Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/nvi1iKqQkdcD_ozygTHldY6zcRI.roa
File: nvi1iKqQkdcD_ozygTHldY6zcRI.roa (raw, json)
Hash identifier: Bx1d7fcS8YDhj5YUYHTfDtcZmqou7sS5KX/+qV8Lu1U=
Subject key identifier: 9E:F8:B5:88:AA:90:91:D7:03:FE:8C:F2:81:31:E5:75:8E:B3:71:12
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01880FF62524ABAFFD13D0E6EDA69D21B692
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/nvi1iKqQkdcD_ozygTHldY6zcRI.roa
Signing time: Fri 12 May 2023 12:36:09 +0000
ROA not before: Fri 12 May 2023 12:36:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 81.29.149.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0f:f6:25:24:ab:af:fd:13:d0:e6:ed:a6:9d:21:b6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 12 12:36:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ef8b588aa9091d703fe8cf28131e5758eb37112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:55:00:3c:4c:36:91:ee:b5:a4:ac:64:de:ce:
3e:0f:93:71:88:9d:5b:9e:89:27:1c:ae:26:1a:1c:
ab:6e:d3:6b:4a:17:29:7f:53:2b:f6:b7:bd:05:a1:
9f:b3:9d:03:d7:3b:81:f4:90:17:21:11:49:a4:26:
b1:7a:e1:95:f7:3d:e9:90:e7:20:02:ab:44:2f:f3:
a3:e8:a5:ef:79:e3:3e:7a:1d:a8:91:53:27:7b:ee:
c4:42:c3:25:c8:c7:07:4f:9a:a8:cf:4c:4e:3c:ff:
8a:27:28:69:53:1c:b6:97:e1:ca:bb:8c:4d:70:c7:
7f:47:a8:9e:c5:04:d3:7d:65:88:ba:33:09:fc:eb:
fc:3d:7e:92:57:ba:31:3a:2e:7b:ca:04:9f:e7:dd:
bc:6c:4d:d1:65:3e:1f:cc:46:72:f3:77:f8:58:e3:
26:e0:49:18:ed:a9:5e:32:6a:7c:3f:64:04:93:cb:
d9:0a:89:b8:a5:0b:2d:6a:79:2e:9b:d0:6a:18:f6:
e1:ab:38:06:b6:98:88:d5:a1:d6:19:cc:75:e0:5c:
d7:5e:cf:7e:2d:45:9d:91:aa:69:38:e2:1d:82:97:
38:aa:09:45:ad:b2:5b:a8:83:e3:a2:74:1b:a2:5b:
30:1b:fc:b4:f1:c3:e4:d8:0f:db:e1:28:b0:86:c6:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F8:B5:88:AA:90:91:D7:03:FE:8C:F2:81:31:E5:75:8E:B3:71:12
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/nvi1iKqQkdcD_ozygTHldY6zcRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.149.0/24
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d8:1e:73:9d:a6:98:88:74:44:1a:6a:c8:36:0a:53:33:02:
05:7a:72:1e:15:5d:f8:4d:db:31:2d:0e:19:71:a8:e2:e7:2d:
cb:3c:26:3a:bf:f2:7b:61:4e:a5:94:b3:4c:9e:17:a9:17:b8:
65:1a:ba:e6:ea:18:6e:de:47:fe:cf:b2:75:b3:5b:6e:36:62:
b1:d6:db:31:e5:7f:cf:51:0d:10:8b:fe:3c:e3:5c:2a:7b:53:
27:38:34:74:0c:1d:81:a2:fe:19:c2:23:07:d4:e7:11:62:fe:
20:2b:26:83:e3:6e:c2:94:b9:74:bb:0f:76:ce:c6:47:ff:0e:
27:db:c7:d2:3f:78:80:d1:22:3f:08:71:c0:c2:35:b1:7a:f3:
c8:33:bf:c7:97:3b:50:be:f9:df:41:62:aa:ba:6a:84:b2:4d:
7f:50:0d:1e:3a:0f:68:62:74:68:62:3f:ac:eb:80:f7:03:2a:
48:37:91:4e:78:a9:42:11:35:a8:b9:8a:db:b0:c6:5c:77:8d:
1f:a3:61:ec:a6:70:96:28:b9:52:65:28:15:da:2d:35:86:10:
59:ee:fb:ab:e3:ae:53:4a:6e:1b:c8:ff:67:c5:87:f2:10:ba:
51:d5:1b:b4:c7:2f:34:49:d9:a3:67:f8:5a:be:cd:e9:03:7b:
ab:b4:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org