Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/o8DCeMYF18Lx3Gj7AZJKBy3h7IE.roa
File: o8DCeMYF18Lx3Gj7AZJKBy3h7IE.roa (raw, json)
Hash identifier: SWHY0KmliVmVNc2GpvEr2e4utQAUQoMTSfF02p/BkGo=
Subject key identifier: A3:C0:C2:78:C6:05:D7:C2:F1:DC:68:FB:01:92:4A:07:2D:E1:EC:81
Certificate issuer: /CN=a0a154441df9623eeb5a196138d21bef5824b441
Certificate serial: 018570707EA009A676691A09BF7DA5FE4A14
Authority key identifier: A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/o8DCeMYF18Lx3Gj7AZJKBy3h7IE.roa
Signing time: Mon 02 Jan 2023 03:04:58 +0000
ROA not before: Mon 02 Jan 2023 03:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34049
IP address blocks: 77.240.181.0/24 maxlen: 24
81.19.12.0/23 maxlen: 23
81.19.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:7e:a0:09:a6:76:69:1a:09:bf:7d:a5:fe:4a:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0a154441df9623eeb5a196138d21bef5824b441
Validity
Not Before: Jan 2 03:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3c0c278c605d7c2f1dc68fb01924a072de1ec81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:d1:65:9f:32:78:3e:a0:37:c1:51:e3:dd:
ba:ed:b2:a9:63:e1:6d:46:b9:c4:de:11:a7:75:fa:
20:3f:90:53:b3:ca:cf:ed:85:3b:16:46:a6:8a:db:
c4:02:1f:b3:1a:f4:56:1a:d2:16:f8:fe:06:fa:4d:
fe:a3:d3:6b:27:7a:63:d3:2b:1f:6c:79:55:71:97:
90:80:cc:ce:9a:91:82:66:36:9c:c3:dd:d3:e7:5d:
05:af:48:f0:4e:64:9e:1b:8d:ec:f1:a8:74:9f:cc:
82:40:3e:87:c9:90:6d:65:b9:1a:a8:3a:f8:1f:4b:
8d:e5:e8:6f:12:73:61:ba:e4:6b:44:ec:b1:33:6d:
b8:f5:d4:07:61:20:14:e1:7b:14:8c:8e:87:5f:13:
17:f0:23:36:32:c2:e0:ab:6d:9c:1b:0d:9b:19:1d:
7a:a6:1f:a1:9b:e6:74:62:4c:f4:cf:bd:11:4e:02:
ae:32:0b:1c:a6:8f:a4:7d:41:fd:b6:0a:4d:46:e4:
28:8e:dc:84:d5:7c:ed:8b:64:b8:df:b4:89:cf:ba:
85:c9:a5:07:00:e7:24:29:4b:30:d5:ff:65:ba:5a:
31:a0:fc:c0:a5:b7:85:db:5d:60:c1:0a:0d:88:6b:
d0:0b:a1:59:8c:79:2b:8f:e6:e8:20:b1:ca:e5:0c:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:C2:78:C6:05:D7:C2:F1:DC:68:FB:01:92:4A:07:2D:E1:EC:81
X509v3 Authority Key Identifier:
keyid:A0:A1:54:44:1D:F9:62:3E:EB:5A:19:61:38:D2:1B:EF:58:24:B4:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKFURB35Yj7rWhlhONIb71gktEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/o8DCeMYF18Lx3Gj7AZJKBy3h7IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/5b3d6d-e6f1-47ad-b52b-9d943671a8a3/1/oKFURB35Yj7rWhlhONIb71gktEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.240.181.0/24
81.19.12.0-81.19.14.255
Signature Algorithm: sha256WithRSAEncryption
72:8a:3c:46:bc:87:1d:b3:1e:b3:a7:2c:16:d5:32:76:ba:e7:
a8:b1:00:6a:19:23:18:ee:17:ee:f6:75:7d:75:b2:e7:a7:88:
09:c4:52:db:c7:0c:74:1a:b0:81:f2:28:4f:45:ef:da:84:ee:
08:b5:ca:cd:a4:f3:97:85:59:19:b2:fa:01:02:4b:85:f0:64:
d4:db:6f:e8:bb:3d:f8:a1:23:92:cf:b4:03:4f:c8:62:c8:b6:
0d:a6:9d:7f:c9:48:31:36:2b:76:34:47:48:d6:75:b5:c6:04:
b3:eb:a8:24:de:70:e6:9c:6f:d0:ec:b6:d6:a3:b0:82:cf:82:
15:a6:3e:1e:64:ee:be:e1:43:df:03:9e:a9:96:c3:c8:55:7c:
3f:7a:23:28:8e:1a:3a:4b:2a:8c:b5:15:8c:00:04:80:77:67:
dc:6a:92:eb:72:97:da:0e:f0:b7:30:a7:bf:49:20:82:32:22:
75:11:86:69:00:c9:ac:e4:3a:47:e3:7a:60:76:12:08:84:32:
66:88:77:e5:cc:e1:72:cf:9d:03:9c:74:90:d1:7f:01:e1:1e:
1b:a8:90:ee:34:4a:d7:43:2a:1a:d8:f1:20:3e:7f:23:76:43:
76:f6:b4:8d:0a:37:df:2e:80:22:65:95:61:5d:a6:1c:c5:e7:
af:d7:7e:bc
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:57 2024 by rpki-client on console-fra.rpki-client.org