Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ZJe0PmBK_1jnulOv_OADal7lkEU.roa
File: ZJe0PmBK_1jnulOv_OADal7lkEU.roa (raw, json)
Hash identifier: nrrbzS5NYUkZnRZXoeEWyZoo/AX5y//X5kw2dKTjguc=
Subject key identifier: 64:97:B4:3E:60:4A:FF:58:E7:BA:53:AF:FC:E0:03:6A:5E:E5:90:45
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01856D1CCE12B66959DC0B01EA142B491D7F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ZJe0PmBK_1jnulOv_OADal7lkEU.roa
Signing time: Sun 01 Jan 2023 11:34:42 +0000
ROA not before: Sun 01 Jan 2023 11:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.31.244.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 14:14:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:1c:ce:12:b6:69:59:dc:0b:01:ea:14:2b:49:1d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 11:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6497b43e604aff58e7ba53affce0036a5ee59045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:38:87:c7:a5:4a:77:ff:e9:15:03:2b:07:15:
be:ef:56:f9:91:b9:e0:18:7c:93:b2:df:7e:73:e9:
07:b3:a6:89:ca:4e:9d:50:04:c3:5c:7a:dd:23:9f:
4e:ce:72:03:25:2b:d6:73:90:e3:0f:5f:f7:6b:6a:
2c:4e:bb:b7:52:a3:89:f0:1e:07:7b:4b:7e:77:04:
51:f4:5b:ea:c0:3b:c5:25:b9:c2:9b:60:cf:4e:fc:
73:c6:3f:9d:a2:cb:50:7f:6d:6a:2b:c0:d5:4d:dd:
3b:ed:b5:d3:db:10:49:53:10:d3:74:0f:40:d1:6a:
7f:5e:1e:24:2f:57:75:c3:48:09:6b:5d:75:53:e5:
f6:93:d7:4b:08:a7:07:33:bf:1d:2a:1c:9c:0c:78:
0e:4f:2a:82:6d:6f:52:03:4d:6c:68:ed:4c:78:c4:
56:59:ed:5b:15:a3:be:30:16:05:5f:47:90:a2:ef:
66:e4:ec:df:44:30:26:f0:5d:38:82:8e:34:9f:54:
be:e7:05:9b:d5:22:2a:55:3d:0a:ca:f7:1e:be:ab:
9f:55:bc:d7:56:40:c0:3a:52:96:d4:f3:f7:07:ec:
97:83:11:a7:55:71:a3:7f:55:b3:76:16:d0:c6:1d:
c7:cb:6a:4a:d1:6f:57:06:92:78:ee:e8:c3:80:84:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:97:B4:3E:60:4A:FF:58:E7:BA:53:AF:FC:E0:03:6A:5E:E5:90:45
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/ZJe0PmBK_1jnulOv_OADal7lkEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/22
Signature Algorithm: sha256WithRSAEncryption
33:9b:e9:11:4f:76:12:6d:dd:63:47:c9:08:42:14:13:84:aa:
73:1c:f5:80:b0:ef:bf:81:41:4e:5e:75:d0:71:c3:08:56:61:
56:48:dd:b6:1e:cd:37:8f:b8:5f:74:2e:27:eb:3f:97:19:dd:
2c:01:6c:f9:6e:2f:0b:f9:f4:a9:59:cc:3b:28:b1:1a:c8:1f:
d4:bd:fa:aa:6d:04:77:82:1b:7d:8a:44:50:7c:3d:8e:85:7d:
7d:12:81:90:93:a3:0f:f8:4a:38:40:e9:5b:3a:0b:5f:a4:9c:
a6:1f:d2:88:3b:3d:68:fd:cd:ab:44:d2:15:35:de:5a:04:f4:
d8:b3:fb:80:34:6c:26:2d:c4:02:53:ab:29:ad:2d:5c:58:66:
f6:bb:ec:dd:d8:0d:bb:a4:2c:46:df:ca:a2:db:4a:73:88:09:
ac:45:18:b4:b0:07:e0:9c:56:fb:cc:5b:f7:6a:45:83:02:ff:
77:0a:2d:2e:6c:f1:e2:a0:cd:a7:7f:aa:be:7f:7f:09:a3:a1:
dc:6a:c7:fd:af:29:ff:a4:db:4b:ab:81:a0:fc:d5:a7:84:67:
71:a4:ec:5f:e6:f0:29:68:88:f9:91:8e:ed:f9:0c:c9:c0:e4:
0c:7c:f8:94:d3:aa:b0:df:22:32:0e:4d:cf:6c:69:40:97:82:
a2:ae:c5:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org