Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5ZnrulSjiNu6k8Dt53T2K-exqTY.roa
File: 5ZnrulSjiNu6k8Dt53T2K-exqTY.roa (raw, json)
Hash identifier: ybLzhIIwbdNXYgpiAtQLihO2Tp5/VaH6Du8492LcclA=
Subject key identifier: E5:99:EB:BA:54:A3:88:DB:BA:93:C0:ED:E7:74:F6:2B:E7:B1:A9:36
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0186B455174D1887EA7CA20781E020E9EC0A
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5ZnrulSjiNu6k8Dt53T2K-exqTY.roa
Signing time: Mon 06 Mar 2023 00:32:00 +0000
ROA not before: Mon 06 Mar 2023 00:32:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Sun 07 May 2023 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:b4:55:17:4d:18:87:ea:7c:a2:07:81:e0:20:e9:ec:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Mar 6 00:32:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e599ebba54a388dbba93c0ede774f62be7b1a936
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:af:dd:ac:24:43:39:4d:65:c8:00:39:dc:c3:
46:6f:d5:eb:25:8f:b7:c9:ef:b5:f6:23:15:00:57:
2f:04:38:33:e0:52:6f:b1:83:36:e2:a6:37:b1:c3:
86:df:e1:b1:58:84:5e:46:7b:23:fa:56:e5:b8:b1:
24:17:a7:aa:69:db:d7:b4:05:af:64:f3:4d:a8:41:
25:e9:a5:3b:b0:89:a1:14:e7:86:9c:5a:f1:3d:8b:
08:94:d0:16:f3:fe:5b:e6:e3:d7:d7:83:59:3c:8d:
32:f1:a5:3c:53:4b:f3:73:d1:2a:8c:6e:3c:70:8b:
b8:e1:b9:d1:9d:7d:dc:19:40:73:a4:b3:55:ce:bd:
94:16:b0:a0:c8:5a:2c:2e:82:34:79:d8:32:aa:85:
ae:6a:40:de:82:21:d2:86:7a:a2:61:3c:99:0a:32:
ab:1a:0f:9d:4c:3d:08:89:a3:b9:44:e5:0d:d7:76:
3b:cd:7e:ea:08:16:7c:cb:37:02:3e:78:84:84:73:
b4:7b:59:c1:a9:b9:b0:4f:c4:6c:18:9f:e5:68:ac:
df:28:c4:1c:c1:d5:5b:dd:ce:79:71:83:56:04:f5:
9c:8b:9c:6b:87:28:50:ec:c0:88:7d:35:39:62:3c:
90:90:d6:c2:77:85:3b:47:a7:81:1a:ff:f7:40:16:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:99:EB:BA:54:A3:88:DB:BA:93:C0:ED:E7:74:F6:2B:E7:B1:A9:36
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/5ZnrulSjiNu6k8Dt53T2K-exqTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
81.31.242.0/23
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
98:5c:ce:64:6e:ba:cd:ef:dc:bd:8c:04:82:3b:1d:74:ef:aa:
df:88:34:ae:be:ae:39:ee:4b:52:7b:ab:89:d4:cf:8f:08:b2:
c3:1b:66:ae:ee:15:f9:63:24:20:07:9a:dc:5a:28:08:b9:dd:
c2:3b:5b:7c:6f:cb:1e:b3:30:01:b2:b9:bf:98:85:8a:2c:ac:
b5:d9:69:33:bd:5d:9f:45:69:e2:99:20:7b:65:f8:b5:b0:86:
5b:7c:8c:b5:a7:5e:d6:71:12:b7:11:65:2a:a0:76:89:b8:72:
16:68:66:dc:a5:af:1e:c2:fa:40:79:7d:a6:89:ba:16:6e:f0:
c0:d8:18:bb:a2:b0:e7:78:1c:94:55:bf:a9:22:ac:15:25:ac:
cf:b9:c5:c8:1b:19:4c:7e:57:fa:7d:45:0e:cf:42:00:10:d3:
83:79:72:d4:5e:bc:24:9c:66:1f:d3:28:86:4c:0d:e7:7b:c9:
5d:47:d6:a9:14:b9:1c:f5:c0:87:e0:58:22:0d:18:32:9a:30:
c6:b8:53:39:49:00:b8:f7:d6:68:dd:68:ea:5c:95:64:2f:f9:
ed:88:2e:c9:f2:60:47:b2:0a:d5:66:03:8d:43:09:06:02:d1:
9b:39:1f:61:1e:de:04:97:16:b4:0a:69:9a:12:0d:18:38:49:
2e:f1:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org