Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6AVKsl9NzlNU7yx6cJIhfvycv68.roa
File: 6AVKsl9NzlNU7yx6cJIhfvycv68.roa (raw, json)
Hash identifier: 8S2M6l7lwQ6PMUrshXQNF+/anQuRoeBuU8wYD4543uo=
Subject key identifier: E8:05:4A:B2:5F:4D:CE:53:54:EF:2C:7A:70:92:21:7E:FC:9C:BF:AF
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01856D1CD265B1809787B5EA039C71E76327
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6AVKsl9NzlNU7yx6cJIhfvycv68.roa
Signing time: Sun 01 Jan 2023 11:34:43 +0000
ROA not before: Sun 01 Jan 2023 11:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60602
IP address blocks: 81.31.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 Feb 2023 08:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:d2:65:b1:80:97:87:b5:ea:03:9c:71:e7:63:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 11:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8054ab25f4dce5354ef2c7a7092217efc9cbfaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:1a:83:ec:3e:35:c9:e4:47:07:76:d2:47:
4c:bf:df:e6:aa:4f:41:96:65:8d:3c:c4:e5:be:17:
ee:ef:42:cf:92:dd:48:0e:89:1a:99:62:d6:85:bc:
1c:66:c3:e6:ef:5c:56:18:4d:a2:42:fc:59:ed:f3:
84:4e:a9:ea:67:70:ba:25:ea:9d:e9:da:b6:63:fc:
8b:6b:51:b3:42:dc:f6:37:ec:fc:d6:3b:a7:3e:2a:
a7:6e:e1:c7:a9:b3:ed:d0:62:51:7e:f0:4c:ea:ee:
73:1a:7c:1b:e4:ba:19:45:f0:6b:ac:5f:07:2b:6b:
2a:80:b9:06:30:89:c1:3f:8a:5c:6d:24:13:e4:40:
eb:78:23:03:54:a1:bc:1b:1a:e1:2e:fa:bc:79:29:
95:13:34:b0:2d:78:85:f8:34:bd:20:c5:70:fa:0c:
cc:a1:cc:07:84:1c:20:20:00:ca:c6:04:48:cc:99:
ea:3f:68:a9:61:c0:53:2e:47:37:56:43:6c:c6:01:
27:41:82:cd:4a:63:d9:9e:af:bd:6d:d0:da:f2:39:
2b:1f:a4:da:9c:89:a6:d0:87:5c:ae:88:43:ed:93:
bc:b5:ce:82:54:3a:59:2c:44:42:19:a5:46:91:e5:
7e:3e:cc:5d:ab:2e:48:62:2f:01:76:f7:5e:ff:31:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:05:4A:B2:5F:4D:CE:53:54:EF:2C:7A:70:92:21:7E:FC:9C:BF:AF
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/6AVKsl9NzlNU7yx6cJIhfvycv68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0/23
Signature Algorithm: sha256WithRSAEncryption
f0:73:a2:98:f5:29:b0:1f:a2:16:36:3d:bb:f7:75:7c:89:cb:
f5:ee:c8:83:be:3d:24:9c:9b:d0:12:96:f9:07:f6:4a:08:94:
0b:15:17:61:d0:7d:81:a3:b8:3d:ad:df:ec:01:31:60:fb:5d:
99:5a:23:e0:41:4d:cd:f4:ec:66:24:59:5e:5f:43:88:fd:32:
4a:66:29:c4:ef:13:81:29:5b:84:66:0f:4a:99:39:5f:63:50:
55:2f:be:db:d7:de:47:0a:aa:da:e5:1f:62:bf:e7:aa:a1:14:
b7:c2:24:1b:a0:76:77:d4:75:72:03:ba:cd:30:a6:9f:1b:9f:
85:b1:02:f6:15:e4:62:8a:f3:da:85:b4:f3:db:10:33:c3:72:
ec:fe:e6:ab:7a:63:ab:78:bc:2a:70:24:70:47:0e:b3:4d:75:
fa:d5:97:85:ab:77:d7:a6:84:19:cb:d3:29:31:f0:ba:1f:42:
2f:61:50:ea:0f:a1:de:bf:32:53:af:d4:e0:b7:5c:26:10:25:
3c:0c:4c:82:28:f1:c1:15:ba:95:bf:b1:1f:d5:f4:cd:e6:89:
22:bc:cd:99:38:5b:a1:95:eb:f0:99:3e:7d:65:ce:34:cb:f2:
ad:fb:5f:c8:de:4d:ba:ab:c3:82:4c:89:87:f4:cc:fa:9a:ef:
2e:2e:3c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:33 2024 by rpki-client on console-ams.rpki-client.org