Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/HyhVk8tLDM75rDBk00TjtXyb-_E.roa
File: HyhVk8tLDM75rDBk00TjtXyb-_E.roa (raw, json)
Hash identifier: vR4Y+rvkuwiNG3vwKFk/G8hwE8ZriUhGogg96KDpHaI=
Subject key identifier: 1F:28:55:93:CB:4B:0C:CE:F9:AC:30:64:D3:44:E3:B5:7C:9B:FB:F1
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0189C79F12E86283E7386C6AB57F92608576
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/HyhVk8tLDM75rDBk00TjtXyb-_E.roa
Signing time: Sat 05 Aug 2023 21:33:58 +0000
ROA not before: Sat 05 Aug 2023 21:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:c7:9f:12:e8:62:83:e7:38:6c:6a:b5:7f:92:60:85:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 5 21:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f285593cb4b0ccef9ac3064d344e3b57c9bfbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:81:77:58:2b:53:fa:51:6b:90:ff:b1:af:2d:
29:cf:5d:a4:4f:31:a5:b1:a1:e0:82:05:cb:a6:4a:
f0:1a:48:fa:67:43:4a:fb:ad:13:4d:07:e1:0e:6e:
b6:ec:d9:00:6f:93:ec:df:0f:6c:8e:43:70:4b:3c:
71:b4:f6:22:19:3d:ef:12:a3:cc:9b:28:5a:6f:89:
e2:b0:68:6a:84:99:ad:9f:51:6f:08:a9:78:09:1c:
18:81:07:b7:30:81:09:1f:90:a6:c5:6e:a4:7a:7c:
2e:01:9e:c3:38:eb:b7:1b:46:bc:6b:3a:cc:66:4e:
4f:35:9f:4d:ca:db:6a:1d:74:17:5c:81:96:42:b2:
02:ee:ee:1f:89:31:30:2e:c5:14:67:1f:a8:23:30:
d9:49:fc:30:69:17:b7:1c:63:11:a8:ed:f4:c2:b9:
75:80:5b:cc:9a:d8:6b:fc:94:f4:90:d5:3f:ee:b2:
dc:3b:64:29:2e:39:14:87:52:e9:20:c5:9a:22:c6:
22:f0:62:24:76:bd:fd:98:28:38:32:2b:f6:09:38:
85:5a:80:3e:59:22:e4:5b:0f:d6:7f:15:25:d0:69:
14:dd:26:bc:d5:64:16:70:df:33:2f:63:bf:ab:07:
8f:9f:cc:a9:d8:a7:02:c4:53:e7:4b:b7:a1:33:7d:
06:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:28:55:93:CB:4B:0C:CE:F9:AC:30:64:D3:44:E3:B5:7C:9B:FB:F1
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/HyhVk8tLDM75rDBk00TjtXyb-_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
38:04:03:95:74:c0:85:86:76:c4:19:e5:77:29:35:78:b4:48:
ea:21:10:31:d6:34:89:82:ef:a7:c0:47:5d:26:0e:ba:8f:13:
0d:e8:5c:07:12:91:b1:f8:96:28:fc:fa:cd:ec:94:37:43:02:
50:08:3d:93:cd:e4:eb:20:31:e7:e9:cd:a1:0f:a6:54:4f:b0:
66:23:9a:78:38:e9:23:01:80:da:1d:6b:a0:25:71:a2:b6:4f:
b8:e6:93:06:bd:93:c6:f4:bb:53:51:a9:7f:d5:92:92:5f:24:
0d:81:57:7d:e1:c6:f9:40:6d:d0:5d:62:f1:80:a5:0c:d8:5a:
eb:8d:c5:80:19:6d:a8:54:86:3d:a5:b7:ca:77:61:03:8b:5d:
bb:5a:c1:5c:e3:eb:54:57:27:a6:c5:79:b1:4b:bb:c7:c8:0e:
80:34:fb:ba:d2:df:1d:63:cb:31:9a:a4:ad:a6:ca:41:0d:b2:
0c:e5:ad:65:5c:75:0c:88:a9:ea:fc:5b:c6:05:b7:58:60:27:
a2:85:ff:43:df:4c:ee:48:b4:c5:b4:c7:63:3b:93:f6:15:53:
69:cc:6e:96:e9:7a:78:1c:d3:8a:ae:b5:e4:ed:07:7f:ad:5c:
27:9d:f0:7b:85:be:23:58:fe:16:dc:38:a3:d2:0a:97:07:72:
da:64:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:01 2024 by rpki-client on console-ams.rpki-client.org