Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/_N6-avdr6VeN7aKgLWxr3lnVkQ8.roa
File: _N6-avdr6VeN7aKgLWxr3lnVkQ8.roa (raw, json)
Hash identifier: jvuSBxj0aINpys+TjIn7CQnYHHAZHKEY/tuMEqOYJzo=
Subject key identifier: FC:DE:BE:6A:F7:6B:E9:57:8D:ED:A2:A0:2D:6C:6B:DE:59:D5:91:0F
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018739E53462ED00F990D7C6DA0DB67EA6C4
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/_N6-avdr6VeN7aKgLWxr3lnVkQ8.roa
Signing time: Fri 31 Mar 2023 22:58:54 +0000
ROA not before: Fri 31 Mar 2023 22:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.31.242.0/23 maxlen: 24
81.31.252.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:e5:34:62:ed:00:f9:90:d7:c6:da:0d:b6:7e:a6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Mar 31 22:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcdebe6af76be9578deda2a02d6c6bde59d5910f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:81:85:b0:51:ba:f4:e4:4c:c5:1f:91:03:
e2:ad:56:9a:a9:87:20:c8:d8:bc:1e:36:82:8c:ef:
ad:b9:8b:df:fe:1f:5a:7d:4a:81:de:88:b1:40:00:
d6:e7:72:35:25:b4:a9:82:24:58:f7:98:7e:58:46:
29:e0:84:e1:f7:b3:77:1b:41:f9:67:43:4f:16:d4:
0a:e5:3f:a9:2d:02:e4:81:9c:51:f3:fb:a8:d0:7e:
03:a0:e5:10:de:4f:af:96:df:69:65:06:0a:07:39:
1c:e2:9c:b8:87:98:4d:d8:16:8d:d0:b3:20:45:2a:
ff:ab:4b:43:78:27:7f:6d:7d:4f:f2:74:fb:c4:25:
0c:96:1c:ec:b3:52:be:88:b7:92:63:2b:b5:78:1d:
d9:5d:ae:63:66:20:0e:ec:11:d4:4a:6a:1c:96:6d:
06:7b:e4:34:75:0f:3e:e3:a1:5a:50:33:9b:c7:6a:
3a:88:89:a9:1c:2c:0a:91:81:56:98:b9:00:aa:d7:
7c:8a:51:e5:8b:cd:4c:95:a4:fa:f7:9d:48:b5:51:
c9:a1:ad:f1:b0:45:4b:a2:e8:67:9f:9c:8c:6f:3d:
fd:a3:fe:8c:8f:7a:5d:f4:a8:2d:7c:e4:2f:2f:28:
2d:e8:a2:b5:64:32:82:17:0a:b7:dd:6d:a7:c6:97:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:DE:BE:6A:F7:6B:E9:57:8D:ED:A2:A0:2D:6C:6B:DE:59:D5:91:0F
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/_N6-avdr6VeN7aKgLWxr3lnVkQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.242.0/23
81.31.252.0/22
Signature Algorithm: sha256WithRSAEncryption
83:9e:3c:38:b3:e2:79:af:10:f8:4e:db:e4:6d:66:86:fd:ff:
82:e1:86:12:5a:68:8a:5f:8a:53:97:38:38:96:ce:9c:50:41:
4d:e8:98:1c:13:54:59:30:77:c3:87:fa:23:02:bb:2b:15:41:
bc:f0:7d:ca:88:65:94:51:a7:5e:b4:2e:73:26:3b:fd:66:37:
28:bc:06:83:9e:12:92:9d:15:21:fa:18:89:a0:81:b4:48:bc:
07:68:39:eb:d7:fb:99:83:a6:85:c8:f9:43:46:43:c5:9b:b7:
9d:2a:a9:a0:f9:2d:51:05:61:99:fa:00:a6:cc:42:58:70:b4:
a5:94:ee:26:d1:c7:40:53:9c:6e:40:d2:6e:b8:ef:6b:01:9c:
1f:8e:36:1b:4f:2f:2a:83:6a:51:c8:c6:71:87:7d:a4:34:94:
ac:14:21:49:74:af:e2:15:75:dc:3f:c3:49:31:7d:f2:69:96:
7b:a4:c7:23:10:92:f1:5d:7f:54:95:ce:f6:9a:c5:a2:05:7b:
75:72:64:9a:33:c0:85:df:59:f5:e7:21:e0:ab:4f:00:43:a9:
3e:93:98:bc:9f:bb:d7:a2:4e:46:f9:b4:44:cc:e8:57:6f:53:
50:94:9d:c5:38:e6:c8:38:80:c4:e9:c6:b9:e3:e7:9a:75:7d:
6d:68:b6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:09:21 2024 by rpki-client on console-fra.rpki-client.org