Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/YSVpXw7eahr0OyNmR09mgLU5t4M.roa
File: YSVpXw7eahr0OyNmR09mgLU5t4M.roa (raw, json)
Hash identifier: azwoMy5zHfI0T+jjhZETCQqcGMnK6URKEQlzpKwbLvk=
Subject key identifier: 61:25:69:5F:0E:DE:6A:1A:F4:3B:23:66:47:4F:66:80:B5:39:B7:83
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018731FA36D58983619B25C21A6F977D2239
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/YSVpXw7eahr0OyNmR09mgLU5t4M.roa
Signing time: Thu 30 Mar 2023 10:04:54 +0000
ROA not before: Thu 30 Mar 2023 10:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.242.0/23 maxlen: 23
81.31.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:31:fa:36:d5:89:83:61:9b:25:c2:1a:6f:97:7d:22:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Mar 30 10:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6125695f0ede6a1af43b2366474f6680b539b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:26:85:08:1d:81:ef:86:f5:08:a3:63:c4:ac:
91:52:f8:83:d1:b6:20:52:86:ea:13:92:43:a6:7f:
2d:18:6c:d3:c4:50:73:8e:4d:dc:1f:22:f8:5a:c9:
be:07:8d:0e:a1:80:7a:83:e1:d9:dd:5c:43:10:e5:
5a:df:76:4a:4a:c0:a4:22:eb:e4:fe:aa:04:fe:b6:
6e:30:fb:c7:f7:c7:1b:37:08:83:15:b5:79:20:74:
1a:9f:0d:4e:36:8d:74:47:e4:dc:23:09:4d:c9:03:
db:d3:c2:aa:8f:92:a0:b2:00:d4:dc:0b:ef:50:b1:
68:74:94:ec:97:f1:0d:2d:4b:48:85:0b:de:6f:27:
b5:9c:3e:19:77:70:59:63:3a:7e:2b:76:0a:f1:bf:
4e:a3:46:e7:3b:f4:77:52:1f:49:df:cc:70:1e:a7:
26:3f:ca:54:88:25:00:51:35:d3:ec:8c:a6:bf:2f:
71:5e:11:15:e2:70:4d:05:dd:d4:6e:3f:ae:80:d1:
30:25:68:b3:e8:d0:aa:50:c4:01:12:b7:b8:4e:69:
d4:2c:09:a8:4c:86:10:6a:79:62:14:db:c2:a9:06:
e1:a3:c5:88:95:b0:b0:05:b3:7f:fa:77:aa:0d:55:
d7:2e:47:3d:a5:27:fa:c2:7f:57:ac:2d:3d:f3:4e:
c8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:25:69:5F:0E:DE:6A:1A:F4:3B:23:66:47:4F:66:80:B5:39:B7:83
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/YSVpXw7eahr0OyNmR09mgLU5t4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0/23
81.31.252.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:b4:77:f8:5c:59:73:21:d9:30:84:2d:44:55:09:fa:5e:05:
47:10:ea:61:e4:d5:41:2e:d4:a2:eb:19:13:e6:91:ba:93:39:
b4:b3:08:3d:fa:f0:25:f2:12:da:25:1b:19:ad:cd:b5:4a:27:
a6:9e:9a:67:76:bb:80:5c:09:37:b1:c1:f8:46:de:52:18:2a:
93:73:a3:82:93:fa:36:68:a0:29:89:12:c5:de:af:63:ac:85:
0c:df:d3:50:4a:fa:12:1d:19:d1:f7:42:c0:1e:83:a1:1b:c5:
4e:26:65:3f:3d:48:61:22:f0:8e:b2:1c:15:3a:d0:35:75:1a:
30:e7:22:a0:fd:24:ce:86:fe:1f:72:92:aa:cf:08:ad:4e:ef:
45:44:94:64:f5:04:96:fd:2d:6f:c7:44:b4:a5:a7:da:bf:b3:
36:7b:57:d5:34:6a:f5:76:35:ff:35:2a:8f:dd:eb:c7:40:42:
03:da:c5:12:77:ea:95:67:8a:ca:fc:bf:9f:0c:e9:4b:4f:b8:
1d:d8:66:df:29:71:e4:19:aa:d5:e3:6e:6c:75:4c:b5:b4:a9:
61:0b:3e:6d:35:56:f7:9c:28:18:61:c4:af:46:ef:7c:14:30:
10:4e:d6:ff:11:6e:87:c3:28:e0:1e:bf:a8:03:48:d3:0d:12:
d9:f5:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org