Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/o_UmBfsbX8ZQier1eOE-M2zxx0A.roa
File: o_UmBfsbX8ZQier1eOE-M2zxx0A.roa (raw, json)
Hash identifier: IOcXl6jfk4LtuLqFySHsn4npHEOCleVUlfKMC384c7U=
Subject key identifier: A3:F5:26:05:FB:1B:5F:C6:50:89:EA:F5:78:E1:3E:33:6C:F1:C7:40
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018A16A23A0C4DCEC835A12B614F0D28666A
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/o_UmBfsbX8ZQier1eOE-M2zxx0A.roa
Signing time: Mon 21 Aug 2023 05:47:25 +0000
ROA not before: Mon 21 Aug 2023 05:47:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 80.71.236.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:16:a2:3a:0c:4d:ce:c8:35:a1:2b:61:4f:0d:28:66:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 21 05:47:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3f52605fb1b5fc65089eaf578e13e336cf1c740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:18:8c:44:94:9d:09:6b:42:67:8b:4b:a8:b5:
d2:6b:41:3d:1b:fa:6f:c3:55:71:8d:8a:6d:a3:79:
bc:cd:00:4e:90:a3:f6:cc:4e:e7:f0:85:20:6c:9c:
aa:47:29:2b:b4:2a:9e:a4:42:02:3f:04:11:8c:80:
8e:ac:9c:f1:bb:a7:19:17:ff:39:56:8c:2f:2b:83:
75:a2:af:b6:aa:a2:90:b4:52:21:20:c0:82:e5:f5:
27:e0:cd:d2:7e:b1:9e:ab:7d:af:2c:52:cb:6f:22:
cc:46:71:ef:d2:3f:34:d5:80:c4:da:db:1c:1e:ee:
24:d4:5d:ed:f7:3f:f2:93:a1:8c:8e:a7:11:92:92:
50:12:83:ba:e8:ff:8d:54:c7:cd:e6:54:e9:1c:d2:
39:16:d5:4a:cd:83:fc:bb:6f:89:da:69:6f:0d:fc:
6e:c7:65:ea:3d:6e:3c:7a:78:e6:48:28:a9:c4:ea:
6a:42:39:60:48:e7:8a:7f:94:19:4f:d2:6e:9c:dc:
b8:8c:c0:1c:7d:a2:fa:d9:3d:d0:53:0b:69:1e:2c:
04:8e:9d:17:3f:1a:69:9f:7f:77:38:8a:90:bc:a4:
de:72:ad:f2:3b:18:4a:77:9e:92:34:9e:0c:bb:f6:
27:a4:da:73:ec:45:3f:25:1f:2c:04:e9:d6:97:7d:
6f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:26:05:FB:1B:5F:C6:50:89:EA:F5:78:E1:3E:33:6C:F1:C7:40
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/o_UmBfsbX8ZQier1eOE-M2zxx0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.236.0/24
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
18:b7:be:2c:ce:fc:7d:39:c5:4a:16:40:97:9a:9a:85:e9:bd:
9b:c2:5e:e8:d0:73:cf:52:37:c1:e0:da:75:07:e4:61:52:58:
2a:75:db:5c:11:c4:08:bc:ed:b1:2c:08:b2:dc:db:02:c5:d0:
a8:6e:c9:40:7d:02:fe:29:56:a3:69:92:c5:48:5d:ec:61:58:
5e:fa:77:91:02:db:58:b6:7f:8c:63:b6:60:b0:68:54:92:1a:
4b:20:b5:7e:b1:ef:e4:71:09:f7:3e:15:e5:a1:9a:b4:f5:73:
33:77:c4:0c:08:20:4c:b5:98:53:bd:ce:e3:ba:29:e0:e6:64:
ae:2e:e3:2a:05:58:b0:09:d8:f1:f1:a7:fc:df:d1:96:c7:e3:
59:ac:29:55:5c:a4:eb:2d:d0:1a:8a:ac:6e:b4:fe:e4:ae:3a:
1e:f5:73:a7:1c:06:fc:93:d0:6d:ab:74:13:be:ec:46:a4:a2:
c0:8e:03:4e:a9:f2:e7:df:70:b4:6a:58:a6:0b:d9:ec:73:6f:
54:77:92:ad:03:64:57:7b:53:bb:fd:24:ac:88:8e:55:ef:a8:
1c:02:1c:d4:65:91:3a:0c:b1:56:79:44:4c:c1:1b:8b:db:27:
50:ed:50:be:89:0d:7f:d3:45:af:9f:11:fd:69:08:fd:82:2a:
c6:87:f3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 08:30:18 2023 by rpki-client on console-fra.rpki-client.org