Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_sLEyaD554Rk2K5OO9gt85qiHys.roa
File: _sLEyaD554Rk2K5OO9gt85qiHys.roa (raw, json)
Hash identifier: U6uNcjtWNI5iJluB2Mr1Un6CQN8aXOCdrg+PfbzEfY8=
Subject key identifier: FE:C2:C4:C9:A0:F9:E7:84:64:D8:AE:4E:3B:D8:2D:F3:9A:A2:1F:2B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01898852B0C8C1CFF0DD1124F1A62822E8AD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_sLEyaD554Rk2K5OO9gt85qiHys.roa
Signing time: Mon 24 Jul 2023 14:34:27 +0000
ROA not before: Mon 24 Jul 2023 14:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197625
IP address blocks: 81.161.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:88:52:b0:c8:c1:cf:f0:dd:11:24:f1:a6:28:22:e8:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 24 14:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fec2c4c9a0f9e78464d8ae4e3bd82df39aa21f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0b:6c:75:96:13:95:b3:0f:0e:b7:84:8e:70:
f0:6d:15:c6:c2:74:68:d7:b1:b2:fc:af:5c:bd:4a:
5e:bb:22:68:16:3d:79:48:34:f8:0e:4d:6f:4c:9f:
73:53:03:27:0b:5a:1e:b1:d3:58:f3:5a:b0:4f:a4:
34:77:e4:33:fb:0e:de:45:56:c4:c7:88:88:3e:b2:
3c:48:66:a0:51:82:de:ee:85:53:b4:f3:7b:e7:f0:
79:fe:20:1b:4c:41:ed:c7:36:4a:32:76:58:50:92:
ac:e1:d7:64:0d:9e:3e:87:4c:7f:0f:cb:10:06:af:
d4:20:c0:98:4e:6e:e1:21:5f:44:52:e6:bd:6b:3f:
85:5e:f6:11:ca:69:dd:18:89:19:d1:63:e9:ce:80:
84:17:25:9e:4c:a9:09:7e:95:4c:33:d3:7b:10:34:
db:f7:6c:02:0b:07:e3:fd:2b:02:4c:a0:78:82:8b:
59:89:fd:7b:6b:e7:42:a8:16:f9:3c:da:56:65:cf:
36:0b:c0:88:07:d6:56:17:05:03:7c:31:0f:7c:13:
e9:ef:06:63:11:00:22:6d:a1:4b:04:ba:03:05:05:
b0:49:aa:c3:60:cd:ba:d4:44:bb:59:9c:de:07:f4:
7b:1c:83:1f:6e:12:25:a1:ea:36:fa:02:8e:8b:95:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C2:C4:C9:A0:F9:E7:84:64:D8:AE:4E:3B:D8:2D:F3:9A:A2:1F:2B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_sLEyaD554Rk2K5OO9gt85qiHys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.231.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d2:60:8b:3a:ea:48:c0:95:9b:36:75:22:f3:56:66:4c:36:
52:e7:fe:1f:ea:0f:3a:e1:a1:0a:0f:1d:a3:59:9d:16:5b:a3:
60:2f:00:75:1f:fd:e6:61:6a:d3:b3:c6:25:0b:e4:5a:89:04:
12:cc:ff:46:c7:26:dd:38:15:36:5f:f7:4d:cd:20:1c:e4:be:
55:36:b7:77:0d:bb:29:42:d7:70:dd:98:62:a0:26:7a:e1:2d:
a0:0d:53:d8:c6:06:67:84:95:95:a1:2a:72:f2:b2:3d:2c:33:
dd:d4:63:e3:2e:6c:79:89:63:cd:50:70:86:da:aa:41:62:11:
ef:d7:83:62:1e:7a:39:7f:a1:df:38:73:0b:b6:85:4d:19:a7:
09:89:12:26:4d:7c:36:d4:0b:0c:84:5d:e8:d2:4f:f4:9d:ee:
b4:99:e9:0e:e5:d9:6b:d6:de:a4:ae:c0:ac:c3:83:27:89:1f:
f3:d2:01:c4:e2:0f:b3:4e:e2:79:88:d0:47:4d:17:c2:2f:2d:
75:20:c0:cc:16:9c:b3:93:a0:79:5f:d7:f8:20:d9:a7:0d:3b:
13:bc:fe:36:50:df:33:c9:07:f1:2a:93:ae:41:48:f1:45:55:
cd:dc:df:ac:57:da:77:04:42:b2:aa:25:f3:d0:66:f8:3a:86:
a0:8d:2b:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:12 2024 by rpki-client on console-ams.rpki-client.org