Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/3EWWcHB0DrhRB9wQsiNHPkG2oBc.roa
File: 3EWWcHB0DrhRB9wQsiNHPkG2oBc.roa (raw, json)
Hash identifier: v82KUlup+3d/ZqJYFIuqbfo3ZND7tLoBBqDfa2b31B8=
Subject key identifier: DC:45:96:70:70:74:0E:B8:51:07:DC:10:B2:23:47:3E:41:B6:A0:17
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018D8F9E0A5D2F9D42D103232CC1CE4C2CEC
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/3EWWcHB0DrhRB9wQsiNHPkG2oBc.roa
Signing time: Fri 09 Feb 2024 20:45:15 +0000
ROA not before: Fri 09 Feb 2024 20:45:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sat 16 Mar 2024 19:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8f:9e:0a:5d:2f:9d:42:d1:03:23:2c:c1:ce:4c:2c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 9 20:45:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dc45967070740eb85107dc10b223473e41b6a017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:73:68:a3:e3:85:6a:83:0a:10:04:6c:c8:f7:
06:41:13:8c:95:99:88:b0:b0:08:7b:00:3e:ee:9b:
e0:03:7f:a1:e3:40:47:a5:c1:63:61:89:88:bf:43:
3d:cc:eb:da:6f:46:b5:15:9a:8b:97:f9:cf:1e:6b:
7d:74:3a:05:24:6d:2c:20:d1:b4:2a:fd:a4:f7:78:
9e:1f:fe:5e:80:ab:14:f7:0a:a8:4e:89:ff:21:a1:
88:ae:a6:9f:04:1f:e9:69:d5:a2:bb:8c:2a:3c:88:
ad:19:83:04:c7:60:43:7c:47:15:f3:91:35:1a:8c:
61:81:12:b3:2e:31:3c:c1:fa:2a:35:03:41:8a:cc:
1a:df:2d:72:06:d2:40:9c:56:ef:24:a3:0a:e9:10:
4d:4b:d1:70:d9:4f:8a:6a:63:5b:06:de:e4:7c:f0:
42:01:c9:87:f7:a3:9d:3f:b8:5e:34:d1:3f:ae:c4:
1d:5d:28:ac:1b:85:1b:31:49:a1:28:73:eb:9c:b6:
77:f4:4a:d1:7b:72:a0:c9:19:cc:b8:af:20:c7:f9:
86:b7:94:69:07:05:6d:34:cc:ee:24:3d:00:e7:ad:
fd:eb:21:d0:0c:da:96:8f:56:a5:97:71:d7:ff:7f:
70:04:1c:ea:b6:27:61:a6:05:41:3d:27:3b:7d:54:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:45:96:70:70:74:0E:B8:51:07:DC:10:B2:23:47:3E:41:B6:A0:17
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/3EWWcHB0DrhRB9wQsiNHPkG2oBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
09:2b:4f:42:6d:38:13:cb:95:e5:f9:98:eb:f6:33:61:ab:71:
20:ae:f1:dc:5f:4a:77:57:74:e7:1c:d3:52:9f:e5:c4:c7:68:
f2:59:6f:d6:6e:25:47:3f:22:ad:c4:f6:fb:e2:3b:6d:27:62:
11:80:29:49:c4:3e:b0:c9:9f:47:eb:52:9a:38:bc:da:b1:49:
54:2e:7f:f9:9a:75:1e:6c:89:36:c0:08:f2:2e:6c:34:ad:1f:
65:27:7f:b8:42:b0:d0:ed:06:df:23:10:cc:c2:39:d4:b5:9e:
8c:12:77:bb:db:3f:df:7a:9f:e4:42:73:90:cd:2a:b1:5c:3a:
aa:ef:bf:2c:ea:53:ff:4b:10:2c:4c:a6:0a:95:67:d3:55:52:
66:75:69:7b:81:a2:6e:71:03:ef:35:a1:39:6d:3a:be:a0:fa:
ed:07:53:09:b5:78:21:a5:73:ac:c3:7f:12:ce:8b:6e:5f:fd:
ef:bc:7d:6e:dd:16:74:d1:e6:f6:d4:58:75:47:6a:fd:fd:70:
03:25:93:0a:e0:14:bd:fc:8f:fe:29:9a:36:18:67:f1:d3:38:
b1:75:d2:8b:4e:8b:c2:cb:f4:f6:18:8f:84:e3:47:85:13:18:
8e:f0:0e:ea:64:02:8a:c2:0b:ca:f8:28:ac:19:a4:87:57:fa:
5f:69:d1:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 16 20:24:49 2024 by rpki-client on console-fra.rpki-client.org