Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/yxjXKY0XJjsFBVTh-od8zdwyqVc.roa
File: yxjXKY0XJjsFBVTh-od8zdwyqVc.roa (raw, json)
Hash identifier: 4fKW3kyUkkJL93mYoiFpevnSbydtoJg7VudaxvWWqOQ=
Subject key identifier: CB:18:D7:29:8D:17:26:3B:05:05:54:E1:FA:87:7C:CD:DC:32:A9:57
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188FBFC030EE2FCDBBA9F1E86ED8A92263B
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/yxjXKY0XJjsFBVTh-od8zdwyqVc.roa
Signing time: Tue 27 Jun 2023 08:32:57 +0000
ROA not before: Tue 27 Jun 2023 08:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15731
IP address blocks: 80.71.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:fc:03:0e:e2:fc:db:ba:9f:1e:86:ed:8a:92:26:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 27 08:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb18d7298d17263b050554e1fa877ccddc32a957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8d:2a:49:5f:ba:08:8f:37:5f:95:dc:31:ff:
8c:40:b5:8a:a6:69:7c:a7:c8:41:24:af:29:d8:88:
95:e8:c6:72:c4:10:66:aa:06:41:12:dc:10:48:1e:
e8:7c:7b:97:4a:9b:34:2c:43:8b:5e:ea:d5:66:2d:
a7:71:6b:0c:07:99:fc:94:b9:c4:98:ca:1d:9e:d7:
b6:29:11:14:06:e6:cd:71:d3:ef:9d:bc:ad:1c:0e:
3b:14:67:fd:1e:0e:d6:98:ad:cd:ad:35:17:ec:c0:
e9:de:18:dc:d2:a1:0b:aa:db:93:41:64:24:7a:ba:
c3:24:f2:13:cd:85:64:f0:e9:e8:02:d1:71:e5:de:
3c:3e:29:90:ba:40:4e:0b:a5:87:ab:ea:88:10:0e:
f5:0b:73:54:5d:65:29:06:1c:38:52:f8:50:7e:58:
99:14:7e:e2:32:6b:3f:8b:82:56:10:c6:d2:d0:a5:
e3:f0:05:2b:b5:1d:85:18:f0:d0:a1:7e:f8:59:6b:
db:96:44:fa:99:55:6c:92:a6:6b:c3:b3:93:43:99:
42:d4:9f:bf:b3:8c:fe:10:c1:8b:66:ba:ef:f5:b3:
4a:3e:72:e5:99:0f:a5:d4:bd:ca:3d:e6:fb:91:9c:
c2:77:8b:83:7b:02:ad:aa:b5:0e:d9:69:33:75:56:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:18:D7:29:8D:17:26:3B:05:05:54:E1:FA:87:7C:CD:DC:32:A9:57
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/yxjXKY0XJjsFBVTh-od8zdwyqVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.229.0/24
Signature Algorithm: sha256WithRSAEncryption
71:13:c0:3b:40:c9:07:0f:02:06:aa:d0:9e:59:d1:1f:dd:9e:
04:f4:67:c3:fa:4d:9c:86:ba:56:82:89:d0:fc:72:f9:69:17:
79:8d:8f:c8:76:cc:e8:be:ea:c7:2f:96:be:72:92:e9:dc:2d:
4f:d6:50:6a:e2:38:8d:73:33:59:94:6c:17:23:27:1a:4a:bb:
d3:72:6c:c0:38:d0:50:e1:94:07:c0:b3:af:0f:d6:0c:fe:f5:
a3:55:71:af:1b:0b:45:39:f5:fd:d0:ad:3d:b0:ba:66:1d:42:
c3:74:6a:5b:f1:58:2a:a2:d5:d6:f8:df:8e:ad:e1:8b:3b:06:
07:dc:5b:74:84:8e:ec:04:30:f6:93:3a:7e:f4:ef:6a:00:ef:
2d:f5:fb:05:7d:08:9c:ca:3e:75:18:f3:e8:9e:a0:50:df:d8:
04:84:ad:79:b7:85:df:1c:dc:46:26:92:89:fd:03:55:fc:a3:
dd:a2:02:fc:9a:a4:76:38:46:24:22:64:ee:e9:97:e6:4c:5d:
4c:11:5f:c6:db:da:59:28:46:74:82:30:e8:4d:57:3b:08:ed:
dd:74:b7:25:f7:cc:11:7a:52:e1:50:91:23:4c:62:21:54:87:
70:9b:97:ad:2b:9b:87:88:68:b8:34:72:08:02:4f:f0:3a:6d:
0a:5b:d1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 26 14:07:50 2023 by rpki-client on console-ams.rpki-client.org