:97:8a:2c:ee:68:85:
66:64:08:96:73:d3:d3:14:0f:54:b7:52:e1:98:06:
eb:05:6e:35:96:bb:db:67:3f:66:4c:02:dd:e9:07:
c8:4a:f5:3f:45:5a:a6:7b:ad:81:1a:8c:5f:fc:3f:
85:e7:12:3c:97:43:39:3a:1b:de:93:1b:7c:41:df:
d3:9b:f3:43:78:eb:9d:14:78:19:e5:b3:ba:8b:92:
4e:05:ed:2f:f5:07:ed:c5:94:2e:4d:89:54:5b:fb:
45:ab:44:f7:ba:05:03:e8:61:f2:b3:85:27:fc:65:
07:94:2b:b3:70:10:45:1f:c9:5f:3a:8f:01:65:ad:
c7:45:f3:07:12:89:1b:94:50:eb:a9:e1:fc:aa:71:
78:8e:31:d0:73:fe:c4:18:aa:07:3e:e2:b3:ee:77:
14:93:35:17:13:d4:e3:8a:14:ad:13:65:b8:13:20:
b6:96:a6:46:d1:dc:f6:62:40:f5:62:e0:1a:ae:f9:
a5:fc:8b:a4:db:0e:72:60:a8:aa:1a:59:75:c4:5b:
ea:27:e4:7e:3b:7f:3f:3a:e1:e9:73:93:80:73:24:
32:df:16:1f:7b:36:9e:fb:20:82:bf:bc:c6:74:55:
55:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:14:21:B4:F3:D2:71:13:96:9A:16:B3:CC:F8:77:6F:BF:31:C2
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/lKkUIbTz0nETlpoWs8z4d2-_McI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.230.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ec:27:44:9a:ae:81:54:56:48:07:08:c6:97:6d:c1:e9:d6:
ea:1d:96:af:fc:c1:2c:9e:7e:19:c8:60:82:30:6e:75:f6:53:
cb:13:26:0f:42:84:b6:a5:89:7e:13:e6:3d:b1:c4:60:fc:98:
5e:5d:e4:99:4c:38:ed:25:67:ee:b6:3a:b4:c7:52:42:59:fa:
8f:23:37:ca:12:c0:6a:8b:43:88:13:05:d9:1a:51:35:8b:ee:
02:64:00:b2:82:53:b4:aa:4a:ac:da:fe:64:e4:62:2f:cf:11:
3d:60:bd:36:e9:40:7a:38:19:16:6f:e7:94:b8:3f:9a:85:1c:
a8:da:ca:38:cf:67:ae:6e:32:2d:ac:5c:70:a7:ef:c6:3a:5d:
e7:f4:89:b1:3f:00:94:6d:f2:d5:6e:c9:ff:89:5c:df:3d:a1:
ca:8e:96:db:2a:d0:8c:1a:8b:c2:40:83:eb:37:ef:dd:27:e1:
dc:e8:8d:b0:d4:62:1d:08:58:0a:fa:62:57:e8:5e:43:02:de:
f0:d9:d7:15:f5:bc:a3:8f:78:eb:45:4b:71:b9:8d:e6:14:bc:
d2:25:ce:07:ec:26:47:77:df:36:a7:19:8e:78:91:04:35:26:
02:b9:8a:25:3b:26:3d:f4:5e:1d:4e:d0:7b:ca:c6:3d:3a:f5:
1a:d3:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org