Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S4y-h_snjAbGwmEacrF9l3DIrhU.roa
File: S4y-h_snjAbGwmEacrF9l3DIrhU.roa (raw, json)
Hash identifier: P8VFOlFGkwW94h17PFGF52SU1mzZO5YrlzFi0elQlbs=
Subject key identifier: 4B:8C:BE:87:FB:27:8C:06:C6:C2:61:1A:72:B1:7D:97:70:C8:AE:15
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018DA7D52CB1F776BB0B4D1B519026C00F96
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S4y-h_snjAbGwmEacrF9l3DIrhU.roa
Signing time: Wed 14 Feb 2024 13:36:22 +0000
ROA not before: Wed 14 Feb 2024 13:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 81.161.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 11:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:d5:2c:b1:f7:76:bb:0b:4d:1b:51:90:26:c0:0f:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 14 13:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b8cbe87fb278c06c6c2611a72b17d9770c8ae15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c7:e3:ce:2b:34:de:7f:fa:a5:77:01:06:fe:
3e:f5:2a:c9:fa:44:05:94:15:50:7f:8a:3d:75:e0:
28:e9:57:a4:8f:d5:a5:01:c7:aa:a1:cc:14:61:af:
b8:87:f9:4f:de:b7:a5:ca:f5:1c:70:19:f8:c8:45:
31:60:ac:4d:24:40:00:64:fb:5d:d6:8c:2d:61:ba:
b9:c3:75:c4:0b:39:83:92:4e:b2:23:87:c9:9a:c5:
01:47:83:c1:c3:70:f7:62:c0:2d:61:99:e8:f2:ee:
75:68:43:11:ab:4a:62:fa:78:3f:5b:a0:1f:f1:96:
56:6b:6c:5d:30:12:66:19:ae:c1:22:de:61:b7:9d:
b3:55:9c:46:19:d8:65:e5:92:d4:56:66:3e:6c:3d:
54:4d:13:70:5e:cd:6f:a8:a1:34:87:f4:af:28:ba:
98:01:4e:1b:5e:5e:35:a4:99:42:f8:55:c1:d2:e7:
78:8b:23:5e:55:39:ea:53:2d:44:94:ea:51:69:7d:
1d:3b:db:d4:5d:48:ce:d4:ad:1e:c4:f4:05:c8:b9:
52:7b:86:48:4b:cd:f5:1b:a0:b2:0d:85:91:44:31:
27:eb:58:4f:32:4c:79:af:4f:31:08:ed:fb:b0:3d:
e2:8a:e4:e9:46:ae:50:b9:d8:d3:d3:05:d8:59:e2:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:BE:87:FB:27:8C:06:C6:C2:61:1A:72:B1:7D:97:70:C8:AE:15
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/S4y-h_snjAbGwmEacrF9l3DIrhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.230.0/24
Signature Algorithm: sha256WithRSAEncryption
59:99:8c:c7:20:8e:2e:e1:38:17:7b:87:86:01:d4:57:bc:c7:
d9:a4:cc:b4:e3:0b:42:5a:db:a1:b7:f3:b5:9d:ba:0f:f1:3d:
36:69:c0:b1:b8:fd:33:ad:90:17:59:f0:5a:20:ac:64:4f:ef:
cb:16:e5:05:0c:f0:db:a1:69:1b:17:56:e5:55:0a:df:0f:16:
a0:d5:1e:84:44:63:9c:9c:d8:ba:74:10:d6:af:fc:22:10:08:
4d:5d:0a:d1:92:32:07:a6:e5:0b:17:19:ac:2f:3b:02:0e:1a:
8e:13:fa:9b:d4:e4:76:85:6b:95:d6:18:7c:7a:61:f9:27:f9:
09:8b:b1:49:f1:65:b7:3c:5a:8d:f4:85:89:3d:b5:3e:87:2d:
3c:14:15:87:6d:fb:73:1c:69:1f:f7:e7:ce:ed:14:b9:14:6f:
3f:78:38:d2:11:61:a5:3e:ac:4b:81:97:f5:49:a4:26:63:a3:
c7:07:56:2a:41:eb:3c:9f:6c:b8:d9:88:9a:0f:4d:d7:f5:19:
7c:c9:36:1f:3a:c6:f8:3b:12:01:08:fe:b0:d7:cf:f7:1e:5c:
a5:95:c6:e6:e6:37:88:65:fd:2f:7a:63:c3:87:e3:c4:51:14:
f6:40:00:83:08:02:de:2d:29:e9:7b:13:76:d0:75:51:76:c8:
19:f1:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 14:06:33 2024 by rpki-client on console-ams.rpki-client.org