Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CUMRyCX1gkCK3ZDNnvQo2VOkXoU.roa
File: CUMRyCX1gkCK3ZDNnvQo2VOkXoU.roa (raw, json)
Hash identifier: 8dniA017HZPja1pyqk5APxjaCJ6j9dUzfOpK6IWjDTY=
Subject key identifier: 09:43:11:C8:25:F5:82:40:8A:DD:90:CD:9E:F4:28:D9:53:A4:5E:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D821864343465AB27851B69950A7121
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CUMRyCX1gkCK3ZDNnvQo2VOkXoU.roa
Signing time: Sun 01 Jan 2023 13:25:20 +0000
ROA not before: Sun 01 Jan 2023 13:25:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400031
IP address blocks: 81.31.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:82:18:64:34:34:65:ab:27:85:1b:69:95:0a:71:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=094311c825f582408add90cd9ef428d953a45e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:29:16:9a:66:68:ba:d7:e1:35:13:d5:7e:
7c:6d:1b:b4:29:fe:90:6b:2d:94:eb:2c:f8:42:b4:
d4:39:fc:d5:dc:74:b6:b2:1a:5b:67:6d:6b:7e:98:
2d:f6:95:cf:6f:4a:8d:8c:9b:5f:14:6a:11:07:5a:
33:f2:ba:24:d3:aa:5e:34:00:7c:ab:06:22:bb:e1:
d4:c4:e3:84:af:0e:b9:c9:d0:59:10:bf:ad:b6:71:
e1:f0:db:83:7d:0f:6d:bb:76:76:46:69:b6:a8:9a:
6a:32:22:ab:05:a8:8f:19:5a:8f:ba:eb:a4:e8:ef:
d8:c7:ac:8e:32:7d:80:42:69:29:97:5e:db:db:e1:
9a:2d:ec:75:52:04:f2:6d:b7:15:ae:aa:60:9c:14:
e7:7e:d9:6c:76:30:f7:e9:71:4a:08:52:a9:60:8f:
8e:22:e2:64:0f:fb:5f:78:75:27:1b:c6:39:b8:bb:
fe:6a:65:42:bd:a0:1d:59:39:44:3a:e3:7d:56:3a:
74:92:47:d6:00:8d:cb:ca:0d:08:a9:7c:69:52:a3:
78:1c:27:b2:f5:b0:df:09:72:78:a5:5e:18:56:60:
63:b0:24:25:60:ea:07:c6:5b:11:e7:6b:00:ee:12:
2b:2a:87:7e:7d:cf:aa:d2:ad:84:0e:cd:8c:9d:99:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:43:11:C8:25:F5:82:40:8A:DD:90:CD:9E:F4:28:D9:53:A4:5E:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/CUMRyCX1gkCK3ZDNnvQo2VOkXoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.192.0/22
Signature Algorithm: sha256WithRSAEncryption
56:33:5d:f8:dc:a2:ba:5b:35:72:6f:8d:34:05:ef:49:47:e2:
9f:e4:a3:b2:ad:45:22:62:4e:dc:0e:84:f7:a0:24:46:ae:97:
ba:4c:61:64:77:bb:03:a1:25:c9:1c:3f:e0:e4:bf:2a:a3:7e:
c9:d6:88:96:4f:67:07:ad:e4:f4:dd:01:9e:6b:41:d5:a7:33:
91:34:78:11:28:61:ac:fe:b1:70:91:a7:03:4c:24:0c:cf:41:
ea:30:cf:c9:90:df:91:97:bc:58:e9:98:a1:74:ee:83:f2:e9:
4b:56:a3:d3:ef:91:ea:bc:3e:41:b6:f9:5c:85:cf:41:ca:64:
df:09:03:07:b3:d6:a9:d7:34:81:da:cd:9b:f5:b1:54:87:a4:
44:ec:4b:25:41:fe:b1:c0:47:ce:74:f8:b9:bf:45:36:5a:73:
df:48:dc:33:5a:ce:ec:b6:45:44:6c:8d:a7:ea:24:58:83:d6:
f5:f5:94:90:44:c4:43:5f:3e:dd:f4:89:ae:19:71:2d:ea:4e:
cd:9f:b3:5f:28:0c:e6:8d:49:73:f2:dc:63:97:f3:ea:e6:fc:
a7:d7:e8:59:b0:cb:b7:d0:c7:c2:ac:7a:d2:d1:27:59:97:a0:
e1:ab:01:a8:a3:b6:f2:cd:f3:e0:d1:88:96:5a:93:7a:05:58:
5a:fa:b5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:27 2024 by rpki-client on console-ams.rpki-client.org