Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/y9E36vaetUeMJ4sTLPLJvDh_b8c.roa
File: y9E36vaetUeMJ4sTLPLJvDh_b8c.roa (raw, json)
Hash identifier: 0hoCUTymVbTaZv8O6f+053qwXM1UKTC1hxdGaN4Laxw=
Subject key identifier: CB:D1:37:EA:F6:9E:B5:47:8C:27:8B:13:2C:F2:C9:BC:38:7F:6F:C7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01856F54B45D53CCF2AE371C69AF33FBFB33
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/y9E36vaetUeMJ4sTLPLJvDh_b8c.roa
Signing time: Sun 01 Jan 2023 21:55:00 +0000
ROA not before: Sun 01 Jan 2023 21:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 80.71.229.0/24 maxlen: 24
81.29.153.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:b4:5d:53:cc:f2:ae:37:1c:69:af:33:fb:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 1 21:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cbd137eaf69eb5478c278b132cf2c9bc387f6fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6e:3d:25:92:28:48:ba:e1:f2:7f:fa:f3:8a:
91:56:06:17:fa:35:2c:22:21:6c:c4:17:e5:01:2d:
ae:ff:99:1b:40:23:7b:48:0e:17:f0:86:b6:b8:b9:
e9:bb:83:5e:77:46:6a:75:63:f2:bd:55:30:1f:11:
05:e1:19:10:5e:ec:25:e5:c4:82:dc:8a:6b:07:82:
0c:54:89:8b:60:90:71:c1:7c:e0:6a:d3:f2:28:74:
76:b2:22:79:a1:0e:c7:75:a2:f5:4a:54:06:85:d7:
84:cd:d3:a7:04:fe:09:f0:01:cb:61:4f:4e:75:2e:
eb:42:3e:bc:6c:4b:f2:9b:6d:bf:b0:90:a3:2c:b4:
23:99:4b:1b:7f:a6:6e:b0:c4:ec:94:3e:a0:3d:f3:
6a:99:5c:ed:57:66:87:54:b5:0e:53:89:69:93:94:
42:a2:ab:72:c8:0d:a5:b6:67:d4:e1:10:4e:3d:dd:
80:ad:54:b9:78:2e:4d:b2:44:d4:82:e0:35:c2:e7:
5f:7f:6a:ba:de:99:7d:22:d1:32:65:77:7b:0c:de:
03:b5:9c:83:0d:3a:7e:b4:c6:4b:0d:02:79:b9:ff:
c0:5f:ae:d8:57:ab:1e:4a:27:61:b8:4e:d2:5c:5f:
46:25:a2:2e:ca:4a:21:94:38:de:b4:c0:92:a0:28:
80:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D1:37:EA:F6:9E:B5:47:8C:27:8B:13:2C:F2:C9:BC:38:7F:6F:C7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/y9E36vaetUeMJ4sTLPLJvDh_b8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
81.29.153.0/24
Signature Algorithm: sha256WithRSAEncryption
85:c4:b0:c9:3a:84:53:35:98:8f:47:b0:15:09:49:64:2f:7b:
23:c2:a7:05:fe:5b:0f:97:4b:a0:94:dd:e7:84:56:cb:5c:ac:
55:71:b5:4f:6f:96:15:9e:7b:f0:eb:97:c0:c8:17:85:af:4d:
69:c8:59:85:74:7a:02:08:d7:01:4b:c5:81:6c:8c:e7:f1:e2:
50:42:b8:64:a8:bb:b4:fb:5e:0e:5f:dc:23:95:1e:4e:1e:84:
fe:79:fe:12:9b:9d:50:d6:da:bc:6f:94:57:4d:1f:47:a2:19:
a5:68:2a:60:b9:58:33:06:4a:35:c5:44:f5:35:63:cf:5d:e0:
24:03:ba:bb:02:38:fb:5e:0f:f9:76:a5:cd:d3:5a:88:00:f7:
f9:57:75:8d:83:8e:03:86:54:c2:3f:be:49:fc:24:4b:69:56:
3e:3f:79:14:21:45:77:8a:64:04:65:1d:9c:68:03:f9:67:94:
9f:78:f9:e4:d3:da:a1:34:8c:ec:e6:36:8e:cc:62:ad:d5:65:
a1:d5:e9:1b:47:0d:65:40:9d:85:ce:3a:2c:4a:99:46:26:3f:
89:2a:37:3c:13:02:73:a1:b1:ae:d3:28:87:1f:fc:60:00:52:
6a:b2:40:b6:ec:b4:b6:6f:01:e1:b1:56:77:ce:e8:c8:04:79:
1b:61:8f:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvVLRdU8zyrjccaa8z+/szMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwMTAxMjE1NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmQxMzdlYWY2OWViNTQ3OGMyNzhiMTMyY2YyYzliYzM4N2Y2ZmM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm49JZIoSLrh8n/684qRVgYX+jUs
IiFsxBflAS2u/5kbQCN7SA4X8Ia2uLnpu4Ned0ZqdWPyvVUwHxEF4RkQXuwl5cSC
3IprB4IMVImLYJBxwXzgatPyKHR2siJ5oQ7HdaL1SlQGhdeEzdOnBP4J8AHLYU9O
dS7rQj68bEvym22/sJCjLLQjmUsbf6ZusMTslD6gPfNqmVztV2aHVLUOU4lpk5RC
oqtyyA2ltmfU4RBOPd2ArVS5eC5NskTUguA1wudff2q63pl9ItEyZXd7DN4DtZyD
DTp+tMZLDQJ5uf/AX67YV6seSidhuE7SXF9GJaIuykohlDjetMCSoCiALQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMvRN+r2nrVHjCeLEyzyybw4f2/HMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEveTlFMzZ2YWV0VWVNSjRzVExQTEp2RGhfYjhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUEflAwQA
UR2ZMA0GCSqGSIb3DQEBCwUAA4IBAQCFxLDJOoRTNZiPR7AVCUlkL3sjwqcF/lsP
l0uglN3nhFbLXKxVcbVPb5YVnnvw65fAyBeFr01pyFmFdHoCCNcBS8WBbIzn8eJQ
QrhkqLu0+14OX9wjlR5OHoT+ef4Sm51Q1tq8b5RXTR9HohmlaCpguVgzBko1xUT1
NWPPXeAkA7q7Ajj7Xg/5dqXN01qIAPf5V3WNg44DhlTCP75J/CRLaVY+P3kUIUV3
imQEZR2caAP5Z5SfePnk09qhNIzs5jaOzGKt1WWh1ekbRw1lQJ2FzjosSplGJj+J
Kjc8EwJzobGu0yiHH/xgAFJqskC27LS2bwHhsVZ3zujIBHkbYY+/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:33 2023 by rpki-client on console-ams.rpki-client.org