Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fde2nAhFx-T79QZ0LFCl5hDJ1sA.roa
File: Fde2nAhFx-T79QZ0LFCl5hDJ1sA.roa (raw, json)
Hash identifier: jW+bOccOw0QEI4WmN6lfUcG4dqWcjeyxqrzcNrURtOQ=
Subject key identifier: 15:D7:B6:9C:08:45:C7:E4:FB:F5:06:74:2C:50:A5:E6:10:C9:D6:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE75D14BC16E414E0C3362E0D93F0
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fde2nAhFx-T79QZ0LFCl5hDJ1sA.roa
Signing time: Tue 02 Jan 2024 06:29:29 +0000
ROA not before: Tue 02 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48011
IP address blocks: 81.161.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 20:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e7:5d:14:bc:16:e4:14:e0:c3:36:2e:0d:93:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15d7b69c0845c7e4fbf506742c50a5e610c9d6c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:c6:2d:06:c3:fa:92:f2:2b:2b:09:57:28:
fe:6c:35:91:02:15:dd:4c:d1:a5:e6:c5:2d:f6:2d:
34:75:fa:64:4e:72:4d:16:2e:11:c7:9a:4d:53:3d:
56:38:ed:88:a9:3e:e1:18:34:9a:ec:f7:8a:75:e7:
3a:fe:01:42:30:93:05:f3:73:21:0f:8d:e6:4c:83:
52:a1:71:18:ec:d5:d4:c3:88:ef:ff:db:46:af:a9:
7e:a7:d0:ed:0b:20:ca:48:bb:d7:64:66:a2:d5:a5:
67:e9:9a:f0:10:3b:66:91:68:39:25:5c:3f:b7:8a:
29:7a:0d:e1:5f:3c:ff:31:a6:b4:0a:7a:48:53:a5:
e1:49:e9:65:42:ae:58:c3:bf:0d:cc:5b:f4:c7:2d:
8a:e5:9f:7f:ce:17:6f:c9:79:8d:93:8b:e6:d8:9d:
28:49:c0:8a:ec:79:cb:ee:e2:62:39:27:83:6f:0b:
24:51:79:c7:12:bc:99:cf:74:91:52:97:47:c8:0e:
35:44:4d:8d:42:35:56:78:2c:32:bd:27:3d:b3:2e:
59:45:a1:3a:b1:14:c5:54:11:dd:32:c2:6d:ce:de:
9b:76:94:07:6c:f6:28:0f:a1:79:dd:9d:e9:81:b4:
3b:4d:7a:42:50:8a:f0:18:74:ad:41:81:2a:48:a6:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D7:B6:9C:08:45:C7:E4:FB:F5:06:74:2C:50:A5:E6:10:C9:D6:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Fde2nAhFx-T79QZ0LFCl5hDJ1sA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
Signature Algorithm: sha256WithRSAEncryption
85:79:89:9b:66:1f:79:75:c9:15:5e:94:da:ca:1b:6e:b5:f4:
da:a2:22:3b:ad:f8:13:77:76:14:3f:85:4f:19:f3:af:75:79:
11:f1:af:84:57:0d:4c:a2:3a:13:db:9f:e0:49:f5:ac:c2:46:
cd:09:78:7d:9e:b5:bf:c2:de:72:bc:dd:b4:3d:27:b6:5b:11:
7b:0c:65:27:e3:6c:9c:93:c5:fa:15:10:d2:0d:3c:94:7f:8a:
a6:31:84:6b:df:80:ef:a4:2c:9e:57:ac:8e:29:9b:7b:ba:85:
96:b8:66:5b:c9:89:ed:7c:e5:a4:80:a2:c2:87:36:20:ee:5b:
83:47:9d:00:99:46:40:a9:90:2c:96:89:c2:7b:f9:37:00:a4:
84:fa:2d:82:52:12:e3:89:d5:6f:35:4b:f6:35:cf:7c:9b:51:
92:38:73:83:05:a2:da:3f:de:b4:47:13:21:b7:c8:4e:b0:24:
bc:bb:c8:1d:44:6f:d1:ba:f2:d6:6b:55:6a:00:1b:57:89:f6:
14:ad:ad:5f:c7:07:d1:f3:3e:bc:e3:32:42:ad:37:6d:b9:8c:
08:3c:2d:ed:fc:9e:1d:d6:bc:23:7d:05:8a:6f:4f:d6:46:d6:
8f:cb:a2:fb:97:b7:b3:54:0a:94:1e:5f:73:a1:e6:fc:aa:e2:
7a:3e:bb:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3OddFLwW5BTgwzYuDZPwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNWQ3YjY5YzA4NDVjN2U0ZmJmNTA2NzQyYzUwYTVlNjEwYzlkNmMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXzGLQbD+pLyKysJVyj+bDWRAhXd
TNGl5sUt9i00dfpkTnJNFi4Rx5pNUz1WOO2IqT7hGDSa7PeKdec6/gFCMJMF83Mh
D43mTINSoXEY7NXUw4jv/9tGr6l+p9DtCyDKSLvXZGai1aVn6ZrwEDtmkWg5JVw/
t4opeg3hXzz/Maa0CnpIU6XhSellQq5Yw78NzFv0xy2K5Z9/zhdvyXmNk4vm2J0o
ScCK7HnL7uJiOSeDbwskUXnHEryZz3SRUpdHyA41RE2NQjVWeCwyvSc9sy5ZRaE6
sRTFVBHdMsJtzt6bdpQHbPYoD6F53Z3pgbQ7TXpCUIrwGHStQYEqSKaaUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBXXtpwIRcfk+/UGdCxQpeYQydbAMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRmRlMm5BaEZ4LVQ3OVFaMExGQ2w1aERKMXNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaHsMA0G
CSqGSIb3DQEBCwUAA4IBAQCFeYmbZh95dckVXpTayhtutfTaoiI7rfgTd3YUP4VP
GfOvdXkR8a+EVw1MojoT25/gSfWswkbNCXh9nrW/wt5yvN20PSe2WxF7DGUn42yc
k8X6FRDSDTyUf4qmMYRr34DvpCyeV6yOKZt7uoWWuGZbyYntfOWkgKLChzYg7luD
R50AmUZAqZAslonCe/k3AKSE+i2CUhLjidVvNUv2Nc98m1GSOHODBaLaP960RxMh
t8hOsCS8u8gdRG/RuvLWa1VqABtXifYUra1fxwfR8z684zJCrTdtuYwIPC3t/J4d
1rwjfQWKb0/WRtaPy6L7l7ezVAqUHl9zoeb8quJ6Prtn
-----END CERTIFICATE-----
Generated at Sat Mar 2 00:04:36 2024 by rpki-client on console-ams.rpki-client.org