Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9fchIr0i-AspQdQC05o_R3RvCmg.roa
File: 9fchIr0i-AspQdQC05o_R3RvCmg.roa (raw, json)
Hash identifier: 9U7SrKhkgwFDz7ZJDvbZdhj7YAc4fa+ueakhjWZVohM=
Subject key identifier: F5:F7:21:22:BD:22:F8:0B:29:41:D4:02:D3:9A:3F:47:74:6F:0A:68
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01883298CBF1CFF176269E8E3617FACFEB4D
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9fchIr0i-AspQdQC05o_R3RvCmg.roa
Signing time: Fri 19 May 2023 06:00:54 +0000
ROA not before: Fri 19 May 2023 06:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18811
IP address blocks: 81.31.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 08:21:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:98:cb:f1:cf:f1:76:26:9e:8e:36:17:fa:cf:eb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 19 06:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5f72122bd22f80b2941d402d39a3f47746f0a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:86:42:1c:6b:66:d2:a1:30:24:b3:18:c0:65:
23:bd:49:bb:80:3b:53:4f:bf:b9:a5:11:11:b9:0f:
db:83:78:80:47:e2:5e:5e:12:62:1c:b5:3d:f5:56:
cc:d7:bc:d4:f3:1e:b0:80:04:87:64:c9:bd:64:7f:
1e:c0:ba:04:0b:70:fa:28:05:4e:ee:50:cf:c1:35:
dc:28:8a:c2:0a:db:e5:64:46:b5:58:16:65:9e:57:
59:07:6a:1e:98:c4:fc:6b:bb:a0:31:60:05:1d:bd:
38:40:ff:b0:21:2d:6c:bf:e2:8a:9b:d5:06:f2:90:
79:4f:a0:01:12:dd:33:9f:0e:61:63:54:81:e7:62:
0b:5b:44:93:ea:9d:29:1d:79:f5:66:18:bd:52:6b:
ea:2f:2a:33:58:6f:02:82:07:4a:fa:6a:23:33:47:
85:ff:ec:0a:48:ba:76:c5:a2:eb:46:50:e8:aa:7e:
2b:d1:76:1b:43:b7:2a:e1:74:89:49:a4:c0:d8:ab:
11:20:a8:59:f8:13:2b:ad:07:c9:56:70:89:b4:b7:
09:47:ce:38:0a:86:d9:81:2e:d4:4a:31:02:51:a2:
09:47:9b:c4:87:6f:95:35:0e:1d:f3:7f:48:f3:ff:
8c:c9:ac:ca:29:fb:54:9b:3a:18:c9:07:54:a6:8b:
cd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F7:21:22:BD:22:F8:0B:29:41:D4:02:D3:9A:3F:47:74:6F:0A:68
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/9fchIr0i-AspQdQC05o_R3RvCmg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/22
Signature Algorithm: sha256WithRSAEncryption
29:72:b8:ee:a9:b4:8a:55:01:02:27:4d:de:8a:f5:8c:c3:db:
df:7c:40:32:37:e0:ad:63:e9:e2:7b:30:b0:67:0f:bf:86:f8:
88:8b:9d:e7:79:77:64:1d:4b:16:46:f9:46:e3:21:9b:cd:bd:
02:53:c0:d2:06:d9:37:cd:ad:a7:a2:bc:85:48:e6:45:6f:3f:
3b:c4:eb:ef:46:b3:5e:c4:3f:fb:8a:c4:73:0a:6f:ae:8b:c4:
83:9b:fb:f4:07:a7:56:9b:33:ff:7e:9d:1e:77:97:99:50:af:
83:db:8a:3a:e0:18:fa:97:25:fc:5c:bd:04:9b:f0:cd:c7:ce:
fb:37:85:db:28:1b:cf:2d:ff:01:b2:ee:c7:22:10:ed:98:38:
41:8f:cd:43:9d:ae:92:57:ac:7f:0e:4d:ca:4a:2a:fe:3b:c4:
12:b0:7a:a3:84:15:d7:14:94:47:b2:96:23:da:8d:61:2b:b7:
a3:24:9d:a6:9e:3c:37:29:4a:5a:82:7a:d8:c9:99:e7:cd:22:
ad:f4:44:8b:f1:64:6a:1f:9a:7a:44:2d:8a:93:f4:8a:60:ef:
2d:3a:de:47:3f:92:d3:85:f4:2f:79:8f:8b:5e:ef:6d:f7:a8:
a6:ec:b7:6c:17:b1:56:0b:d1:7d:2a:06:47:e9:66:fc:ad:0e:
64:9f:e0:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgymMvxz/F2Jp6ONhf6z+tNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTZiY2Q0MjZmZDg3Y2Q2ZjQxNDdlMTMzMjE2ZDAzMTEy
YjE4MWIwHhcNMjMwNTE5MDYwMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWY3MjEyMmJkMjJmODBiMjk0MWQ0MDJkMzlhM2Y0Nzc0NmYwYTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoZCHGtm0qEwJLMYwGUjvUm7gDtT
T7+5pRERuQ/bg3iAR+JeXhJiHLU99VbM17zU8x6wgASHZMm9ZH8ewLoEC3D6KAVO
7lDPwTXcKIrCCtvlZEa1WBZlnldZB2oemMT8a7ugMWAFHb04QP+wIS1sv+KKm9UG
8pB5T6ABEt0znw5hY1SB52ILW0ST6p0pHXn1Zhi9UmvqLyozWG8CggdK+mojM0eF
/+wKSLp2xaLrRlDoqn4r0XYbQ7cq4XSJSaTA2KsRIKhZ+BMrrQfJVnCJtLcJR844
CobZgS7USjECUaIJR5vEh2+VNQ4d839I8/+MyazKKftUmzoYyQdUpovN8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPX3ISK9IvgLKUHUAtOaP0d0bwpoMB8GA1UdIwQY
MBaAFBBWvNQm/YfNb0FH4TMhbQMRKxgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzct
YWE4NTllMTkyYjE2LzEvOWZjaElyMGktQXNwUWRRQzA1b19SM1J2Q21nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNmY0ZTQtNjhiYi00NDk2LTkwYzctYWE4NTllMTkyYjE2
LzEvRUZhODFDYjloODF2UVVmaE15RnRBeEVyR0JzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUR/0MA0G
CSqGSIb3DQEBCwUAA4IBAQApcrjuqbSKVQECJ03eivWMw9vffEAyN+CtY+niezCw
Zw+/hviIi53neXdkHUsWRvlG4yGbzb0CU8DSBtk3za2noryFSOZFbz87xOvvRrNe
xD/7isRzCm+ui8SDm/v0B6dWmzP/fp0ed5eZUK+D24o64Bj6lyX8XL0Em/DNx877
N4XbKBvPLf8Bsu7HIhDtmDhBj81Dna6SV6x/Dk3KSir+O8QSsHqjhBXXFJRHspYj
2o1hK7ejJJ2mnjw3KUpagnrYyZnnzSKt9ESL8WRqH5p6RC2Kk/SKYO8tOt5HP5LT
hfQveY+LXu9t96im7LdsF7FWC9F9KgZH6Wb8rQ5kn+Ap
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org