Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/dsosKzKTFH3R1FLfi7nakkYHoSc.roa
File: dsosKzKTFH3R1FLfi7nakkYHoSc.roa (raw, json)
Hash identifier: CMz4GpT4cGWgCKMw8i5pgqSro0RQ/AkOKn1B3ZPj0Dc=
Subject key identifier: 76:CA:2C:2B:32:93:14:7D:D1:D4:52:DF:8B:B9:DA:92:46:07:A1:27
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB83AD9951E347DF8A6A1AE1278EEA2
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/dsosKzKTFH3R1FLfi7nakkYHoSc.roa
Signing time: Sun 01 Jan 2023 09:44:51 +0000
ROA not before: Sun 01 Jan 2023 09:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10031
IP address blocks: 81.52.240.0/22 maxlen: 24
81.52.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3a:d9:95:1e:34:7d:f8:a6:a1:ae:12:78:ee:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ca2c2b3293147dd1d452df8bb9da924607a127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:db:66:ea:77:09:2f:28:fb:3c:a7:fd:35:
40:f8:27:0a:a4:0d:42:99:44:40:2e:56:d3:87:84:
ee:ac:2d:68:75:0a:3a:7b:11:4b:09:a1:4f:55:d4:
e9:24:89:55:97:fb:15:c1:9f:d2:c6:25:c5:84:9d:
e0:9b:80:58:86:e8:1f:bb:4d:4a:35:92:29:d0:13:
61:c7:68:bc:bc:b1:2d:4b:44:ce:67:c8:03:bf:68:
a1:08:20:8a:36:75:a2:21:73:d8:ec:0a:93:7a:41:
53:b3:02:bb:f0:78:61:09:ef:81:5f:00:eb:da:ce:
69:6b:b9:61:49:a6:aa:95:bd:4d:af:5d:eb:f4:d3:
75:7b:77:84:e8:a9:d3:c5:ba:a9:2b:28:e9:06:2d:
c2:67:a8:d1:14:db:39:87:e7:41:ad:35:03:77:36:
64:02:67:28:c5:ae:85:17:de:15:1c:83:2e:df:55:
82:34:5d:85:0b:10:a3:21:b8:0c:63:49:b9:da:87:
c8:d6:8f:77:3a:f1:68:34:27:2a:e2:8a:73:a1:0a:
5b:05:81:af:9a:09:e2:b8:61:ae:3f:76:3d:88:ec:
21:89:ed:58:8b:bf:18:ab:d7:db:fd:b5:5c:c2:4e:
0e:ec:f8:13:f7:08:75:e6:c1:77:09:06:26:04:ca:
7f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:2C:2B:32:93:14:7D:D1:D4:52:DF:8B:B9:DA:92:46:07:A1:27
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/dsosKzKTFH3R1FLfi7nakkYHoSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.52.240.0/21
Signature Algorithm: sha256WithRSAEncryption
57:13:35:9e:9c:b6:9a:0b:05:3e:37:55:59:37:60:0e:a6:f9:
6b:38:bd:2b:cc:c2:c6:c5:8c:77:0a:eb:f2:72:45:0c:8c:9a:
7e:08:20:ff:43:17:ec:d5:12:e0:a3:28:8b:83:ba:2d:fc:be:
ac:ad:b4:14:59:ea:a6:f1:7d:d8:62:3e:24:c6:a2:86:6a:21:
fa:f5:79:fd:dd:a7:ed:95:e7:5e:1c:74:2c:b6:3b:19:ee:2f:
23:76:c7:0c:04:5a:b8:90:f2:ea:ff:0b:34:f6:0e:bb:99:af:
e8:da:f4:44:3d:29:a4:90:73:69:55:81:81:d5:52:95:34:c9:
8c:81:24:15:d4:6f:ff:e9:f4:bf:26:a3:fb:76:4f:ea:9f:05:
89:0a:0f:cd:09:a9:cf:df:44:75:de:fe:6d:4b:8d:6b:e6:3b:
5f:a0:b3:af:20:06:0e:43:d3:5f:4f:4e:be:66:2c:e5:24:23:
92:40:d8:6f:27:2c:c5:84:cd:c0:30:98:0a:c3:71:8b:4c:17:
ba:82:e3:03:9a:c1:79:8e:d2:e7:60:cb:30:bc:dd:c5:51:42:
05:b8:ae:1c:d4:d6:b2:2d:0d:37:08:b6:85:ca:dc:0d:16:d3:
d0:04:d9:7d:a5:12:af:d5:8f:fc:13:08:fb:b1:83:f0:38:11:
15:ea:9d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:51 2024 by rpki-client on console-fra.rpki-client.org