Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JjfHPIfesmSJl1-yDyn_N2lSzrI.roa
File: JjfHPIfesmSJl1-yDyn_N2lSzrI.roa (raw, json)
Hash identifier: JrIMm/iRCJ+c6CHHbTWltlHt03j6MPJUMTAc6nD8U08=
Subject key identifier: 26:37:C7:3C:87:DE:B2:64:89:97:5F:B2:0F:29:FF:37:69:52:CE:B2
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018CC3B6DE53E066FDA67BEAE1ADC36B1818
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JjfHPIfesmSJl1-yDyn_N2lSzrI.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57235
IP address blocks: 81.31.224.0/22 maxlen: 24
81.31.233.0/24 maxlen: 24
81.31.228.0/23 maxlen: 24
81.31.230.0/24 maxlen: 24
81.31.234.0/24 maxlen: 24
81.31.234.0/23 maxlen: 24
81.31.235.0/24 maxlen: 24
81.31.236.0/24 maxlen: 24
81.31.236.0/22 maxlen: 24
81.31.238.0/24 maxlen: 24
81.31.240.0/23 maxlen: 24
81.31.248.0/22 maxlen: 24
81.31.250.0/24 maxlen: 24
81.31.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 13 Jan 2024 07:46:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:de:53:e0:66:fd:a6:7b:ea:e1:ad:c3:6b:18:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2637c73c87deb26489975fb20f29ff376952ceb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:a1:fc:db:89:18:be:53:2e:79:86:66:82:
d2:b3:ad:01:a3:f9:b2:43:a6:96:7d:c4:13:1a:19:
15:c5:c2:19:07:fd:e3:d4:5b:8f:00:13:03:7e:0a:
6e:60:a6:b4:16:ee:dd:6e:6d:97:fa:42:79:52:87:
e9:ef:7e:a0:61:da:56:9e:9a:e1:11:6b:b9:39:4c:
c2:5e:3a:64:60:40:73:23:2f:ee:c0:77:ab:3b:b1:
96:0d:d0:60:30:64:dc:6c:e5:0d:fa:ec:70:91:fc:
48:18:1a:11:05:eb:36:e6:e0:29:d4:e7:71:7c:df:
b4:55:30:75:8f:cc:ce:26:2f:5e:86:90:f2:e5:8a:
9e:af:6a:7b:0c:b7:9e:34:c6:09:15:71:c7:91:12:
0a:c5:79:42:29:73:2d:ad:8f:ca:7d:c0:fb:dd:a1:
cf:47:fb:ca:90:df:50:66:ee:cc:1e:2e:d4:1d:1c:
f6:fb:9e:bd:04:e1:df:86:55:7b:97:8b:93:57:b5:
43:40:0f:f0:81:3e:9c:47:10:89:12:3f:34:4e:42:
c3:54:61:53:0b:ec:cc:67:c3:2a:9f:fd:bd:bb:24:
bb:6e:0c:61:00:70:4a:cf:72:98:71:67:b3:6a:77:
41:6f:cd:47:a6:64:18:ee:3e:b9:c0:44:c6:de:20:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:C7:3C:87:DE:B2:64:89:97:5F:B2:0F:29:FF:37:69:52:CE:B2
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/JjfHPIfesmSJl1-yDyn_N2lSzrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.224.0-81.31.230.255
81.31.233.0-81.31.241.255
81.31.248.0/22
Signature Algorithm: sha256WithRSAEncryption
45:34:55:b8:9b:19:9a:60:80:66:72:a2:0b:c1:2b:30:a5:22:
14:20:01:51:fd:74:6e:f7:ba:89:25:b0:e4:e8:40:6b:15:4e:
9e:0d:e1:dd:25:dc:3d:68:b5:73:4a:2d:f5:5b:91:9c:41:b9:
f8:74:7a:4d:bc:55:3e:2e:8e:26:c7:80:92:aa:ca:f0:20:e5:
ec:65:34:ed:df:30:3e:ed:1f:c7:3d:bd:91:10:65:e4:4c:4a:
5a:10:e0:2a:06:ab:ea:46:6f:73:1a:a8:9e:e5:ef:a2:d0:de:
5f:94:5b:9e:c6:1f:11:d3:3d:41:0f:e1:8f:c7:e5:4e:ba:32:
3d:b9:dc:3b:bd:26:e5:0b:19:89:15:2c:f2:44:cc:7b:9d:08:
dc:b0:11:5a:a2:39:30:d4:0a:28:20:9a:c3:02:e9:4a:09:98:
46:f9:69:c9:da:86:c7:fe:59:2c:2e:41:c0:ae:a8:78:b6:50:
71:79:fd:ec:5d:16:f7:43:53:e3:79:85:fc:9a:25:c1:28:eb:
8b:e5:cb:8f:03:6f:bb:6d:e6:f1:14:f6:0c:69:71:c0:41:c5:
7f:c4:c7:90:35:9f:8e:13:16:c1:0a:a1:cb:a7:81:3f:08:d4:
e6:3f:36:24:3c:33:f3:5c:49:71:8c:b9:a0:2f:9d:79:63:ec:
27:9b:5d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 13 11:47:14 2024 by rpki-client on console-ams.rpki-client.org