Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/dEfV0_nSIVUQyPjfENcybYSbIOY.roa
File: dEfV0_nSIVUQyPjfENcybYSbIOY.roa (raw, json)
Hash identifier: 5ucnEzlLrG2/lSr9RF6fnexNLq3EQRoeCF43LnRjmT0=
Subject key identifier: 74:47:D5:D3:F9:D2:21:55:10:C8:F8:DF:10:D7:32:6D:84:9B:20:E6
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018F44DDC96754F710C542CD1DFE66B1B04E
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/dEfV0_nSIVUQyPjfENcybYSbIOY.roa
Signing time: Sat 04 May 2024 18:28:56 +0000
ROA not before: Sat 04 May 2024 18:28:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 14:39:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:44:dd:c9:67:54:f7:10:c5:42:cd:1d:fe:66:b1:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 4 18:28:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7447d5d3f9d2215510c8f8df10d7326d849b20e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:67:16:b1:3a:ee:e8:ea:5c:13:ee:77:46:
23:86:36:fb:7a:5e:ee:cd:1b:7a:2d:50:cc:2b:9c:
ff:2c:45:81:36:b3:fe:b1:3f:39:cc:2b:f9:8e:8d:
6e:3a:ee:90:c3:83:5f:6a:49:5f:da:ba:09:5e:49:
e6:3e:40:e7:fa:2f:e8:21:ab:6c:91:19:08:4e:55:
86:9b:9a:55:b1:d6:5d:f1:8f:7a:24:3b:41:7c:f9:
ec:16:46:fb:86:3d:50:71:86:a6:cd:52:c7:cf:6b:
74:31:63:fb:89:45:29:54:e0:40:06:44:41:c8:4b:
db:af:22:b7:72:81:6a:bc:30:ca:44:f3:00:38:9d:
2d:47:e0:16:8d:d4:5a:72:46:ce:44:f4:96:95:d8:
e1:f1:85:1f:d5:21:61:e9:f8:46:f0:06:0f:71:7d:
9a:68:79:35:6a:c7:a7:9a:6b:f3:f3:c6:17:b8:34:
48:32:22:c4:e4:ae:81:2b:a9:98:a1:78:6e:f1:ab:
bf:ec:a8:e7:a8:2c:18:3b:18:dd:d4:4f:54:dc:68:
80:28:17:95:00:b8:8f:04:c2:a4:d9:1b:b3:7d:c4:
89:59:1f:e7:4b:cb:c9:47:eb:1e:0d:9d:41:14:d6:
5d:7a:fa:4f:f6:82:c6:6e:94:19:7a:51:95:2f:67:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:47:D5:D3:F9:D2:21:55:10:C8:F8:DF:10:D7:32:6D:84:9B:20:E6
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/dEfV0_nSIVUQyPjfENcybYSbIOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
75:cf:25:9c:7d:3f:84:7a:fa:3b:ad:99:93:67:1f:be:b7:80:
b0:cc:05:f7:93:a6:80:0e:52:39:e7:00:ee:b2:60:ea:63:81:
ef:1e:96:99:70:6e:2e:94:ed:f4:ee:59:8d:e2:51:46:63:d8:
20:ec:8a:80:77:5d:d2:e0:85:f6:ec:fe:dc:29:4f:29:b9:0e:
43:c8:e8:51:fa:ca:54:2d:83:78:dd:c0:26:71:2b:63:ae:9a:
b1:75:67:2b:87:96:0e:d0:39:18:35:7d:ec:5b:da:dd:8f:0d:
1c:ba:21:49:e9:c6:eb:29:6b:30:24:3b:c0:e5:1c:4e:30:c0:
cc:b0:dd:a3:97:09:3f:8c:30:72:18:ea:26:00:28:8d:c2:84:
a0:02:7f:86:f3:be:50:cb:f9:70:06:db:c1:a4:f7:4a:7b:35:
b2:92:44:d7:01:c8:73:f0:a1:80:59:22:1e:d9:c7:90:9e:26:
5e:95:64:b4:85:9e:a2:03:42:f3:d1:ea:c4:9c:c1:d0:6f:0f:
54:44:53:45:2f:a8:9d:3e:7b:47:b2:58:9e:f3:7b:b3:99:ed:
8e:ac:a1:dd:64:80:a6:49:d7:40:15:33:41:d4:0c:65:f5:81:
58:bf:b5:4f:f3:02:07:67:c3:ef:80:e0:3e:e1:2a:bc:ec:65:
1b:4e:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 16:42:36 2024 by rpki-client on console-fra.rpki-client.org