Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/slWsCUd3QXmspoEGbFfinlvNH0E.roa
File: slWsCUd3QXmspoEGbFfinlvNH0E.roa (raw, json)
Hash identifier: aRg+w/rMp23ol+ebqPONP2Dl0+MycpQsTo5kr/ozeyM=
Subject key identifier: B2:55:AC:09:47:77:41:79:AC:A6:81:06:6C:57:E2:9E:5B:CD:1F:41
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018702F471F503A3EEAF72DD403C39AEBED1
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/slWsCUd3QXmspoEGbFfinlvNH0E.roa
Signing time: Tue 21 Mar 2023 06:56:27 +0000
ROA not before: Tue 21 Mar 2023 06:56:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 81.29.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:02:f4:71:f5:03:a3:ee:af:72:dd:40:3c:39:ae:be:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 21 06:56:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b255ac0947774179aca681066c57e29e5bcd1f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:4b:6d:00:30:86:1a:9e:c4:f7:69:5b:be:
63:ab:ce:32:33:df:0c:44:2c:c7:c9:5a:51:f3:a1:
f4:af:7a:9d:0b:ab:e9:25:e3:66:7c:6d:dd:b3:bc:
10:a5:51:ed:d0:e9:e0:7e:7b:4b:9c:63:4e:0a:7e:
3d:11:78:dd:86:6f:67:94:bf:88:11:83:78:31:85:
8a:07:3d:d8:3c:60:77:a9:4f:d4:87:cb:06:c0:a4:
e0:c8:af:93:64:36:9e:d5:c3:27:8b:02:e4:fc:dd:
47:74:31:46:b8:e1:d5:37:ca:5b:b2:f5:38:61:c5:
38:95:93:d0:53:c2:fa:12:e7:e1:8b:bc:62:83:9f:
6e:46:ee:02:2f:e6:88:0b:8b:5c:8f:40:21:2a:c7:
91:92:25:ef:74:4d:97:1c:43:6f:36:70:95:a6:d8:
f7:1d:cd:2e:29:75:0e:b6:f2:ac:3e:ad:ae:02:ff:
d7:35:0f:fa:0e:66:02:4a:5d:8a:5b:35:a4:c4:6b:
8f:bd:71:88:10:20:c3:da:2b:74:61:49:aa:58:0e:
0c:c9:70:56:0c:ac:bb:13:e1:0d:e4:82:df:df:57:
b2:2d:97:39:81:2f:e2:0b:9c:53:64:36:5c:9e:6e:
8d:a4:a6:9a:50:de:8f:c5:0d:c6:67:87:af:c3:73:
a9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:55:AC:09:47:77:41:79:AC:A6:81:06:6C:57:E2:9E:5B:CD:1F:41
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/slWsCUd3QXmspoEGbFfinlvNH0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2b:bb:78:1d:9d:de:d0:a1:e1:50:15:65:3a:b5:16:d4:6f:
1b:b6:14:31:28:1d:5a:55:b8:cf:bc:fe:2e:46:bf:fc:ad:c2:
fe:68:7b:66:02:9c:b9:2b:68:6a:24:00:85:c6:ad:f4:3e:9f:
3b:c4:e2:10:49:7b:3b:01:97:d6:b8:65:a9:bd:ed:fb:46:62:
fe:54:70:84:0d:1e:76:f5:2b:dd:98:e8:a9:f6:93:f5:b7:ee:
dc:a2:46:60:cc:2f:a3:bc:d7:f1:71:e5:8c:2d:42:ab:bb:d5:
35:60:87:04:95:7d:2b:3d:96:b6:5c:46:19:dd:75:c1:d6:d8:
6d:dd:00:dd:b5:6c:45:a6:2e:12:62:21:20:73:13:5d:a3:28:
dc:4f:d9:de:58:2b:d9:bb:b0:12:0a:cb:8d:2e:16:2e:7e:15:
1d:9e:af:d9:6f:bc:cd:d7:e4:12:0f:f7:ec:df:ad:43:4d:e1:
96:6b:8d:41:fb:95:b6:9f:a0:c6:62:da:56:41:f5:7a:c5:2c:
61:e6:17:33:14:16:3b:01:49:56:40:6e:48:f2:eb:ea:2e:d7:
37:bd:13:35:f5:71:9c:29:60:40:e6:b2:3d:ff:9e:09:7d:af:
42:37:b6:3b:15:20:53:55:76:d5:2f:86:18:54:44:08:4a:71:
bd:f5:3d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org