Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/YXXICRIoSCpvqQEWi4PWKlGsLRk.roa
File: YXXICRIoSCpvqQEWi4PWKlGsLRk.roa (raw, json)
Hash identifier: eo6tMi2GRpWegDmyaPpzRduGZWuXo3rbKwpawbCRt1w=
Subject key identifier: 61:75:C8:09:12:28:48:2A:6F:A9:01:16:8B:83:D6:2A:51:AC:2D:19
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018A1BE8A196252A83F182149AA77969FD54
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/YXXICRIoSCpvqQEWi4PWKlGsLRk.roa
Signing time: Tue 22 Aug 2023 06:22:24 +0000
ROA not before: Tue 22 Aug 2023 06:22:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.232.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
185.84.162.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1b:e8:a1:96:25:2a:83:f1:82:14:9a:a7:79:69:fd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 22 06:22:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6175c8091228482a6fa901168b83d62a51ac2d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:60:2c:00:2a:a0:0b:a9:9b:75:32:4b:ce:95:
b5:83:28:b2:6c:7d:3f:28:9a:00:d0:05:8f:da:2c:
a8:23:f1:98:ac:4c:0a:ad:85:a3:40:9b:9d:65:28:
ff:46:ac:2c:d2:17:00:29:30:f8:cb:9c:b2:e7:9d:
a9:2f:65:b9:46:4d:86:8d:96:37:82:c2:b8:4f:d2:
e7:95:45:fd:71:cc:f0:47:31:19:d0:73:06:6d:4e:
b0:9d:81:5a:25:49:da:32:ef:3a:d6:ac:f1:1d:0f:
de:e3:54:6c:82:68:b2:c9:e9:41:30:90:5f:65:06:
86:65:1a:97:8a:e3:bf:1a:37:d3:b3:cb:60:c0:14:
4d:f9:8f:a3:8a:c1:0d:37:d9:16:27:9e:6d:e7:e1:
05:53:54:16:21:77:84:66:e9:02:ed:cf:49:b4:f2:
02:7b:9e:fe:dd:0b:ea:ba:12:e6:04:33:a5:7e:00:
36:05:43:54:b9:33:ba:07:5e:ae:35:e1:aa:36:cb:
3e:f3:5f:a3:e8:3f:f8:d2:26:34:32:65:b3:c1:67:
df:58:21:fa:22:23:52:a9:bd:c0:4e:21:26:63:b3:
f7:e5:41:39:0f:94:7f:4f:58:28:34:e8:0f:79:96:
be:56:a2:dd:8b:42:df:1d:b0:b4:63:1d:be:17:2f:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:75:C8:09:12:28:48:2A:6F:A9:01:16:8B:83:D6:2A:51:AC:2D:19
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/YXXICRIoSCpvqQEWi4PWKlGsLRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
81.31.242.0-81.31.247.255
185.84.160.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:66:a8:ee:64:44:41:16:04:c6:a6:c2:64:0a:19:c2:9a:f8:
6f:38:f8:ee:ae:ba:af:64:6e:56:9c:85:34:07:e6:6f:7d:d9:
23:4e:db:61:bc:10:81:9c:06:7d:10:77:e0:95:6c:5f:a5:64:
f3:4e:31:71:ea:05:56:51:f5:09:69:46:91:04:35:53:0c:8b:
64:61:57:9b:1e:ed:30:dc:00:bb:55:eb:b0:a5:6b:06:ad:2b:
46:bf:8f:64:f5:eb:50:87:53:47:e7:a1:b1:4b:25:8f:83:43:
1f:9c:38:03:c7:27:8f:6a:a1:80:3a:0e:79:a3:26:13:60:d7:
2c:1e:74:ff:ee:f3:2c:68:60:21:8a:72:92:1f:b8:34:01:ab:
be:25:6e:1b:5a:28:9e:82:3d:09:1c:cb:5f:ba:27:f0:03:b0:
38:a7:f1:a5:45:0d:92:98:dd:35:79:ba:26:ed:3d:d4:34:bf:
45:e6:02:67:6c:7e:8c:e2:2b:fd:6b:27:bb:f7:b0:ef:73:d4:
91:04:fa:d0:80:f1:dd:b0:9a:69:e1:7a:69:0c:cd:22:e2:d6:
93:07:a8:c3:de:dc:0f:13:7d:f6:a2:13:0f:86:da:26:30:28:
b3:1a:8d:21:2c:b5:4b:93:cc:e9:56:9b:cc:23:e2:07:bc:d6:
17:99:bc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 27 21:08:48 2023 by rpki-client on console-fra.rpki-client.org