Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ox7l0XH-iNaxZZP2bS_jiU3fEjA.roa
File: ox7l0XH-iNaxZZP2bS_jiU3fEjA.roa (raw, json)
Hash identifier: r73i7xDrzkKGGSG/sZV7Oz/z90PCgGRrd8V5+xvyNLg=
Subject key identifier: A3:1E:E5:D1:71:FE:88:D6:B1:65:93:F6:6D:2F:E3:89:4D:DF:12:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCF955D388F8CB2C13D5A0A4EB4E61
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ox7l0XH-iNaxZZP2bS_jiU3fEjA.roa
Signing time: Tue 02 Jan 2024 06:29:34 +0000
ROA not before: Tue 02 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197715
IP address blocks: 81.161.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 10:31:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f9:55:d3:88:f8:cb:2c:13:d5:a0:a4:eb:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a31ee5d171fe88d6b16593f66d2fe3894ddf1230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:6c:d1:6b:1d:2d:f4:d6:1a:bb:18:6d:2f:
12:90:09:4d:05:3c:72:ff:5e:e2:d9:7e:da:b3:71:
2d:5d:3d:ea:0c:1a:f3:57:8c:4c:a4:04:36:f3:13:
dd:4b:e2:ea:6a:07:b0:ae:39:f4:4a:76:f6:a5:9b:
1d:a9:f2:a1:2c:25:0c:b8:7b:d5:ec:a7:6e:5d:3f:
8e:8a:f3:c2:03:9d:62:ac:1f:74:ce:17:bd:9e:0b:
d5:89:11:44:c4:f7:4f:06:17:73:cc:14:0f:da:ea:
1b:5c:b7:5b:12:d1:11:3c:72:ec:c0:30:54:17:cb:
d1:3d:aa:8f:ad:13:22:11:55:cb:d6:6c:b3:25:9e:
b2:03:d4:78:56:55:4b:99:64:45:f9:8c:ad:5d:12:
01:f6:f9:4e:39:50:83:ac:0a:cb:b8:0a:bd:76:91:
06:6b:d3:00:25:20:c1:3c:b1:96:e0:f2:c7:f2:11:
35:1c:34:18:77:2a:42:07:87:4e:43:6e:fe:0c:d1:
4d:5a:d3:35:e0:53:3d:27:a0:07:91:2c:5c:6d:81:
56:f9:39:6f:af:3e:0f:a1:2d:e9:77:26:f7:85:d9:
52:4e:2d:29:80:b1:cb:13:cf:42:53:a5:a7:84:0e:
6a:9d:ca:34:70:00:4f:07:5f:60:6a:e7:2d:0b:52:
99:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:E5:D1:71:FE:88:D6:B1:65:93:F6:6D:2F:E3:89:4D:DF:12:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ox7l0XH-iNaxZZP2bS_jiU3fEjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
Signature Algorithm: sha256WithRSAEncryption
85:2b:f9:10:66:dc:b0:a2:19:26:17:4d:ae:75:3c:6b:5e:8f:
f5:a8:99:51:c0:bd:ab:13:ab:53:99:b7:0f:08:f0:9e:14:7b:
df:f7:e7:c4:4e:63:7f:7d:5e:07:62:d3:0e:54:56:ee:21:c5:
1e:a9:5b:89:21:5b:ec:68:d4:ba:25:bc:7e:1b:6b:ea:4b:fe:
35:0e:7a:bf:94:63:fc:c1:91:26:5a:02:20:32:39:de:e6:92:
16:ec:1a:6b:2b:a5:21:36:8f:c0:e7:90:4a:fa:4b:c2:94:84:
67:91:78:37:07:19:10:a9:6b:96:86:bc:4c:e3:a5:f3:5a:ea:
56:9c:b4:38:ae:3f:cc:3f:be:30:95:93:58:b4:8c:dc:7d:5a:
80:fd:91:cc:8d:9b:54:8a:cd:e3:14:9e:0e:fa:f6:44:33:4b:
b4:6b:df:8e:17:db:34:31:61:2a:e6:f2:44:74:0a:61:19:1e:
b9:47:95:77:3e:6e:8a:ec:36:b3:44:c7:b1:f6:4e:10:4c:5c:
4b:64:c9:97:5e:ed:ab:1b:ef:10:46:f7:3c:a8:52:c4:00:0f:
7a:f5:39:0d:21:ff:23:f1:cf:34:38:43:4b:cc:c9:c4:c4:82:
8d:e7:78:89:48:82:22:89:69:a8:04:f3:f6:4a:34:e9:e1:ae:
24:54:e6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 18 13:16:15 2024 by rpki-client on console-ams.rpki-client.org