Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa
File: uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa (raw, json)
Hash identifier: EGzlcereFlhdxySEqwRocDrSh8VZqt6coO/0AqUgIw4=
Subject key identifier: B8:86:57:55:22:40:5C:B6:88:70:78:2D:CD:15:BC:C4:25:F1:50:F0
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01893E5B2E1C3E4E606DA36476A296418F30
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa
Signing time: Mon 10 Jul 2023 05:51:50 +0000
ROA not before: Mon 10 Jul 2023 05:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 81.29.147.0/24 maxlen: 24
81.29.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jul 2023 05:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:3e:5b:2e:1c:3e:4e:60:6d:a3:64:76:a2:96:41:8f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jul 10 05:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b886575522405cb68870782dcd15bcc425f150f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:db:42:34:e1:5b:72:31:b0:fe:69:ce:24:2a:
30:79:48:ac:c8:d0:49:22:1f:db:c7:0b:58:92:1a:
48:f9:04:cd:66:8d:ec:8d:96:09:8d:94:13:e7:47:
90:d2:a7:44:e9:fd:07:e6:28:8e:84:fb:d4:3b:cd:
52:a0:b9:a9:0d:e6:b2:bb:ba:e1:ce:4d:e7:17:d0:
5f:4a:c5:df:fb:34:de:9b:30:80:ad:df:16:70:23:
92:2c:09:57:2e:ff:a3:a6:80:a2:de:b2:b3:f0:8d:
fa:bd:52:4e:78:32:ac:07:03:0b:ad:58:be:60:a3:
bd:88:b8:4d:c6:2d:27:15:c3:0b:e0:ab:ee:95:ba:
a6:a5:19:6f:aa:24:4a:d8:87:5e:d9:39:89:89:38:
8e:60:b4:07:2b:fb:f3:55:50:58:81:53:68:7a:ec:
16:a1:50:dc:8f:67:05:8b:bc:ea:e6:30:13:c6:85:
c1:83:c3:1a:31:bd:d7:61:9b:66:7a:7c:3e:12:89:
7a:51:3d:b3:e6:40:91:be:7e:1a:97:b5:1b:9c:c5:
ae:47:eb:17:5d:65:71:31:d3:a5:6f:8f:c8:21:a7:
d7:ac:f1:b7:6d:f9:37:99:34:78:40:df:8b:38:3e:
db:b6:d8:16:3c:dd:32:88:b9:54:5f:98:40:df:a7:
a8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:86:57:55:22:40:5C:B6:88:70:78:2D:CD:15:BC:C4:25:F1:50:F0
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/uIZXVSJAXLaIcHgtzRW8xCXxUPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.147.0/24
81.29.157.0/24
Signature Algorithm: sha256WithRSAEncryption
87:14:09:e0:0f:fb:b9:57:a3:6f:de:f6:c8:0d:3b:45:6f:5f:
da:ce:e7:12:05:c6:19:eb:6f:cb:3d:b3:5d:48:4f:80:c8:e9:
e1:02:96:e5:d6:ac:02:1a:c6:c6:3d:7f:ed:39:aa:a9:0b:c4:
d0:28:2e:42:20:a0:59:44:2a:b1:43:37:36:e0:42:ba:97:ab:
87:f2:39:f3:bb:38:3e:a3:6f:e7:08:ab:ff:25:77:de:dc:2d:
36:16:35:66:54:9b:d2:4b:c6:f5:35:b7:f0:99:4e:49:d6:36:
74:c8:be:ee:4a:5d:40:78:03:a5:69:12:96:a5:a7:ef:86:c4:
95:da:b3:ee:c0:5d:de:f9:09:6d:49:40:20:d3:85:1c:15:c0:
2d:8d:b2:43:2c:8d:89:19:b6:fd:9f:8e:4e:5a:6c:f4:96:25:
83:ab:29:4c:08:8a:ab:b6:39:3e:52:2b:14:f4:f3:8b:f3:18:
69:04:bc:c1:e0:58:b1:39:5e:8c:66:91:85:8f:88:e8:58:cc:
2e:33:04:ab:e8:88:84:9b:8a:74:5f:d3:47:7d:ca:b4:b2:69:
6f:4f:50:6c:58:15:bd:90:e1:56:a9:f5:57:29:05:41:82:bf:
2a:36:f6:73:8c:50:26:2e:c8:af:81:f9:15:26:8b:37:d4:ea:
98:40:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:36 2024 by rpki-client on console-ams.rpki-client.org