Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/49zz6sLtvmlWigWxYnBZgIO563c.roa
File: 49zz6sLtvmlWigWxYnBZgIO563c.roa (raw, json)
Hash identifier: W9oW4nIunmLs1jPdofiND6U4S7IcVxbAtSPW2VbWPVU=
Subject key identifier: E3:DC:F3:EA:C2:ED:BE:69:56:8A:05:B1:62:70:59:80:83:B9:EB:77
Certificate issuer: /CN=080369a358961f7284fbd591e927737cdb05c35d
Certificate serial: 0188BAB7BBABBAE42B5C50CE2D8512A20580
Authority key identifier: 08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/49zz6sLtvmlWigWxYnBZgIO563c.roa
Signing time: Wed 14 Jun 2023 16:23:03 +0000
ROA not before: Wed 14 Jun 2023 16:23:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209190
IP address blocks: 81.92.128.0/20 maxlen: 20
81.92.128.0/21 maxlen: 21
81.92.136.0/21 maxlen: 21
81.92.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 10:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ba:b7:bb:ab:ba:e4:2b:5c:50:ce:2d:85:12:a2:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080369a358961f7284fbd591e927737cdb05c35d
Validity
Not Before: Jun 14 16:23:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3dcf3eac2edbe69568a05b16270598083b9eb77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4e:8e:c4:76:27:21:bf:b1:27:b6:26:73:c9:
0f:c4:cb:40:6d:6c:95:92:49:e1:5e:51:84:54:43:
f6:f5:64:eb:5b:a8:74:ef:60:8c:b7:bb:ae:ca:1c:
0c:d4:71:8c:c9:0c:80:89:4e:da:db:ed:a4:ef:4a:
03:c7:e1:72:b6:0e:aa:b3:fe:aa:71:3b:09:62:c2:
6b:7e:c5:cb:b8:1b:9c:c2:95:a6:56:d6:a4:5f:8f:
2a:3e:59:7f:5b:25:26:78:77:45:1c:fd:d6:3c:d8:
13:bd:36:7a:f0:a1:10:5a:c4:43:cc:22:c8:42:cb:
b1:51:3e:79:ca:94:15:e6:db:23:4d:ec:9c:77:de:
45:42:e1:a7:ed:30:ae:a2:b7:f2:58:9c:3a:3e:33:
3a:70:9c:b8:f3:3f:e7:af:63:45:c4:3f:1d:f0:a0:
8c:67:36:56:a9:51:40:f3:f5:2a:f3:1e:ff:ea:7f:
46:1e:a3:91:2d:a0:b4:97:e7:71:81:ea:ef:84:95:
32:e2:5e:c4:21:f7:ed:50:a6:b5:78:06:d3:26:a0:
6b:5b:0a:e1:88:67:13:77:ee:c5:aa:54:87:b0:2c:
8b:17:86:78:61:a4:ac:69:ce:90:a0:9d:08:e1:bf:
99:e0:40:5d:6b:76:eb:1c:b9:f7:9c:13:8d:32:2a:
e4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DC:F3:EA:C2:ED:BE:69:56:8A:05:B1:62:70:59:80:83:B9:EB:77
X509v3 Authority Key Identifier:
keyid:08:03:69:A3:58:96:1F:72:84:FB:D5:91:E9:27:73:7C:DB:05:C3:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CANpo1iWH3KE-9WR6SdzfNsFw10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/49zz6sLtvmlWigWxYnBZgIO563c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01aac3-bce9-4d7e-a5fc-3f1b16c6cd63/1/CANpo1iWH3KE-9WR6SdzfNsFw10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.92.128.0/20
Signature Algorithm: sha256WithRSAEncryption
64:45:2d:5e:c7:98:c4:59:5d:48:3f:ef:95:78:77:34:0f:c2:
a7:20:9b:be:40:e3:d0:36:c8:d7:4f:0e:98:dc:ec:03:2a:bb:
99:08:55:38:63:ef:76:40:2d:62:1d:c9:3f:d2:d1:12:9d:4a:
bd:71:44:74:bb:ef:88:04:42:64:71:0d:b3:04:17:98:79:d6:
7b:6e:4e:16:e4:0e:1f:d9:98:6a:24:4d:7b:24:d6:6b:a7:5e:
10:6a:ef:4b:92:c5:3d:1c:89:12:01:5f:11:8e:58:6b:ed:1a:
fc:8c:86:29:c7:b0:29:15:65:0e:45:be:0b:8b:57:aa:6b:93:
cf:8a:02:9c:1e:c8:2e:d4:ac:f2:0b:11:3e:b0:ab:23:ee:23:
d9:da:65:2c:22:ed:1f:30:ef:ae:08:7f:23:e0:9c:1c:6d:60:
f1:ad:ed:8e:28:e7:69:b3:e4:b2:ba:1e:80:82:e1:8d:4c:50:
6a:a8:b2:fe:65:80:78:54:8a:e2:70:60:36:37:08:ab:97:27:
a6:b6:34:b1:d6:c9:5d:c5:6c:a4:ef:f6:8f:70:29:60:25:a4:
63:ac:30:08:fa:e7:ed:e7:1b:99:eb:05:36:20:ef:d2:42:d7:
c8:10:7a:0c:58:9d:53:51:89:cd:e7:09:ca:b7:90:38:75:9a:
53:5c:b4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:01 2024 by rpki-client on console-ams.rpki-client.org