Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qUS99hFV9wtuMOsxdFoump88Fo8.roa
File: qUS99hFV9wtuMOsxdFoump88Fo8.roa (raw, json)
Hash identifier: J6rB9oTdhZ0sgMIoUC5aHUO/8kiucqBuGGPIS/vXgWU=
Subject key identifier: A9:44:BD:F6:11:55:F7:0B:6E:30:EB:31:74:5A:2E:9A:9F:3C:16:8F
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01881F0916A82349B3E6270FDAC139EE2516
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qUS99hFV9wtuMOsxdFoump88Fo8.roa
Signing time: Mon 15 May 2023 10:51:09 +0000
ROA not before: Mon 15 May 2023 10:51:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198883
IP address blocks: 80.71.227.0/24 maxlen: 24
80.71.239.0/24 maxlen: 24
80.71.234.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:09:16:a8:23:49:b3:e6:27:0f:da:c1:39:ee:25:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 15 10:51:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a944bdf61155f70b6e30eb31745a2e9a9f3c168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7b:9f:47:df:28:6b:c6:d7:56:c6:59:33:d5:
28:4c:f9:a6:39:83:65:ee:78:7e:12:22:77:70:6f:
32:ed:8b:10:87:2e:96:fc:14:ff:ed:30:a4:2b:29:
92:79:cf:8f:1c:b4:bd:00:26:2a:8d:90:3b:d2:7b:
1a:0a:c6:a0:6e:14:d0:12:5f:73:55:e4:0d:2d:17:
3c:9b:11:69:1d:1f:28:76:ef:1e:1e:71:f8:63:ac:
e5:9a:10:03:ad:c1:0d:d7:b5:a7:9c:3a:20:2a:d9:
66:bd:b1:20:03:ab:84:95:64:5c:b3:26:c5:c0:08:
84:2d:56:b7:ef:8c:05:5c:dd:bd:46:99:4e:fc:36:
7f:a1:12:4f:72:68:f1:46:ab:f8:e0:aa:22:f8:b8:
c0:ad:af:af:49:71:f9:31:b8:24:10:71:13:81:92:
a1:2c:44:d9:ab:f5:0d:c2:93:38:82:e5:61:66:0f:
47:f5:29:4c:7a:e2:b2:a1:1f:3c:d5:a8:c1:7b:c4:
5b:23:d1:73:3d:72:08:d7:0b:87:41:8d:fd:fe:5d:
65:77:02:bc:4a:bf:72:17:ef:41:0c:99:ff:88:67:
fe:9f:ce:e5:91:ec:6e:0b:86:aa:de:06:36:db:b1:
f4:3b:5b:3a:ab:97:c5:53:7c:df:4f:05:42:1e:5f:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:44:BD:F6:11:55:F7:0B:6E:30:EB:31:74:5A:2E:9A:9F:3C:16:8F
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qUS99hFV9wtuMOsxdFoump88Fo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.227.0/24
80.71.234.0/24
80.71.239.0/24
Signature Algorithm: sha256WithRSAEncryption
78:37:ac:4d:0b:ea:70:1f:97:ac:22:b1:c1:37:55:75:87:b1:
44:6c:e7:7b:a0:4c:2d:33:40:5a:dd:9a:49:77:ad:84:a4:66:
30:c2:bd:b4:c5:16:73:ee:49:e1:c8:9e:3d:da:b4:77:de:c8:
25:13:e6:ec:8b:70:6c:8b:9f:a0:ab:f9:70:b7:af:84:95:6a:
05:4d:14:42:9c:4d:68:e4:55:15:f9:c3:4e:f1:e4:ff:24:53:
c7:a4:da:27:ff:37:bb:89:61:66:7c:6b:81:b6:a5:96:1f:1e:
c5:ab:e5:a1:84:06:db:32:80:5b:3b:dc:58:4e:74:a1:eb:a6:
b8:ca:ba:02:fa:6c:5c:92:f4:2e:eb:c2:50:40:35:bd:2a:98:
a1:94:fa:27:10:b4:cf:55:e4:32:2a:df:bc:19:6d:6d:d4:1f:
42:db:06:8d:29:d7:fa:d9:0a:f9:d1:0f:8e:71:2a:50:b4:a6:
3a:29:37:3b:17:72:0d:7d:87:2b:7b:d4:ee:d0:67:68:59:b5:
ff:d1:fd:df:36:c6:7a:89:97:1d:61:6d:01:f1:0f:ee:19:fc:
fe:30:0a:25:26:fe:71:1c:27:b7:96:aa:5d:b3:b7:34:70:5b:
ce:8d:78:b7:c3:34:4b:e0:20:10:12:02:d9:e6:20:21:3c:19:
5f:2a:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 4 05:33:23 2023 by rpki-client on console-fra.rpki-client.org