Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pGt8jRKij7yF_UYijVmNDx45EWE.roa
File: pGt8jRKij7yF_UYijVmNDx45EWE.roa (raw, json)
Hash identifier: 8cNa/BqKdplXiW5qVXQOAu+lCItAG/7jGvVFl5rX/qA=
Subject key identifier: A4:6B:7C:8D:12:A2:8F:BC:85:FD:46:22:8D:59:8D:0F:1E:39:11:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01856D81EDEFF17012DA2B3F10734DC3F1ED
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pGt8jRKij7yF_UYijVmNDx45EWE.roa
Signing time: Sun 01 Jan 2023 13:25:09 +0000
ROA not before: Sun 01 Jan 2023 13:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48011
IP address blocks: 81.161.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:ed:ef:f1:70:12:da:2b:3f:10:73:4d:c3:f1:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 1 13:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a46b7c8d12a28fbc85fd46228d598d0f1e391161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:46:a1:7b:5a:29:bf:31:f3:34:14:d0:9c:d8:
6b:a5:42:09:36:42:26:36:8d:59:3f:a0:78:76:8c:
e6:7d:a9:55:e4:a0:e9:9d:3f:7f:46:8a:0d:3a:8f:
74:6d:40:8f:fe:af:24:9b:85:54:08:56:66:b6:58:
3b:9b:4b:94:8f:a1:e1:d9:72:4c:10:39:5f:bb:85:
ff:1f:48:c8:8a:90:3f:54:41:d7:72:b7:2d:20:ef:
ff:2b:7c:01:42:29:0b:52:99:ff:98:18:31:2e:4d:
82:0b:bd:49:b1:31:7c:2e:53:a7:89:45:63:d2:cb:
88:de:01:68:0d:64:39:04:25:43:5f:3e:d2:80:a3:
b8:8a:b3:5a:cd:a1:08:92:97:34:04:ec:7a:2f:74:
57:fa:8f:3d:90:f7:4d:8e:a2:f1:48:8e:8a:1c:0d:
46:69:61:31:ea:dd:fd:d9:b5:7a:f3:fe:bc:66:00:
0d:3e:f4:fd:f1:4f:9b:67:c1:01:3b:ae:68:bc:a3:
9b:1b:24:2f:30:e4:09:25:31:42:60:6d:0d:bc:e9:
83:eb:d9:21:19:ba:ad:6a:47:69:4b:7f:2c:ba:63:
8b:ea:24:33:39:e1:d4:51:9b:f0:b8:7d:37:89:89:
12:f3:aa:96:3c:d3:b7:21:ed:93:bf:fe:43:80:13:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6B:7C:8D:12:A2:8F:BC:85:FD:46:22:8D:59:8D:0F:1E:39:11:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pGt8jRKij7yF_UYijVmNDx45EWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.236.0/24
Signature Algorithm: sha256WithRSAEncryption
07:32:7c:2a:6a:35:86:a1:78:46:90:84:29:d9:79:0e:0c:32:
e2:fe:2d:5b:1b:1e:5e:e4:cc:83:dd:36:56:51:80:80:20:c3:
44:a4:74:15:6b:4e:df:85:a7:25:44:a4:ac:fb:a5:e4:49:e9:
0b:00:c0:d1:00:14:41:e4:33:cc:27:d4:02:cb:da:96:f2:cc:
c6:2f:f0:b0:e6:65:cc:be:bd:5c:88:7d:23:a6:17:96:c6:e3:
23:89:26:d8:34:38:12:0e:21:e4:2c:b0:83:c0:a9:1e:7e:49:
76:4d:69:c4:bf:38:aa:96:97:4a:46:c0:3b:dc:7a:26:9d:79:
04:21:9d:83:87:29:43:3e:69:23:13:e8:79:70:18:98:24:7b:
53:ce:d9:e6:6d:df:af:b7:60:06:67:e8:54:db:2b:7c:59:bc:
3a:cf:87:aa:9f:07:d9:89:bb:9d:e5:d0:62:ea:b9:89:7c:97:
1d:85:0a:54:17:47:fa:9f:86:a1:06:e8:d3:84:c3:a5:38:60:
78:dc:54:76:89:21:26:97:31:02:40:66:27:68:c3:14:55:2f:
78:66:cb:e5:cf:c7:bc:7f:9b:95:74:3b:03:c5:e0:41:10:25:
dd:75:a0:4e:64:ab:b8:15:5f:76:a7:d8:c3:3e:22:ee:11:31:
be:66:7a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:42 2023 by rpki-client on console-ams.rpki-client.org