Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa
File: tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa (raw, json)
Hash identifier: SkOms6EOovyoM+eKCI3x9i1rqjJWm6O37ofvvft/+lI=
Subject key identifier: B4:45:43:1F:DC:AF:44:39:C7:1D:99:01:F0:71:7C:1B:16:15:78:E7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018C3EEB920E6774D10618F224669ACFE72B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa
Signing time: Wed 06 Dec 2023 11:37:54 +0000
ROA not before: Wed 06 Dec 2023 11:37:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 81.29.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:eb:92:0e:67:74:d1:06:18:f2:24:66:9a:cf:e7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Dec 6 11:37:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b445431fdcaf4439c71d9901f0717c1b161578e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:16:3b:1b:13:10:92:b2:20:e6:0e:24:37:af:
58:dd:31:ee:82:85:ba:7c:04:c2:84:07:e8:4d:93:
19:21:d8:f4:27:1d:4e:61:bf:fc:de:ff:88:c5:70:
99:1a:a5:66:2c:d6:a8:28:25:56:e1:8f:1b:6e:d2:
72:4e:f6:fb:20:cc:9b:54:09:27:e6:5c:79:71:91:
f9:f1:6d:80:b9:c2:78:28:f5:50:82:94:3f:12:90:
5a:84:34:87:99:f1:01:a2:1d:5b:d4:9f:99:87:b8:
7f:c8:f5:2d:b2:8b:23:58:cb:22:77:5c:44:5f:ea:
64:10:35:0d:45:e5:86:8b:18:c7:89:d5:7c:3b:b2:
2a:d1:b8:50:5c:98:3f:49:49:a0:43:82:f0:7f:5a:
0a:aa:60:3b:e2:2d:aa:17:22:9d:fb:ae:bb:92:a9:
f9:81:32:ce:8b:5b:4b:19:22:e2:89:03:36:26:ca:
b9:c5:94:40:cb:20:ec:fc:f9:7b:b9:2d:6a:b8:a2:
5b:db:aa:cb:db:ec:ab:b7:f5:c3:f1:3e:aa:92:69:
bd:64:bb:f8:f1:06:b0:0f:e2:c4:0e:bb:45:ad:ab:
dd:5a:e2:c0:c3:55:68:85:02:0a:d8:1e:43:e9:30:
aa:42:56:6b:8c:32:40:a4:e3:63:79:e1:26:7c:e8:
57:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:45:43:1F:DC:AF:44:39:C7:1D:99:01:F0:71:7C:1B:16:15:78:E7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/tEVDH9yvRDnHHZkB8HF8GxYVeOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.145.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d7:3d:96:8b:ed:b4:3e:c4:5d:c1:c4:3f:89:e3:5c:ad:45:
4f:e8:2c:69:ab:b4:6a:3b:c3:4f:b3:7a:ad:3f:51:5a:b1:6b:
35:f0:97:5a:b9:3e:51:a2:2d:c1:01:be:f0:27:75:27:dd:7d:
00:21:95:51:36:1d:7d:dc:c6:43:37:9a:eb:e7:80:48:26:5f:
9a:b8:16:de:f5:20:1e:40:17:9b:9b:ce:8b:89:34:26:ff:ba:
c7:17:b9:45:0b:d8:6d:d2:40:67:f3:de:8a:11:76:23:6a:9d:
9c:6a:0b:21:2f:d2:85:71:cb:1b:9b:6b:4b:de:3d:f6:58:63:
30:6d:35:c1:b6:ea:ea:ce:73:1d:a1:11:e5:87:ce:2a:4c:a0:
97:a4:b6:53:ec:5e:3d:3d:aa:88:05:9a:36:ba:7b:a8:41:8e:
54:a4:d2:f7:29:23:c6:97:76:36:90:e3:89:5f:76:69:68:92:
82:82:2f:b2:68:cb:e3:11:25:12:f7:43:32:09:16:cd:28:f6:
45:5b:3b:70:79:68:4c:03:bf:8b:f4:73:c3:50:bf:3f:ea:5f:
3b:78:07:57:c1:25:e4:dc:c4:bb:b7:db:0f:8d:5a:f4:62:88:
29:21:5f:ef:f5:21:05:39:af:c2:92:24:57:ea:98:bd:f5:66:
1e:67:a3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:44 2024 by rpki-client on console-ams.rpki-client.org