Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/zDmZmzRH7qN7lGqfoV-N-y0J2Kc.roa
File: zDmZmzRH7qN7lGqfoV-N-y0J2Kc.roa (raw, json)
Hash identifier: GmLNIv9YxCFVwW5Xs+R8qfESPWojeb/O9Et/HNwYpZI=
Subject key identifier: CC:39:99:9B:34:47:EE:A3:7B:94:6A:9F:A1:5F:8D:FB:2D:09:D8:A7
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018726CFAB18846211DD0095FB52D1328028
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/zDmZmzRH7qN7lGqfoV-N-y0J2Kc.roa
Signing time: Tue 28 Mar 2023 06:02:36 +0000
ROA not before: Tue 28 Mar 2023 06:02:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 81.29.158.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:cf:ab:18:84:62:11:dd:00:95:fb:52:d1:32:80:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Mar 28 06:02:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc39999b3447eea37b946a9fa15f8dfb2d09d8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3e:03:de:f6:0f:35:cb:be:d2:aa:81:f5:2d:
19:31:b3:7f:00:03:d8:58:7b:cc:9e:a8:0a:3e:dd:
a7:ad:d6:66:0f:1b:b1:8d:70:a0:f6:67:87:68:56:
7a:96:b9:37:0a:df:22:02:f7:59:f8:48:41:64:17:
52:ff:08:db:b5:c2:8f:6f:78:ad:7d:b2:26:76:16:
76:89:83:d9:a4:47:a7:b6:49:28:c7:48:bd:a9:c6:
29:78:80:ff:82:93:ef:93:b1:eb:53:27:20:ac:5b:
dd:07:d5:7b:5e:00:ce:63:96:b6:f2:7f:b6:d0:c5:
0a:b0:53:cb:d4:e6:02:f1:59:cc:6b:32:01:8c:3d:
d7:0e:fa:05:57:80:14:8f:3d:5a:bf:42:a7:9f:5f:
cc:57:ca:20:87:06:2b:05:9d:9f:ad:8b:7a:49:1f:
e2:7d:bc:dc:6a:77:ae:43:c1:8d:b6:f2:20:52:99:
cb:b7:19:08:85:56:6b:c0:f6:68:2f:c1:25:40:80:
03:c3:dd:16:cb:d5:ea:ed:71:16:c1:54:ef:49:b1:
b0:89:84:1b:a9:8b:af:f5:bb:b0:18:13:2f:a4:37:
1a:f2:04:1e:5c:04:e9:48:8e:f0:aa:97:32:28:0e:
b4:25:15:75:af:9b:1e:91:ec:7a:49:0f:be:96:31:
6c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:39:99:9B:34:47:EE:A3:7B:94:6A:9F:A1:5F:8D:FB:2D:09:D8:A7
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/zDmZmzRH7qN7lGqfoV-N-y0J2Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.158.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4d:72:5c:8c:d5:36:d4:45:b6:6b:b7:f5:77:6f:56:49:12:
e8:ed:11:18:95:3a:29:83:a1:6f:67:ce:8e:8b:1a:74:12:92:
70:12:11:a3:80:91:2e:cc:cd:a1:2b:3e:fd:bb:ab:1c:70:7b:
4b:1d:03:f7:2e:a4:d7:56:6c:c6:84:46:1f:94:69:2b:01:94:
43:d9:7a:8b:91:90:bb:b6:c0:9f:f3:ae:c6:ca:27:be:f5:ff:
a7:ca:a3:f8:b7:95:59:78:bc:87:24:90:6e:a7:e7:01:79:07:
d5:97:65:8e:92:44:c6:fd:38:77:e7:36:95:43:bc:0f:fa:4a:
03:80:7c:76:1e:5e:41:40:db:3e:d5:cd:9c:e8:8b:6c:66:fd:
58:cb:0f:2a:b1:aa:24:dd:41:bc:6a:68:5a:28:9f:f6:bf:4c:
7d:d3:7d:57:b3:bf:b5:23:e6:d9:39:32:7b:7d:71:b7:86:ae:
24:ca:36:5c:fd:7b:c9:e0:01:ed:7f:d7:77:86:4b:c5:e5:d4:
2b:63:73:3b:ba:c5:e6:21:1e:63:c7:00:28:08:ee:ea:7e:ec:
23:ad:40:85:d8:ee:61:35:a6:06:27:5f:18:fb:15:49:99:b6:
39:01:fb:61:7e:55:db:c3:63:43:5b:1c:f1:d0:68:e0:ae:a5:
de:48:ef:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:56 2023 by rpki-client on console-fra.rpki-client.org