Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/OInPa5J8mK0edcSof6hnexHvyqQ.roa
File: OInPa5J8mK0edcSof6hnexHvyqQ.roa (raw, json)
Hash identifier: W4H4tFkuo6K+mm0dj47uGWycuim1QSNxVhzz4liMlIo=
Subject key identifier: 38:89:CF:6B:92:7C:98:AD:1E:75:C4:A8:7F:A8:67:7B:11:EF:CA:A4
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 01856E8B5A26D7F138FDFE304EFABB89447F
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/OInPa5J8mK0edcSof6hnexHvyqQ.roa
Signing time: Sun 01 Jan 2023 18:15:04 +0000
ROA not before: Sun 01 Jan 2023 18:15:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41489
IP address blocks: 81.187.42.0/24 maxlen: 24
81.187.96.0/20 maxlen: 20
81.187.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 14:34:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:5a:26:d7:f1:38:fd:fe:30:4e:fa:bb:89:44:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Jan 1 18:15:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3889cf6b927c98ad1e75c4a87fa8677b11efcaa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cd:2e:8e:46:61:5c:c6:80:1c:7f:d8:ba:71:
2d:63:d4:2a:e5:d6:83:b5:a8:61:84:99:94:87:53:
35:9e:de:bc:78:51:a4:7e:3d:59:e8:c5:23:7b:44:
3b:b9:be:43:49:12:01:ea:e9:bd:5c:e6:2b:c9:5a:
e7:21:97:d3:44:48:3c:34:b9:fa:ea:19:a5:b4:0f:
0a:39:8b:65:05:f3:0f:98:11:0f:4a:4f:4b:27:93:
52:15:95:0f:08:4c:53:38:ac:df:48:06:be:7d:28:
45:69:35:34:a0:89:13:6a:de:8a:7e:55:d2:56:84:
51:8a:6f:08:99:86:82:c4:f9:b9:bd:fc:f8:56:90:
31:f2:77:98:14:28:3f:2c:96:82:0b:6f:bc:2d:67:
13:c4:2c:99:cc:40:03:f7:c3:07:5b:fb:d2:22:7b:
8c:e9:d4:da:4a:80:04:bf:bf:21:87:cb:b3:b2:1c:
cb:13:81:52:38:9c:99:ff:94:db:0b:41:ed:9f:b8:
f8:f2:72:ee:85:12:68:07:83:01:9f:c9:64:e3:66:
83:3d:58:73:dd:26:2d:04:34:97:51:34:cf:94:bc:
50:bf:87:e2:db:f4:56:69:99:e9:6b:1f:6a:79:9e:
b7:a0:b6:cf:3b:f5:c0:b4:e5:9d:85:b0:6e:a6:04:
e2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:89:CF:6B:92:7C:98:AD:1E:75:C4:A8:7F:A8:67:7B:11:EF:CA:A4
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/OInPa5J8mK0edcSof6hnexHvyqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.187.42.0/24
81.187.96.0/20
81.187.128.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3f:b8:ae:f7:62:b4:a0:4f:74:a4:cf:da:9f:b3:a8:22:a0:
c6:bd:3b:a6:9c:b2:3a:1c:45:8f:70:5e:7f:cd:96:05:14:ec:
75:84:2f:97:d3:54:60:ba:55:29:8f:99:ca:b3:f6:15:a0:73:
98:df:b6:79:f0:13:3f:ba:b4:9d:cd:51:09:14:42:e9:7e:6a:
fb:ba:f4:5a:de:35:7a:22:ed:7e:b2:cb:95:0e:85:d0:7f:fd:
f2:95:3c:b4:ba:18:a7:9f:c0:12:6c:f9:7a:ad:46:ab:7f:74:
dc:30:bb:3b:e3:dd:6f:85:4f:bd:dd:26:6c:1b:60:7b:03:68:
91:b3:78:cb:fa:34:f4:f6:68:75:cc:b8:d6:f8:8d:ac:48:74:
fc:6f:34:6a:f4:79:a3:ab:c9:66:a8:11:6f:31:13:9c:ce:31:
6b:d9:16:ca:cb:c4:4b:84:88:82:13:d6:23:d2:2a:62:07:6d:
72:3e:9a:79:d9:ed:72:29:03:8f:96:a8:e0:f5:08:30:62:52:
20:09:3d:96:5e:c8:d9:a7:cc:e3:75:49:81:57:88:35:7c:e3:
96:b1:0f:55:59:e3:d7:da:e1:ed:ba:40:b0:4f:7b:8a:23:b6:
d4:e2:d4:59:e5:85:6e:fc:29:e5:93:46:a3:d3:89:55:bc:4b:
ce:50:48:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:26 2024 by rpki-client on console-fra.rpki-client.org