Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/oHusfyO1tmsmb-LQ0k5mF_zkTHo.roa
File: oHusfyO1tmsmb-LQ0k5mF_zkTHo.roa (raw, json)
Hash identifier: AW56Ar8wWOkajITWmleeEeVfoJE7C0AUJY5GJfShEkc=
Subject key identifier: A0:7B:AC:7F:23:B5:B6:6B:26:6F:E2:D0:D2:4E:66:17:FC:E4:4C:7A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A5E902DA261A4FC921A199DB3DC520CFB
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/oHusfyO1tmsmb-LQ0k5mF_zkTHo.roa
Signing time: Mon 04 Sep 2023 05:00:21 +0000
ROA not before: Mon 04 Sep 2023 05:00:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 80.71.239.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5e:90:2d:a2:61:a4:fc:92:1a:19:9d:b3:dc:52:0c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 4 05:00:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a07bac7f23b5b66b266fe2d0d24e6617fce44c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:93:aa:9d:82:a1:87:c5:a7:d9:e4:95:58:78:
dc:e7:d0:8f:eb:a1:df:2e:3c:c9:52:4a:f3:2b:5e:
6e:83:c0:ea:2a:92:ec:7b:1c:fe:00:21:47:91:2d:
bb:49:e5:6b:25:39:d2:2e:e7:cd:b3:44:78:8d:32:
45:32:71:33:79:57:a4:03:a6:6f:9d:69:28:5d:88:
58:5e:96:bd:45:00:78:f7:7f:0e:a6:48:97:83:ff:
71:22:9f:02:6f:1f:b6:e1:37:31:18:a2:64:7d:ba:
66:a9:6d:04:39:4f:6c:4e:12:cc:82:ea:e9:2c:a2:
c6:13:1d:f4:8a:d6:c6:b8:33:0b:2a:69:8c:90:54:
25:de:64:67:d8:d6:ac:1d:07:4e:80:58:9a:96:8e:
d7:b5:de:72:5c:db:13:5e:da:05:69:5a:11:0f:9d:
ce:0d:70:7e:4c:da:26:a2:f4:3a:18:b7:b8:85:c6:
7c:49:59:2f:3e:d7:48:06:dc:30:90:3a:a7:44:e0:
e0:e9:db:aa:79:5d:e3:6a:0b:c4:89:6a:c0:41:94:
c3:40:55:97:07:51:bc:25:9f:6f:2a:57:03:dd:40:
e6:6f:0e:d7:72:68:0c:5d:58:c6:3b:b3:7d:9a:50:
ea:fc:b0:79:6c:5e:f0:45:95:a8:e8:d0:e7:dd:4b:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7B:AC:7F:23:B5:B6:6B:26:6F:E2:D0:D2:4E:66:17:FC:E4:4C:7A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/oHusfyO1tmsmb-LQ0k5mF_zkTHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.234.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:93:3f:bd:99:2c:9d:84:72:d7:77:b4:5b:6b:3f:d6:51:ee:
44:09:7d:43:01:50:52:20:6e:5a:7e:1b:51:7f:40:6f:dc:ea:
ea:ab:24:a3:a0:30:f1:f6:b4:f2:14:c2:de:01:30:21:e4:d3:
93:2a:ba:a4:d4:f5:b6:eb:cb:09:bc:ed:5a:51:70:37:94:fe:
e1:76:e7:e3:30:5e:ff:d0:c7:27:4b:aa:da:9d:8a:e4:02:94:
c6:c4:6b:01:e6:94:08:11:8f:6b:d1:15:8b:86:a8:7b:8a:74:
c7:ab:ac:47:6e:6d:12:c1:e0:02:92:d2:33:e9:a9:c0:9e:86:
9e:3c:b8:a3:4d:08:97:63:fc:6a:5c:e1:6a:ea:3f:d0:69:b2:
06:e2:ea:f7:c8:70:5e:34:c3:ab:3a:43:6a:7b:e8:b9:98:7c:
96:c9:4d:79:97:fd:f5:9f:ef:fc:25:02:b8:6c:41:5d:b3:fc:
5e:b1:29:52:5f:aa:00:c9:b3:af:86:04:52:56:f7:fc:f8:86:
86:4e:18:c6:ec:84:fc:6c:a9:9b:73:d1:a8:31:85:43:09:4e:
05:c3:bf:63:8a:85:fd:03:ba:16:ab:a9:62:f5:9a:78:29:6a:
90:1d:3b:44:9b:c5:cf:c7:f3:ef:df:d8:c2:61:50:a0:91:a9:
c9:c1:2c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:08:42 2023 by rpki-client on console-ams.rpki-client.org