Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/rPJVbUWhIXbCp2RK9zQEAq6j3Zw.roa
File: rPJVbUWhIXbCp2RK9zQEAq6j3Zw.roa (raw, json)
Hash identifier: t3kUVFGGF6QQrA/D9yKwmp5BYt56zCVNmBWFO987JKQ=
Subject key identifier: AC:F2:55:6D:45:A1:21:76:C2:A7:64:4A:F7:34:04:02:AE:A3:DD:9C
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018C0004C4BA38B321B16CED22A6E1966EE7
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/rPJVbUWhIXbCp2RK9zQEAq6j3Zw.roa
Signing time: Fri 24 Nov 2023 06:29:21 +0000
ROA not before: Fri 24 Nov 2023 06:29:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 80.71.228.0/24 maxlen: 24
81.29.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:00:04:c4:ba:38:b3:21:b1:6c:ed:22:a6:e1:96:6e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Nov 24 06:29:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=acf2556d45a12176c2a7644af7340402aea3dd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:b5:e5:ff:f9:d4:98:a6:03:b1:d6:6e:c3:
3d:8c:59:97:8c:f1:49:ea:55:84:73:16:d9:89:fa:
90:92:7c:7b:07:7a:81:f3:24:86:a3:9b:90:7d:2b:
66:92:34:96:8a:1f:04:02:62:30:1c:8e:3e:b4:be:
57:ee:e7:1b:6c:82:a6:e8:5b:fb:aa:f5:8a:25:f3:
84:4a:00:1e:94:83:ab:c5:a3:95:1f:65:3c:a3:b5:
a4:26:0c:2b:3e:8c:59:9d:b3:c3:ac:0f:e1:cd:bb:
72:d6:66:30:63:8e:2d:26:68:d5:81:73:6c:24:9a:
79:62:c6:8a:8a:2f:b4:09:95:f5:d6:64:3b:5e:50:
d0:00:22:52:6e:46:62:5d:ef:ff:b3:ad:8c:91:f8:
12:ab:59:03:c0:de:68:7b:ff:4c:4b:f1:f1:b2:30:
de:c9:8f:18:62:04:9c:42:e4:20:86:c7:ad:48:ed:
6b:05:7e:a9:ac:95:84:ad:1d:75:fa:a9:9d:fc:af:
66:93:14:de:d4:2f:a3:83:dc:c1:64:df:30:06:09:
95:cf:41:d3:40:c1:60:e7:79:0e:ec:4c:70:f1:db:
97:f3:ec:2d:54:4e:98:58:aa:7c:a3:b7:03:e3:13:
c0:b4:f3:05:79:91:90:c7:6c:82:1b:ea:55:db:37:
f1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:55:6D:45:A1:21:76:C2:A7:64:4A:F7:34:04:02:AE:A3:DD:9C
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/rPJVbUWhIXbCp2RK9zQEAq6j3Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.228.0/24
81.29.151.0/24
Signature Algorithm: sha256WithRSAEncryption
88:48:8c:5d:f9:65:8f:43:55:b3:02:10:46:a9:00:60:3e:5e:
47:f4:8a:3d:e7:c8:d5:ca:a9:ab:b1:0f:36:6f:47:07:94:af:
dc:50:ca:8d:70:0e:6e:72:15:34:a2:5c:08:b0:e7:15:69:f1:
c3:6a:59:68:37:ef:ca:1d:0d:8e:4e:8f:dd:c3:db:00:1f:24:
35:d8:e8:4a:a4:f3:5d:b2:74:40:8d:a3:bc:54:c6:61:b1:a8:
e8:cb:61:e5:eb:ca:d0:d3:7c:fe:2a:97:dd:c4:8f:2a:bc:5d:
bb:f8:61:65:2b:40:bb:d1:8f:97:be:ef:1e:6d:76:7f:4a:63:
e4:b6:75:83:69:35:16:83:49:14:21:fe:43:89:30:7e:11:12:
09:11:ca:8a:3c:dd:b9:58:45:69:6c:a4:7b:da:59:79:ff:78:
0c:0e:45:fb:0e:9a:17:61:53:55:42:23:f7:05:3a:90:a2:40:
09:33:3f:3d:90:ee:a9:ca:71:45:12:86:69:61:f9:71:2b:5d:
b7:c2:b0:29:0b:9a:c2:15:5a:85:91:18:28:6b:69:22:95:24:
0c:07:ef:3b:24:6c:fb:58:e1:9c:3a:f8:26:fd:64:32:7f:84:
04:e5:e0:40:96:f3:ef:ad:3d:51:aa:30:08:81:cd:04:1f:1b:
28:79:c1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 27 17:01:02 2023 by rpki-client on console-ams.rpki-client.org