Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/vlFqcyrJ2YtcIQj9WlLojv-Fxoo.roa
File: vlFqcyrJ2YtcIQj9WlLojv-Fxoo.roa (raw, json)
Hash identifier: iqyKPirOVSEFOJkqWkQNRj2YJIUSxU1oDm6HKcYTVTI=
Subject key identifier: BE:51:6A:73:2A:C9:D9:8B:5C:21:08:FD:5A:52:E8:8E:FF:85:C6:8A
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0187954DDF87FE6DCE4539B526FBAF6EE33E
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/vlFqcyrJ2YtcIQj9WlLojv-Fxoo.roa
Signing time: Tue 18 Apr 2023 16:58:41 +0000
ROA not before: Tue 18 Apr 2023 16:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40676
IP address blocks: 80.71.231.0/24 maxlen: 24
80.71.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:4d:df:87:fe:6d:ce:45:39:b5:26:fb:af:6e:e3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Apr 18 16:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be516a732ac9d98b5c2108fd5a52e88eff85c68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c5:d1:eb:c1:84:24:ba:ce:4c:94:97:0e:77:
c6:32:ff:26:dd:c9:07:67:d1:4e:96:69:25:c1:cd:
9e:0b:2b:a4:ff:f7:82:15:1d:10:6a:78:fc:df:78:
f7:34:49:f2:7b:3e:d9:37:f3:70:eb:fd:05:50:d1:
2e:c1:6a:33:94:a6:fe:9d:34:74:84:cb:26:77:03:
16:1d:5b:6b:f8:1b:6a:11:c6:22:2b:32:af:ad:18:
a7:0c:4c:6b:dd:91:ff:7b:94:31:5f:6f:47:d0:e4:
c3:dc:ae:be:88:ce:c7:a4:ba:8b:f5:ae:f2:76:6d:
60:77:11:bf:a3:d9:8d:c1:ac:e8:bf:61:c8:45:36:
23:0f:e4:cd:d8:29:1c:53:e5:de:6e:31:61:cf:29:
81:15:c9:fe:73:95:22:d6:e4:80:a9:c0:dd:8e:bb:
ed:c7:c5:ce:ae:04:62:fa:1b:d0:b2:36:4a:1c:c3:
9d:b0:68:69:2b:f1:33:9e:4c:d4:d5:19:51:d3:54:
9d:cd:f2:56:81:6d:e1:7a:dd:3b:59:76:51:9c:37:
56:1d:ae:ad:a8:75:7e:1a:e2:03:83:84:f9:75:6c:
81:be:07:8a:1e:4d:c2:53:c7:46:4a:59:d3:02:01:
da:91:be:7d:9d:e2:8f:87:83:4a:b3:32:8c:a5:1e:
7c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:51:6A:73:2A:C9:D9:8B:5C:21:08:FD:5A:52:E8:8E:FF:85:C6:8A
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/vlFqcyrJ2YtcIQj9WlLojv-Fxoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.231.0/24
80.71.233.0/24
Signature Algorithm: sha256WithRSAEncryption
68:a4:b5:f5:bb:35:b0:c3:15:7b:ac:0e:e1:cb:5b:ed:08:ab:
11:3b:c4:7a:92:bf:8f:38:dc:8d:72:db:28:22:6b:95:9a:b0:
d5:70:f3:23:be:70:c3:01:57:5d:68:51:fd:20:e4:ff:69:e7:
02:83:ed:41:53:64:94:23:02:2d:74:31:18:dd:f6:24:f4:3e:
7d:5d:98:f3:93:98:e8:bf:3c:42:0d:3a:60:85:1a:5e:6b:9d:
61:4c:ee:ce:e2:00:af:8e:91:3d:f7:22:a5:e9:e6:c2:86:3e:
77:b5:ad:88:de:3f:40:73:66:f5:13:7b:59:e0:b6:08:6b:0e:
df:cb:de:d6:13:49:68:da:e7:38:5d:b4:d8:52:38:b8:af:11:
fa:e9:d3:1f:4c:56:0b:48:f6:47:13:74:4a:77:99:55:e7:fc:
78:fc:fa:ea:18:ca:ce:8f:20:a2:2a:f3:9d:f2:d4:01:5a:bc:
05:e6:c3:9c:08:63:7d:1a:6d:c3:f9:e7:34:1c:94:a7:9f:64:
53:ee:1e:b4:83:80:ab:b3:08:ab:de:0e:98:e2:0e:67:cf:07:
0f:d3:32:68:93:97:18:09:0f:a1:e8:90:8d:d8:70:d5:38:68:
88:d7:2f:f7:b3:44:d3:cc:46:c6:ab:0d:e0:03:e8:ef:51:f1:
5e:04:57:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 05:55:35 2023 by rpki-client on console-fra.rpki-client.org