Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qsZ5LmdeK-Irf8Pn37_a_vNvDF8.roa
File: qsZ5LmdeK-Irf8Pn37_a_vNvDF8.roa (raw, json)
Hash identifier: WJQOEHbcRnGxz0NThsJgqVbB5lMgQBLJGsI/TfJzh9s=
Subject key identifier: AA:C6:79:2E:67:5E:2B:E2:2B:7F:C3:E7:DF:BF:DA:FE:F3:6F:0C:5F
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018AA6CA99C47B4EDEAF581661694B83A507
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qsZ5LmdeK-Irf8Pn37_a_vNvDF8.roa
Signing time: Mon 18 Sep 2023 05:36:50 +0000
ROA not before: Mon 18 Sep 2023 05:36:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 80.71.225.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a6:ca:99:c4:7b:4e:de:af:58:16:61:69:4b:83:a5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Sep 18 05:36:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aac6792e675e2be22b7fc3e7dfbfdafef36f0c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c0:94:62:c8:dd:b0:dc:9d:ca:2e:ca:2a:d1:
76:2c:37:c5:97:da:07:3a:3c:16:d2:60:47:fa:af:
1c:d7:20:c8:00:1d:b1:6b:f2:1d:55:0c:76:c6:d7:
38:40:84:14:20:c4:a0:b2:a7:80:34:db:96:54:d9:
55:1c:06:46:33:74:74:2b:84:8a:44:95:c6:3f:ac:
f8:bf:59:5c:69:e2:c1:46:a1:78:9f:78:73:83:60:
3e:1d:f8:61:cd:76:55:d0:fa:34:2e:51:19:93:bb:
20:70:21:ef:4c:1b:a2:40:ba:45:93:8b:d2:0b:99:
c2:52:c2:da:88:57:5c:5f:96:2b:2b:aa:2b:26:78:
54:11:27:a3:b4:9f:a5:af:2c:2a:49:d1:2f:d4:f4:
09:50:4b:fa:05:23:d4:fa:44:e4:72:e9:2b:d9:7b:
8a:c8:3e:c3:ac:c5:40:84:40:1c:df:50:21:c5:f7:
1a:70:72:de:82:0a:fc:7c:85:5c:d1:a1:40:c8:a9:
04:44:a1:69:b3:d2:7e:67:fe:43:2e:ed:71:ab:9d:
97:30:e7:d5:1c:09:6f:b8:ab:32:b5:50:44:0d:93:
82:b9:e4:eb:4d:33:9e:e5:2e:1c:13:3e:0f:83:41:
b1:ec:f3:69:5e:fe:1c:8e:17:50:20:1d:47:a0:77:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:79:2E:67:5E:2B:E2:2B:7F:C3:E7:DF:BF:DA:FE:F3:6F:0C:5F
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qsZ5LmdeK-Irf8Pn37_a_vNvDF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.225.0/24
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:09:31:5a:ec:cc:87:48:95:5e:78:cb:57:b1:a7:41:7e:1b:
24:2d:73:0c:7b:e7:55:41:5b:2f:63:c9:84:71:74:3c:e8:3d:
4b:53:56:e7:fd:32:cd:8c:f2:f1:b8:8d:f0:04:e4:79:08:c3:
5c:ce:fa:29:0d:62:f5:3a:c1:4f:21:df:ba:71:da:0d:a3:f7:
a7:f6:76:e8:8f:9e:a2:d9:cf:29:d7:1a:90:6d:76:20:38:96:
53:ef:f5:e8:eb:aa:28:3b:bc:e6:6a:2f:4f:e2:1e:e9:35:6f:
93:68:93:a9:56:17:3e:7d:eb:0e:5d:ab:34:51:4c:5a:40:e0:
78:36:fb:77:37:e0:4b:6d:5a:51:a4:f0:2c:cf:8c:e6:f4:b8:
3b:be:53:d7:9f:f5:dc:67:43:71:8a:87:d0:26:66:ec:0e:47:
5b:22:a3:41:34:61:cb:70:91:66:93:2d:ca:fe:65:b3:58:de:
a8:6d:17:21:8b:5a:d3:42:a6:53:fa:aa:57:e4:ca:af:2b:8e:
26:18:33:85:2e:ee:08:d4:ee:2a:d4:7e:c9:ff:ef:c1:fd:76:
72:ff:ef:40:d5:6f:f6:c3:f2:c9:2c:f1:d7:0e:66:36:0e:92:
f5:02:40:3f:8f:c7:8b:26:90:b3:6d:c6:0d:05:a8:98:26:2e:
25:a7:be:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 27 16:34:31 2023 by rpki-client on console-fra.rpki-client.org