Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6-JiPJd8G4vu7YASJ2HS28R79XM.roa
File: 6-JiPJd8G4vu7YASJ2HS28R79XM.roa (raw, json)
Hash identifier: SYi1H/5kefZDzht5iHsTQlHoMuXXyii97DbNkclsxso=
Subject key identifier: EB:E2:62:3C:97:7C:1B:8B:EE:ED:80:12:27:61:D2:DB:C4:7B:F5:73
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018A38BC9D71FE3C7F3316AA2051803FE501
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6-JiPJd8G4vu7YASJ2HS28R79XM.roa
Signing time: Sun 27 Aug 2023 20:43:19 +0000
ROA not before: Sun 27 Aug 2023 20:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57494
IP address blocks: 81.31.247.0/24 maxlen: 24
185.84.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:bc:9d:71:fe:3c:7f:33:16:aa:20:51:80:3f:e5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 27 20:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ebe2623c977c1b8beeed80122761d2dbc47bf573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:e0:39:91:4a:af:5c:5a:11:9f:bf:2d:56:
f6:49:40:c4:72:36:36:a9:0b:a6:0d:ef:76:1a:13:
5f:b2:0f:d0:15:17:e7:1d:6a:82:d0:80:9e:71:4e:
f1:3c:8f:0d:eb:d7:fa:b0:15:d6:a0:d1:60:d7:46:
b7:c9:d6:73:70:1b:1d:d3:a4:33:37:e8:e5:b1:0e:
b1:ae:77:e2:86:ad:d3:0a:98:fc:80:c9:2b:38:6c:
c7:1c:a9:a2:ee:0d:79:b9:11:80:b5:fc:61:aa:6b:
d3:79:d2:d1:ee:69:69:ab:44:9c:70:85:7e:59:89:
1d:b2:b4:4a:99:73:ff:5a:38:c8:e2:c3:1f:1b:c5:
58:e9:6e:e2:89:36:3d:2f:27:17:55:f1:02:8e:9e:
81:0f:29:07:ae:4d:d5:75:e3:cc:29:f4:15:e0:af:
3d:a6:a8:99:a5:df:d3:15:4e:ed:82:fc:65:11:db:
fd:2c:40:15:f4:03:7e:81:d5:0a:a6:0b:e5:8c:73:
b6:ce:3b:1a:24:f3:38:a4:ca:38:0c:61:95:94:2d:
9c:f7:bf:0a:99:e2:1e:ff:85:d6:80:76:80:5d:02:
5a:fb:7e:a6:88:df:58:99:ea:3a:48:41:79:4b:17:
ab:e8:fb:e8:75:66:26:80:14:a3:21:bd:a1:e4:82:
61:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:E2:62:3C:97:7C:1B:8B:EE:ED:80:12:27:61:D2:DB:C4:7B:F5:73
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6-JiPJd8G4vu7YASJ2HS28R79XM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.247.0/24
185.84.163.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ee:cb:fa:a2:1b:6c:9c:41:6f:ed:95:dd:9f:0b:c4:17:44:
04:d6:9f:8d:90:4f:8b:be:82:3c:81:e8:d2:17:1f:c8:e1:9d:
5a:1b:d7:2f:7d:b9:55:a9:fb:1a:e8:36:80:aa:c3:77:f5:f6:
9f:4a:11:41:64:02:bc:fd:52:d9:f1:f6:a0:fd:86:de:a2:00:
d2:38:f1:b5:66:10:28:d7:c7:0b:ba:4a:a1:58:d6:7e:a9:8d:
2b:c7:90:59:ac:b4:fb:cd:06:89:ab:e2:9f:73:6a:e0:1a:4d:
ab:73:4c:fc:45:d0:a9:c7:63:eb:6a:c7:d1:4f:2a:4d:6a:1f:
86:f0:72:f7:21:d0:57:75:11:b8:45:38:da:11:ea:2c:49:99:
90:6b:8f:ad:39:e3:bd:84:54:3e:35:06:96:c4:d8:4d:5b:50:
4f:63:26:73:33:88:6c:5b:a6:ab:67:48:dc:ca:39:ba:d8:eb:
a7:0f:ee:7e:d8:55:7d:7a:20:b7:dd:0a:1d:13:23:fa:c5:69:
0a:19:68:03:09:70:d7:11:84:dc:94:8e:5e:55:bf:b6:2e:4b:
f5:74:fb:b2:9b:e2:19:88:b6:4e:e6:41:a6:cf:fb:2e:a1:3a:
50:ae:60:1c:52:95:f7:fb:5d:e6:86:44:5f:21:1f:1c:46:6b:
59:7a:e4:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:21 2024 by rpki-client on console-fra.rpki-client.org