Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EAVi7kBNclUFs8yF5Dm-_0GnEpM.roa
File: EAVi7kBNclUFs8yF5Dm-_0GnEpM.roa (raw, json)
Hash identifier: Aqx96Epq+2S8iP+t7oRDzEnSXAEAAocW0/BuXxiBfGM=
Subject key identifier: 10:05:62:EE:40:4D:72:55:05:B3:CC:85:E4:39:BE:FF:41:A7:12:93
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AF4A2000DCEA2AED40C99185A6E7F0AD1
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EAVi7kBNclUFs8yF5Dm-_0GnEpM.roa
Signing time: Tue 03 Oct 2023 08:22:51 +0000
ROA not before: Tue 03 Oct 2023 08:22:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 81.161.237.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:a2:00:0d:ce:a2:ae:d4:0c:99:18:5a:6e:7f:0a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 3 08:22:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=100562ee404d725505b3cc85e439beff41a71293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:24:61:4f:de:9c:2e:66:a0:c6:18:ca:23:eb:
e9:1e:e0:93:14:a1:fb:d3:ba:de:5a:de:e4:46:bf:
b4:47:b6:7a:5f:e7:93:42:f7:d5:09:15:64:7e:e4:
67:07:44:fb:61:08:11:de:13:1e:14:de:57:32:6d:
6d:35:13:7e:e9:9c:11:26:87:7a:97:46:22:75:d8:
c3:31:6a:67:38:91:06:9b:91:72:d9:51:f9:e4:7c:
63:91:2f:ef:56:5e:69:68:d0:c6:f9:6a:bd:c8:22:
87:bd:bb:48:ed:5d:e6:7e:e6:26:83:13:b8:68:19:
7c:ee:b2:27:e3:2d:3f:49:49:28:d0:2b:17:9d:cd:
97:61:6b:1a:f3:64:9e:6a:01:66:c9:78:b6:57:52:
4e:16:ee:30:d9:8a:d2:8c:7d:4b:69:1f:0c:85:e3:
84:3f:08:44:86:c2:b9:94:86:24:af:9d:88:0e:25:
3d:d0:85:be:49:f0:88:dc:ba:b0:a8:f7:37:a0:85:
59:07:49:e7:74:25:4a:58:f6:98:99:a4:40:2d:ba:
c6:4f:7e:e9:d5:38:51:a8:ec:ca:a9:8b:b7:40:0a:
e1:ad:44:66:17:25:06:64:27:7e:18:2f:5c:35:b6:
ed:20:63:75:2c:fd:61:07:b5:d9:20:56:87:b9:a1:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:05:62:EE:40:4D:72:55:05:B3:CC:85:E4:39:BE:FF:41:A7:12:93
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EAVi7kBNclUFs8yF5Dm-_0GnEpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.237.0/24
93.123.81.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:da:94:2e:4d:75:43:c0:24:6d:05:00:26:cb:7d:f7:77:c1:
ea:6a:83:8a:03:ff:69:48:c3:15:c5:ac:8d:57:b8:28:c3:0e:
5b:41:e5:8f:dc:c0:2b:06:e4:8b:e5:d3:d0:94:c8:ae:85:63:
77:62:b2:49:ff:1d:6b:b0:f4:50:92:8c:e0:f5:08:4f:6a:8e:
09:72:b8:45:51:6e:29:56:17:a7:99:ac:1c:c8:4b:ec:cf:b2:
5b:bc:05:19:4d:08:6c:1a:2e:a1:6d:f9:b0:16:0c:f5:01:2f:
32:61:b2:97:11:ba:40:b7:47:e4:c8:26:db:bb:3f:3e:c1:21:
1f:83:02:35:4b:7f:ba:39:74:50:80:db:94:bc:41:99:da:72:
9b:27:69:2b:91:7a:29:bd:eb:ae:12:62:e0:f1:0a:ce:3a:33:
c0:a4:9d:9f:b0:67:a9:d0:4b:6f:73:38:18:f6:97:3d:5c:06:
31:61:4b:d6:79:01:da:ba:cc:be:6c:55:9c:0e:f3:92:c1:cf:
59:fe:12:d6:55:3d:a5:7f:43:4c:d4:bf:8d:4d:51:c6:c9:89:
79:d2:19:bb:d5:bc:5a:fa:1c:97:da:84:bb:98:74:d9:28:1c:
46:09:80:26:e3:11:cf:44:cf:c4:ad:ba:ef:31:58:fc:7b:5c:
ae:f5:8c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:10 2024 by rpki-client on console-ams.rpki-client.org