Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/GVbai7hP0Vkd3cK0y4gQMrWAMjc.roa
File: GVbai7hP0Vkd3cK0y4gQMrWAMjc.roa (raw, json)
Hash identifier: gnQu2hm/lBN1iMRRP/oHXFXpT3CdfPULu/YBQBJgHio=
Subject key identifier: 19:56:DA:8B:B8:4F:D1:59:1D:DD:C2:B4:CB:88:10:32:B5:80:32:37
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018F40280A63B44FBD325BDAD3014F21F896
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/GVbai7hP0Vkd3cK0y4gQMrWAMjc.roa
Signing time: Fri 03 May 2024 20:31:56 +0000
ROA not before: Fri 03 May 2024 20:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.234.0/23 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:40:28:0a:63:b4:4f:bd:32:5b:da:d3:01:4f:21:f8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 3 20:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1956da8bb84fd1591dddc2b4cb881032b5803237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1f:b3:0f:42:7d:f3:8a:61:1d:06:47:39:cf:
6e:fe:bd:b2:be:99:0d:4c:04:24:f7:81:90:6e:2a:
19:e9:fc:e8:85:79:ae:a5:aa:d7:6a:ad:1d:ed:8c:
4c:31:be:e4:c1:a8:49:f9:bd:0f:54:79:b1:74:fb:
97:1b:0b:df:bb:1e:71:e6:7e:9b:8b:c8:35:dc:a0:
e5:84:37:df:fe:f8:8b:6f:4a:a2:fd:d9:9d:1d:eb:
54:07:41:58:28:df:8c:91:c4:62:bd:a9:5e:0b:02:
d1:87:ee:d5:4d:c1:9b:17:46:1e:c8:55:bf:1a:8d:
dc:85:d4:74:92:f0:55:39:44:8d:cf:26:60:b1:9c:
de:76:a8:3d:ab:f6:ea:2b:4f:2b:f6:45:d2:4d:6b:
03:97:37:7f:d9:c0:94:fc:5f:34:d6:44:0d:76:af:
8d:f0:e8:19:13:53:e8:85:56:39:cb:c6:09:3d:71:
ab:48:ae:aa:e3:11:47:09:a1:30:dc:b0:e2:9f:86:
13:55:4c:f1:a9:17:bd:db:c2:e6:cc:27:ff:40:32:
7e:ad:1d:9f:94:13:c1:29:6d:b0:6e:27:49:ce:03:
cf:a5:64:e2:2f:e1:e1:99:b8:51:ec:73:59:ad:cc:
14:0d:19:0f:ff:8c:92:fc:ed:8f:0b:95:82:58:b4:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:56:DA:8B:B8:4F:D1:59:1D:DD:C2:B4:CB:88:10:32:B5:80:32:37
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/GVbai7hP0Vkd3cK0y4gQMrWAMjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/23
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:fe:63:cd:dc:c2:72:8e:ab:a6:04:47:74:40:70:db:b7:2c:
24:2b:52:08:58:a4:da:8a:4d:85:d3:cb:ac:34:78:f6:9b:75:
d1:dd:39:03:ed:57:77:fd:a4:d6:c2:7f:25:50:0b:10:05:7e:
dd:c2:92:53:1d:0a:7c:33:18:e0:f0:77:3d:ac:a7:4a:45:6b:
16:22:4c:14:f9:a6:19:c0:1b:cb:a8:fa:be:36:63:34:7b:77:
b4:34:26:16:b7:94:ac:59:a7:56:39:5c:03:ae:38:f6:47:91:
46:72:3b:92:40:e3:2f:6d:12:07:2e:bf:13:f4:b2:0a:e8:9c:
c9:de:8b:a0:8b:de:dc:cc:6c:fa:4f:d8:c9:e7:55:d8:43:a5:
39:32:82:20:07:6f:0a:6f:f0:a7:c6:a7:4d:f0:d0:a1:ec:8a:
e1:29:54:db:70:50:d6:10:26:a2:9d:87:23:93:a3:b4:9f:c6:
9f:9a:a4:1e:12:ee:cb:ed:9f:58:0b:d5:72:ab:96:38:76:4d:
8e:45:56:c8:06:c6:e9:16:27:ef:c6:6a:f3:83:51:97:a3:3a:
68:1d:6d:e3:56:b6:6e:c5:7d:f3:c2:a1:ab:13:5f:af:f0:db:
8d:65:82:70:c7:70:cd:94:f4:36:e6:1e:31:25:f4:39:58:ae:
5a:d8:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org