Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/8K_MhVE5zSEDkVxKI6TNp1R1Uaw.roa
File: 8K_MhVE5zSEDkVxKI6TNp1R1Uaw.roa (raw, json)
Hash identifier: j+K5QSoMACEFd5nK8XPOAQZCY9MRW81TN4WqdPTxQTo=
Subject key identifier: F0:AF:CC:85:51:39:CD:21:03:91:5C:4A:23:A4:CD:A7:54:75:51:AC
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018E9E1A9194525C2BFFAF976E6B143670CD
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/8K_MhVE5zSEDkVxKI6TNp1R1Uaw.roa
Signing time: Tue 02 Apr 2024 09:18:45 +0000
ROA not before: Tue 02 Apr 2024 09:18:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.231.0/24 maxlen: 24
81.31.234.0/23 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Apr 2024 11:04:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:1a:91:94:52:5c:2b:ff:af:97:6e:6b:14:36:70:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Apr 2 09:18:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0afcc855139cd2103915c4a23a4cda7547551ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:1c:96:75:33:04:32:42:60:9d:45:c0:79:
e6:d2:6e:a5:2c:37:91:2e:85:8f:98:02:75:65:5f:
f4:03:9e:ad:78:ef:62:fd:d4:92:a3:2a:86:54:ff:
7c:bb:e8:b0:19:0b:67:a9:4d:0f:03:fd:6d:0d:2e:
78:d0:87:66:17:62:62:65:b4:67:25:78:60:c9:89:
65:a3:f4:17:52:04:46:36:c4:87:00:91:b7:99:e4:
82:fc:1b:13:e5:bf:9e:dc:ed:15:d1:70:41:4e:ad:
d2:15:f0:f8:0b:07:95:af:ad:70:4f:9e:58:48:15:
1b:76:87:41:9f:fe:35:10:b7:4a:82:ad:53:49:6d:
3b:06:c3:2b:29:9d:c4:5b:58:67:1b:03:32:fc:a2:
4d:92:e7:62:49:65:ca:db:84:63:8c:14:04:05:d3:
78:81:f3:1c:eb:dd:42:90:13:ad:59:43:72:68:d2:
3e:ec:4c:07:8a:e7:e7:7c:64:21:14:21:8e:ae:c6:
95:ec:50:41:eb:fb:a6:c8:2b:f8:23:9a:b4:ef:85:
23:d9:86:ec:a7:b1:32:6a:50:df:01:05:f3:3e:d1:
f9:2f:cc:11:e3:84:b4:61:fa:4d:83:19:9b:df:e9:
8d:f6:15:71:a0:8e:d6:78:38:8d:61:74:c1:07:99:
79:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:AF:CC:85:51:39:CD:21:03:91:5C:4A:23:A4:CD:A7:54:75:51:AC
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/8K_MhVE5zSEDkVxKI6TNp1R1Uaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
81.31.234.0/23
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
53:64:6f:e8:da:b2:57:47:34:dc:52:8a:4e:e2:1d:00:75:23:
4b:8a:34:6c:13:99:51:5e:77:a8:cb:9a:92:4f:c2:31:2a:15:
e2:0c:5d:dc:bc:2e:83:36:ec:76:23:96:b9:55:49:17:09:0e:
a9:d5:c7:48:06:93:b8:73:ea:02:8f:12:68:66:a6:a0:0b:7e:
62:71:7b:7e:4e:19:bc:9f:a8:e9:e1:f7:23:8c:25:9a:be:6f:
64:7c:c5:fc:06:bd:40:1f:38:19:71:87:b9:10:65:2b:04:71:
03:a8:ca:5f:26:9a:c0:97:c7:d4:33:6e:9a:ea:3a:8a:ea:21:
fc:10:67:8a:52:a4:f2:1f:36:b6:6e:aa:eb:d3:5f:6d:e2:0f:
e0:41:2b:d2:cf:7d:ca:95:49:59:94:f4:c1:ea:c5:ad:f6:31:
eb:9f:4d:94:c0:94:ed:de:31:e3:66:25:41:8a:a5:4a:53:37:
36:22:b5:09:a6:e5:62:3b:70:e2:8c:58:16:ce:08:71:1e:8d:
14:3d:56:f0:84:f4:f8:6e:75:5f:e4:78:32:e0:7b:cd:48:e9:
1c:c8:2f:9e:a3:a8:25:aa:23:7b:91:b1:c4:cd:23:64:e6:ad:
ea:62:eb:20:d8:68:40:7e:6a:aa:85:5f:8f:ab:35:d8:8b:85:
a1:9e:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:44:00 2024 by rpki-client on console-ams.rpki-client.org