Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/KcolSQhgXtkOYnjU69CssTjjYKo.roa
File: KcolSQhgXtkOYnjU69CssTjjYKo.roa (raw, json)
Hash identifier: 5U2j2J5b1X5V28U4pn4zGgPDpzlJResXxWFwt57iRE4=
Subject key identifier: 29:CA:25:49:08:60:5E:D9:0E:62:78:D4:EB:D0:AC:B1:38:E3:60:AA
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018A38BC9CC23DD6D2AEF706BE0D338272B4
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/KcolSQhgXtkOYnjU69CssTjjYKo.roa
Signing time: Sun 27 Aug 2023 20:43:19 +0000
ROA not before: Sun 27 Aug 2023 20:43:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:38:bc:9c:c2:3d:d6:d2:ae:f7:06:be:0d:33:82:72:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 27 20:43:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29ca254908605ed90e6278d4ebd0acb138e360aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:76:ac:9a:bb:4a:ea:3b:a5:39:83:d3:e2:
c1:bc:fe:b2:43:f6:16:16:45:52:0c:14:95:fc:b3:
f9:5b:41:46:12:68:40:02:e6:f3:25:fa:a7:4b:52:
57:ab:fe:f3:94:9f:0e:f3:e8:b1:b0:02:7d:16:e2:
28:8e:6d:1d:e8:30:e2:c7:55:9c:21:06:92:ae:b4:
0d:35:c3:ee:9d:e3:d7:a6:65:ab:42:fd:65:65:14:
c4:9e:80:8e:9e:9f:5f:65:d1:87:f6:1b:2d:3b:dc:
8a:f0:d2:3b:4a:ca:a7:85:65:2a:72:94:4e:68:09:
82:dd:d5:08:d3:1d:69:4d:f8:92:c0:b2:c2:be:54:
55:29:c7:95:a3:86:88:aa:c7:75:1b:f0:6c:a1:ae:
e3:3d:88:f6:ee:ec:78:13:47:53:d3:b8:05:71:ec:
ef:c2:8f:bc:30:85:98:45:1a:33:6d:29:36:1e:6d:
01:8d:f6:fc:76:ca:11:25:c2:bc:6f:1d:fa:b3:80:
7f:57:c4:b9:c3:6a:82:25:90:0c:82:e9:93:18:d2:
d0:67:34:d4:18:13:33:ab:17:e7:b0:99:6e:ab:fb:
00:c4:2f:85:92:c6:2a:01:f7:76:80:eb:c1:f7:c9:
7f:2d:38:bb:5a:85:39:40:f2:cb:bf:c5:34:fb:1b:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CA:25:49:08:60:5E:D9:0E:62:78:D4:EB:D0:AC:B1:38:E3:60:AA
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/KcolSQhgXtkOYnjU69CssTjjYKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
17:f2:14:a7:be:26:57:8d:46:9f:d1:49:62:a5:bb:69:50:2d:
74:5a:97:2e:da:16:38:74:b1:22:8d:2a:0b:42:09:10:16:0a:
ca:5b:c0:93:b0:c3:f3:80:6e:78:17:6f:fc:4c:69:58:80:45:
62:21:c2:cf:82:e7:3b:ac:ab:69:8b:38:54:f1:07:a6:c7:fa:
87:7e:0f:32:02:a4:7f:68:af:3a:e8:91:d0:9b:b3:d0:62:72:
53:53:ba:85:e6:f3:a1:bc:ba:b6:68:80:88:92:2f:aa:fb:9d:
cb:79:15:08:0b:52:10:e8:37:d7:05:bc:5d:c2:f1:20:1d:a7:
d1:30:a7:f3:7a:b5:c1:39:16:44:1c:01:3b:85:1c:03:07:73:
0f:19:39:63:46:66:31:61:0c:71:96:31:e9:cf:40:12:c8:70:
c6:c7:87:c2:39:bb:ff:e8:1d:51:1f:71:31:ad:dc:be:d4:9e:
0f:f1:aa:7e:b6:36:96:92:25:ef:74:6d:e6:43:3f:33:02:78:
64:33:d0:35:b3:b8:66:f5:f7:44:cf:7f:fd:1f:6c:3f:2d:f4:
40:be:a8:a0:37:0f:c0:9f:dc:21:69:e7:bb:29:af:6b:27:b8:
80:d3:ba:8c:42:67:33:47:1b:43:17:c9:35:60:06:77:4e:0a:
6a:92:c9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 18 07:56:07 2023 by rpki-client on console-ams.rpki-client.org