Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/vEUiNaJkLl1C4NxSSUvu5bJYxr0.roa
File: vEUiNaJkLl1C4NxSSUvu5bJYxr0.roa (raw, json)
Hash identifier: lZty8t04JgV8LFf7XHAeueFNcxG+2tP+tl8ZveRwJ3k=
Subject key identifier: BC:45:22:35:A2:64:2E:5D:42:E0:DC:52:49:4B:EE:E5:B2:58:C6:BD
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018B379977F1196F0D4C58E694FC5158D3B3
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/vEUiNaJkLl1C4NxSSUvu5bJYxr0.roa
Signing time: Mon 16 Oct 2023 08:28:06 +0000
ROA not before: Mon 16 Oct 2023 08:28:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 81.29.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:37:99:77:f1:19:6f:0d:4c:58:e6:94:fc:51:58:d3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 16 08:28:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc452235a2642e5d42e0dc52494beee5b258c6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bd:5b:42:61:e6:93:d9:e9:24:49:f3:cc:6b:
b5:7f:3c:23:e4:18:ae:d2:8a:11:c6:ee:05:2c:3c:
3c:fa:a1:95:db:a9:5f:67:7f:6d:64:32:13:bb:c9:
a0:a4:f9:d2:56:bf:2d:fa:84:31:2f:f3:2e:ca:63:
dc:68:9e:23:d7:fb:5c:6c:34:dd:16:96:45:6c:6c:
14:96:2e:ca:12:cc:38:dd:b7:42:65:e2:4c:d0:58:
b2:28:a2:ec:c1:4a:85:00:0a:37:16:1c:ad:29:bd:
20:d3:9d:f0:b6:46:6e:03:ef:a4:d8:08:73:80:55:
fc:b9:09:68:b4:0e:23:40:42:0a:10:cd:29:83:b9:
7c:47:55:65:2b:94:cd:8c:a2:30:c2:ab:5d:f3:6e:
97:16:55:7e:ad:f8:cc:0b:aa:01:d7:17:c2:f0:5f:
49:54:ff:d9:98:7c:92:89:b7:76:4a:63:e5:2f:37:
43:87:2c:35:34:2b:90:73:e9:dd:91:ab:f1:23:ff:
c3:5c:2e:c8:51:a6:5c:98:12:25:de:9f:12:28:f9:
dc:84:7f:a0:c8:b3:61:cd:41:ca:7b:85:05:c1:a3:
7e:46:35:1b:9f:c6:66:d3:80:4b:a4:74:db:60:0d:
b2:7f:7c:f6:4b:92:4e:60:fe:ef:48:48:1e:cf:b8:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:45:22:35:A2:64:2E:5D:42:E0:DC:52:49:4B:EE:E5:B2:58:C6:BD
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/vEUiNaJkLl1C4NxSSUvu5bJYxr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
24:14:fd:70:e8:da:1a:a0:02:d2:82:ed:8d:b7:14:d6:3a:ae:
09:b4:4e:38:bf:6a:93:fc:f1:41:2e:24:ce:7f:99:97:f9:4b:
bd:f5:5d:50:f4:e5:5e:97:3b:90:6d:b4:a7:a5:c0:3f:60:42:
2f:c3:20:08:3f:9d:55:6f:9e:93:86:32:3a:f4:30:72:13:a7:
49:54:73:e9:cd:b0:7e:67:94:1c:e4:c3:ff:8d:99:bf:4b:f6:
b2:fe:53:09:03:3e:4e:10:21:a8:79:04:aa:90:e9:89:cf:e2:
2d:27:d4:99:05:02:fd:01:d2:73:31:77:73:39:e3:70:72:f0:
b8:cb:ff:60:1f:01:f1:a2:a0:40:cd:0a:78:13:2e:6a:19:37:
72:54:0b:00:a3:63:ae:df:6c:59:35:32:28:d9:26:4a:5a:72:
30:9d:16:88:94:d3:c9:cc:a2:71:d4:58:f8:8c:4f:30:06:be:
71:91:b3:1e:20:6d:0a:2f:25:4a:47:0a:2c:a1:31:63:f2:6b:
49:6a:a5:a3:98:ea:f5:b9:f9:78:80:87:45:41:6b:51:77:fa:
4c:02:64:3d:c5:09:8e:2b:76:a5:98:1c:c8:c2:bb:be:ce:6b:
94:d0:99:ee:83:6a:c5:c9:a8:0c:62:e3:78:10:6c:e2:af:5a:
ad:51:1c:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYs3mXfxGW8NTFjmlPxRWNOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMxMDE2MDgyODA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQ1MjIzNWEyNjQyZTVkNDJlMGRjNTI0OTRiZWVlNWIyNThjNmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb1bQmHmk9npJEnzzGu1fzwj5Biu
0ooRxu4FLDw8+qGV26lfZ39tZDITu8mgpPnSVr8t+oQxL/MuymPcaJ4j1/tcbDTd
FpZFbGwUli7KEsw43bdCZeJM0FiyKKLswUqFAAo3FhytKb0g053wtkZuA++k2Ahz
gFX8uQlotA4jQEIKEM0pg7l8R1VlK5TNjKIwwqtd826XFlV+rfjMC6oB1xfC8F9J
VP/ZmHySibd2SmPlLzdDhyw1NCuQc+ndkavxI//DXC7IUaZcmBIl3p8SKPnchH+g
yLNhzUHKe4UFwaN+RjUbn8Zm04BLpHTbYA2yf3z2S5JOYP7vSEgez7hdzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxFIjWiZC5dQuDcUklL7uWyWMa9MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvdkVVaU5hSmtMbDFDNE54U1NVdnU1YkpZeHIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2bMA0G
CSqGSIb3DQEBCwUAA4IBAQAkFP1w6NoaoALSgu2NtxTWOq4JtE44v2qT/PFBLiTO
f5mX+Uu99V1Q9OVelzuQbbSnpcA/YEIvwyAIP51Vb56ThjI69DByE6dJVHPpzbB+
Z5Qc5MP/jZm/S/ay/lMJAz5OECGoeQSqkOmJz+ItJ9SZBQL9AdJzMXdzOeNwcvC4
y/9gHwHxoqBAzQp4Ey5qGTdyVAsAo2Ou32xZNTIo2SZKWnIwnRaIlNPJzKJx1Fj4
jE8wBr5xkbMeIG0KLyVKRwosoTFj8mtJaqWjmOr1ufl4gIdFQWtRd/pMAmQ9xQmO
K3almBzIwru+zmuU0Jnug2rFyagMYuN4EGzir1qtURyw
-----END CERTIFICATE-----
Generated at Thu Nov 16 06:49:02 2023 by rpki-client on console-ams.rpki-client.org