Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uBQBH0fBd912JyEMAr4MVjzQ7Js.roa
File: uBQBH0fBd912JyEMAr4MVjzQ7Js.roa (raw, json)
Hash identifier: PdF0SkKVyfX0an6E38G7nmairY+hdYi70Sgo9yt5XSQ=
Subject key identifier: B8:14:01:1F:47:C1:77:DD:76:27:21:0C:02:BE:0C:56:3C:D0:EC:9B
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0187FFE019CE3E761CD3F2F46E31138A1F49
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uBQBH0fBd912JyEMAr4MVjzQ7Js.roa
Signing time: Tue 09 May 2023 09:38:09 +0000
ROA not before: Tue 09 May 2023 09:38:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 80.71.226.0/24 maxlen: 24
80.71.224.0/24 maxlen: 24
80.71.236.0/24 maxlen: 24
81.29.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:e0:19:ce:3e:76:1c:d3:f2:f4:6e:31:13:8a:1f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: May 9 09:38:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b814011f47c177dd7627210c02be0c563cd0ec9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:34:64:16:7b:17:c2:5b:f8:50:c9:f8:5e:eb:
fe:3e:84:8d:97:96:d6:d5:d2:f1:fe:fc:69:b5:c9:
07:fe:9e:a2:7e:45:49:e0:8c:9c:57:bc:7c:ae:c7:
8c:9c:91:fe:e8:f2:84:49:7e:75:b9:7f:9e:ef:61:
bb:83:86:4d:fe:19:2c:7c:ab:c9:72:59:46:40:e4:
09:bf:f9:01:ee:3c:78:a8:37:09:92:a0:2a:b0:52:
08:04:23:53:f8:3f:e7:4c:00:20:ef:fb:a3:e2:10:
51:94:21:4e:ac:b1:5f:c1:7c:ef:dc:3f:71:c6:0f:
ab:66:fe:64:00:20:03:43:dc:05:31:91:09:90:2c:
45:8c:7c:cc:99:c3:6d:c9:c8:7c:83:3a:05:63:89:
fd:6b:1b:bd:8b:b7:65:27:8e:c0:66:e1:c3:32:6e:
86:59:dc:2a:1b:19:79:20:76:64:b5:35:8c:d8:3e:
d5:e8:d5:b3:e9:f8:57:02:20:b6:eb:46:06:bc:6c:
aa:55:15:79:c4:b6:e6:25:ce:52:24:44:30:33:3a:
1f:4e:47:2f:85:21:06:56:02:6b:2a:ba:3e:5b:32:
42:60:34:5b:22:72:c7:76:32:6c:dd:69:70:91:d6:
78:22:32:f2:8f:ff:88:81:8a:b0:5f:11:4f:02:d3:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:14:01:1F:47:C1:77:DD:76:27:21:0C:02:BE:0C:56:3C:D0:EC:9B
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uBQBH0fBd912JyEMAr4MVjzQ7Js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.224.0/24
80.71.226.0/24
80.71.236.0/24
81.29.144.0/24
Signature Algorithm: sha256WithRSAEncryption
85:cc:09:76:4c:76:de:6c:0d:e2:84:19:1f:8e:a1:81:a7:5d:
8f:e3:1e:53:7e:2e:3a:a4:59:0f:6a:cb:2e:ea:a8:1a:04:83:
f3:5c:ba:df:0e:b9:ce:d3:40:ef:bc:b2:e7:99:12:d7:f7:cf:
cf:ae:1a:9c:4e:f9:37:28:f2:32:98:76:fa:ef:83:f8:23:25:
c3:27:fa:ef:fb:e9:cb:8b:b2:7a:6b:78:39:a5:d6:9b:c3:59:
40:6e:ed:4e:2f:a5:67:2a:38:a0:94:b4:24:ee:05:17:53:ea:
7a:0f:9d:88:20:b4:33:75:6c:6e:7f:a0:a4:29:84:97:23:b3:
11:ac:6d:eb:8c:86:1b:85:9e:7d:ff:d9:73:43:4b:4b:a6:bc:
d6:e7:c6:7a:a5:f5:56:19:1a:68:8e:a2:14:f1:1d:57:6c:51:
70:82:ee:8a:79:d6:5e:8f:1d:ae:5e:d3:f2:3e:19:3b:70:a7:
7d:a0:2b:1a:96:d4:43:b1:be:06:3f:4c:44:31:64:bf:0c:8a:
1e:33:3d:98:eb:d0:73:81:d1:17:d1:69:46:20:5d:11:d3:ea:
1f:a2:f8:5c:93:ec:6a:9f:81:9e:97:f1:21:67:fa:77:98:74:
d6:62:e6:03:a7:a1:72:7a:fe:6f:04:84:46:cb:6d:f4:28:11:
3f:a1:4a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org