Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/DyB8SotXuPTEibo9lwUCH1H-Ob0.roa
File: DyB8SotXuPTEibo9lwUCH1H-Ob0.roa (raw, json)
Hash identifier: HhI3SDdvBJly7yehEtwyqL08vwCbERhxIQRrcFZbNE0=
Subject key identifier: 0F:20:7C:4A:8B:57:B8:F4:C4:89:BA:3D:97:05:02:1F:51:FE:39:BD
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01856D1CD2D43E4F5462EEBA89C863720746
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/DyB8SotXuPTEibo9lwUCH1H-Ob0.roa
Signing time: Sun 01 Jan 2023 11:34:43 +0000
ROA not before: Sun 01 Jan 2023 11:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.242.0/23 maxlen: 24
81.31.252.0/22 maxlen: 24
185.84.162.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:d2:d4:3e:4f:54:62:ee:ba:89:c8:63:72:07:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 11:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f207c4a8b57b8f4c489ba3d9705021f51fe39bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:ef:0a:55:a2:6b:95:92:1e:29:4c:ff:37:
29:9e:8d:00:6a:7d:08:04:95:87:8c:a3:a3:98:65:
71:0b:4d:2a:d4:21:de:77:d0:cf:b6:97:ba:14:04:
42:d9:a7:7d:91:52:6f:69:7e:9e:89:20:d3:27:08:
e4:4c:81:cf:85:a5:25:be:95:5f:f8:1d:08:a5:57:
cb:8c:31:fe:65:94:2f:c1:40:a5:59:1d:70:0c:64:
99:3a:09:eb:de:86:e9:c0:71:02:06:a5:6b:79:04:
7d:6b:fc:9a:15:39:24:f8:91:2f:8f:99:ea:86:75:
e4:0a:3e:f0:9b:cd:0b:da:0b:39:c5:be:81:07:ca:
94:eb:57:d0:d4:3b:f4:ea:9e:1c:3a:a1:d9:31:10:
ca:3c:41:5d:b1:b4:1b:18:e7:19:d7:7b:aa:6a:35:
9e:e4:ba:41:d4:a2:cd:da:d4:8d:cf:01:17:8b:18:
19:30:b5:3d:0f:4b:22:d5:2b:21:73:e8:78:22:e3:
13:5d:1c:76:31:67:7b:bc:eb:88:4e:d9:ae:22:ab:
a9:0d:3a:92:5d:5d:f8:73:bd:f1:42:d4:c6:76:b4:
69:ad:e0:56:fd:36:30:d8:99:c1:fa:66:21:db:de:
8b:3a:41:46:cd:d6:3c:d3:bc:dc:bd:b9:7d:08:f9:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:7C:4A:8B:57:B8:F4:C4:89:BA:3D:97:05:02:1F:51:FE:39:BD
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/DyB8SotXuPTEibo9lwUCH1H-Ob0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0/23
81.31.252.0/22
185.84.162.0/23
Signature Algorithm: sha256WithRSAEncryption
64:cc:2a:83:b2:12:8d:4d:2a:e8:6c:17:e5:aa:02:86:64:56:
d9:25:4c:17:a9:26:82:ef:51:60:5a:ed:7b:9c:e0:c2:19:60:
c2:26:38:93:98:23:56:e4:7e:cb:68:6f:56:f5:90:88:fd:aa:
d3:19:ee:88:59:33:a6:f0:a3:21:a4:a0:e4:a7:0f:97:b1:1e:
c2:3d:f9:af:2e:cc:e6:bd:b3:e1:94:a6:93:81:cd:2c:6a:46:
ad:5b:95:cb:55:d5:89:65:a9:2f:a3:23:91:1a:d0:2e:6e:0a:
f0:f5:58:10:63:24:9b:c4:86:0a:4f:0d:43:db:28:63:67:16:
5d:0f:31:40:84:e6:83:a4:68:25:f5:8d:0c:77:d6:53:61:6e:
7a:b6:ea:39:96:a5:86:fa:0f:5a:a5:fb:13:c5:82:11:ee:d7:
3f:7e:7f:8b:a2:f4:15:c2:8c:e9:17:d5:b2:d0:aa:12:34:fd:
2d:a1:34:ee:8f:05:cb:52:57:1c:82:71:bf:53:61:1e:67:1f:
81:cc:9c:c0:a7:35:12:08:9c:e5:b2:58:b1:66:05:3d:06:80:
ff:aa:d1:6c:5c:5d:ac:0c:09:cf:ec:cc:fd:85:ff:15:18:f4:
56:e9:1b:57:42:e5:fe:47:9a:ee:d2:0e:ba:7b:b8:15:50:0f:
0b:e9:7a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:01 2023 by rpki-client on console-ams.rpki-client.org