Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/COytmqa_On6V2pV04-enyYZLBes.roa
File: COytmqa_On6V2pV04-enyYZLBes.roa (raw, json)
Hash identifier: X8Bu/0NSTM0Fepp/BstszaXy6b1xiv61Csn8IYK8sa0=
Subject key identifier: 08:EC:AD:9A:A6:BF:3A:7E:95:DA:95:74:E3:E7:A7:C9:86:4B:05:EB
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018BFB6B65ED075E9BF333F9CC684A2468CA
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/COytmqa_On6V2pV04-enyYZLBes.roa
Signing time: Thu 23 Nov 2023 09:03:21 +0000
ROA not before: Thu 23 Nov 2023 09:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9123
IP address blocks: 81.31.246.0/24 maxlen: 24
81.31.244.0/24 maxlen: 24
81.31.245.0/24 maxlen: 24
185.84.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fb:6b:65:ed:07:5e:9b:f3:33:f9:cc:68:4a:24:68:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Nov 23 09:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=08ecad9aa6bf3a7e95da9574e3e7a7c9864b05eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1b:4a:2f:ae:42:f6:98:82:c6:e9:67:67:60:
e3:59:a7:39:83:57:c5:13:15:88:6e:27:20:8a:3c:
db:6f:f4:69:7a:0b:17:60:f2:ec:a4:93:5e:23:dd:
35:f7:b9:6a:2a:2d:b3:ae:c0:71:29:64:6e:e6:14:
35:1a:ba:ec:b1:7f:8b:bc:90:fd:c3:04:71:f6:41:
b6:bf:4a:72:ab:12:4e:27:71:6c:ef:1c:22:f6:e1:
3f:df:7f:0a:09:39:10:f6:c6:db:fe:f4:16:69:fc:
f3:04:da:5c:f4:5a:e8:b4:77:cd:61:e2:c8:05:cf:
40:e2:69:5f:7a:ac:59:ef:b8:fc:73:c8:6b:97:b0:
e0:a1:b1:96:26:01:e3:1c:a5:15:dd:96:dc:f8:82:
87:46:68:2e:56:b1:a8:99:d8:20:27:e8:3b:d3:25:
2a:63:0a:7e:ca:35:b8:34:9a:9c:63:dd:0b:79:0f:
30:96:26:22:87:18:22:61:99:98:c9:a7:e9:d0:26:
65:77:7e:78:99:5a:52:e3:76:f1:f4:7a:44:4a:d8:
94:49:0f:f6:1d:c8:23:34:3c:94:9f:19:52:18:fe:
31:94:36:21:f8:fe:b4:60:69:9e:4d:45:f2:18:76:
74:5c:0c:a6:23:7f:50:0a:41:c5:57:14:e8:04:54:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:EC:AD:9A:A6:BF:3A:7E:95:DA:95:74:E3:E7:A7:C9:86:4B:05:EB
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/COytmqa_On6V2pV04-enyYZLBes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0-81.31.246.255
185.84.162.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c4:68:ed:93:d0:68:6a:2c:80:ba:c8:b5:79:bb:e4:0f:1d:
32:8b:7e:04:5b:80:9c:44:f2:db:d8:63:3d:af:95:df:a8:3f:
31:94:5d:8c:48:f6:c5:5b:18:2f:17:d5:ae:c1:21:43:fc:2f:
07:84:17:63:95:03:05:6f:b3:1e:4a:14:bb:79:9e:cd:b5:f2:
ae:0b:10:62:c8:1b:cd:2a:b9:88:d1:42:45:05:47:bf:fa:69:
ec:50:f0:e8:fc:f4:c5:ef:33:2a:5a:64:4f:b9:bb:4a:e3:e7:
81:a0:d6:6e:af:44:ba:44:50:ae:e3:a3:33:7a:8a:3d:e5:1c:
4a:db:8e:fa:37:8c:f3:43:62:48:cd:d6:28:4d:1e:d6:09:22:
d6:b4:57:69:22:f7:c5:23:c6:f8:3e:5d:a3:25:e8:89:44:0a:
3e:3c:50:29:b0:5d:77:05:7e:7e:f9:9b:8e:4f:7c:7c:65:ed:
b9:29:a7:5c:ee:3d:83:52:89:7d:06:35:20:b4:b6:8c:65:40:
0a:94:26:38:6e:af:e4:d8:18:a0:cb:58:40:3b:f2:72:59:05:
f3:43:6e:7a:0a:62:8e:03:ab:ce:45:04:a3:f3:d6:fe:84:20:
99:1b:88:93:ca:ee:2c:c2:ac:27:bc:64:d6:10:c5:fe:b3:58:
1e:85:55:a8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org