Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/7Sy_-AnbdAJgnDeXCexYh7z5v6s.roa
File: 7Sy_-AnbdAJgnDeXCexYh7z5v6s.roa (raw, json)
Hash identifier: 1i7AlRdUdXesP17PZ7bMGak0hGY5pCQp/294puLZn88=
Subject key identifier: ED:2C:BF:F8:09:DB:74:02:60:9C:37:97:09:EC:58:87:BC:F9:BF:AB
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018E9E7B9ED31C64A9FB6E1ADB20996E45CB
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/7Sy_-AnbdAJgnDeXCexYh7z5v6s.roa
Signing time: Tue 02 Apr 2024 11:04:45 +0000
ROA not before: Tue 02 Apr 2024 11:04:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 04 Apr 2024 17:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:7b:9e:d3:1c:64:a9:fb:6e:1a:db:20:99:6e:45:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Apr 2 11:04:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed2cbff809db7402609c379709ec5887bcf9bfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:09:fc:1d:93:f0:c3:48:6c:7f:66:0d:17:88:
66:95:15:1b:9f:23:f5:11:16:a4:e4:37:72:3d:40:
0f:f5:4a:d7:a0:37:2e:63:05:7a:bf:ed:0b:af:5d:
7a:8d:4f:41:27:c9:3b:4a:3e:29:99:8b:78:87:79:
c0:ea:99:c4:1b:74:c8:26:41:fa:d2:8f:d2:0b:2c:
b5:a6:cb:65:7d:23:60:fe:92:13:bc:04:cd:ec:a8:
7a:18:81:fc:3f:09:75:1b:3a:8f:17:2e:d4:62:fb:
17:f2:a2:ac:d8:06:81:ab:0d:1e:b5:92:be:96:a2:
0e:10:c4:89:f5:b2:e1:dd:9b:97:4e:90:2d:73:f0:
0b:ea:39:47:77:fc:57:d0:89:6c:79:bf:11:a2:18:
ac:38:d1:fa:e2:8e:53:0f:f4:b3:33:f1:3b:62:79:
37:f2:6b:17:8a:4f:6a:9a:67:15:00:47:6f:6c:ac:
20:8c:20:04:47:3e:76:aa:73:ce:be:39:18:91:55:
96:53:b5:a5:24:1f:c3:30:6f:4c:89:45:fd:5f:54:
a8:85:49:19:39:46:c6:f3:8f:4e:ea:df:87:4d:42:
b4:ef:24:cc:87:dd:92:81:b8:ba:f1:d5:78:37:be:
6f:85:2a:92:48:c2:e6:a1:ae:34:3f:54:88:da:d5:
70:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2C:BF:F8:09:DB:74:02:60:9C:37:97:09:EC:58:87:BC:F9:BF:AB
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/7Sy_-AnbdAJgnDeXCexYh7z5v6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:26:a3:6a:27:8a:4c:07:f9:0a:66:f6:98:d4:1d:cd:94:86:
bf:bd:2e:84:8b:7c:0a:d4:28:9e:db:65:d2:d2:ab:c1:20:ec:
d8:f6:3a:33:b9:e6:03:56:b1:b8:a6:2c:c4:09:e7:b3:21:2a:
b4:a3:49:27:41:1a:f3:35:7d:dc:12:2e:8f:7b:51:33:ae:7f:
3a:b3:4c:a8:09:bb:df:0f:25:f7:32:66:42:2c:bc:7f:86:91:
4a:3c:af:e2:63:aa:65:d2:55:32:52:63:16:4f:a8:7a:c4:57:
8a:65:7b:04:ee:de:3a:c5:0d:21:8d:e1:c3:ea:ee:c6:87:54:
94:d3:02:92:98:9d:1e:3d:36:d2:e5:79:ac:8b:87:31:36:25:
50:91:99:b1:47:44:d0:b4:e5:f9:57:bf:b5:10:ca:01:84:a6:
24:a4:53:85:fe:55:86:8d:5a:b0:57:f4:23:84:9f:9e:99:af:
25:70:de:19:82:ee:d6:2b:7c:92:6f:c1:2c:5e:c8:e0:5f:b3:
7b:38:dd:1b:33:f2:b6:d4:a4:46:5c:14:06:7a:81:5f:66:a9:
09:0f:f3:a7:0c:21:c9:55:e2:63:56:3f:4a:3d:1b:f2:e3:19:
7e:d4:06:77:ab:66:e0:88:2a:07:a0:0c:b6:7b:86:57:60:fc:
e9:71:ef:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 4 20:21:27 2024 by rpki-client on console-fra.rpki-client.org