Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/frlj1MkcNpqhUP4xM63-khI0MTE.roa
File: frlj1MkcNpqhUP4xM63-khI0MTE.roa (raw, json)
Hash identifier: keKZa/T8ErWoGZd5PTCWLCOxuVNmL+E2rk3/YPpeWBM=
Subject key identifier: 7E:B9:63:D4:C9:1C:36:9A:A1:50:FE:31:33:AD:FE:92:12:34:31:31
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018AA73039D7042A84DC7D5911B35213D46F
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/frlj1MkcNpqhUP4xM63-khI0MTE.roa
Signing time: Mon 18 Sep 2023 07:27:50 +0000
ROA not before: Mon 18 Sep 2023 07:27:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 81.31.232.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:30:39:d7:04:2a:84:dc:7d:59:11:b3:52:13:d4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Sep 18 07:27:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7eb963d4c91c369aa150fe3133adfe9212343131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:31:9f:e8:ab:27:e0:c8:fe:8d:64:b1:07:
68:67:5c:8d:29:db:7a:33:c5:b0:a1:f7:91:c2:91:
f9:42:64:f0:30:53:7a:24:b8:7a:16:0b:f3:3b:9f:
70:26:6b:20:ea:dd:eb:fa:90:0a:df:65:b5:d6:d9:
9a:7b:d7:d7:53:2e:b6:ef:c0:80:f6:bf:2e:42:25:
2b:30:b6:13:a1:00:d0:37:a4:a9:98:6f:ca:24:e1:
df:bf:7c:1f:8d:75:5f:21:6b:8f:00:9b:48:20:d3:
4b:7e:ff:72:6b:5a:4a:e6:12:74:63:0d:c8:a5:32:
b2:53:84:db:f5:c5:fd:ba:63:9c:44:66:d6:75:34:
f0:41:f9:0b:67:f4:48:a6:b4:0c:c0:e1:77:35:9b:
9e:4b:52:f2:3c:aa:cd:c9:aa:a5:98:cd:5f:f6:a1:
34:f3:1f:06:1f:f6:ff:e7:3e:db:6a:8c:b2:9b:3c:
23:62:aa:21:a5:6e:3a:f4:25:82:44:5c:8b:ac:ef:
e9:11:04:ea:5b:cf:e0:27:dd:57:87:26:f7:02:a0:
0e:49:30:4b:e8:41:ea:e7:c1:76:3b:51:57:fb:8c:
21:a7:fd:90:bd:90:3e:aa:e1:e6:0d:92:64:05:40:
68:b7:11:91:74:f5:12:2e:a7:5c:e0:64:28:4a:a8:
fc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B9:63:D4:C9:1C:36:9A:A1:50:FE:31:33:AD:FE:92:12:34:31:31
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/frlj1MkcNpqhUP4xM63-khI0MTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:83:40:ad:e7:48:bd:18:12:36:bb:2f:92:6f:f1:20:90:3c:
cd:80:f7:a5:89:d9:7f:07:76:d4:8e:b2:a5:d1:df:6a:42:42:
66:ed:1a:24:b4:df:1f:77:61:93:ca:ff:53:98:bd:cc:dc:42:
30:ba:05:80:ed:d0:ad:e8:47:9c:86:43:5c:9e:f1:97:9b:58:
1d:91:6b:9a:d9:f1:d4:95:db:37:a8:23:cb:c6:af:2b:91:60:
e4:f7:e3:7d:19:37:9a:e1:98:08:f9:72:3e:fb:e3:ac:c1:a8:
45:c9:76:b7:0f:37:3d:e1:1f:c5:76:47:1d:1a:78:d5:61:50:
21:12:87:e2:d0:c3:78:84:a5:a7:c7:5a:b0:60:20:cd:38:b3:
61:81:72:9b:dc:fd:42:0e:ce:3e:67:ea:b9:15:b1:c9:a8:58:
7d:7d:00:0a:f1:03:11:50:e6:63:03:c3:04:4f:4a:c6:24:b5:
f2:74:35:ea:46:8b:e3:6a:b5:69:be:59:6c:e4:c7:76:ee:c6:
50:72:67:d9:15:60:6b:da:13:d6:9d:78:77:b0:50:50:6b:c2:
cd:27:8e:d4:a0:ec:aa:ed:ef:f5:3b:9a:78:d7:1a:63:64:a3:
c3:0b:d8:d0:76:8d:bf:a8:6f:1c:19:56:5a:9e:50:d5:f9:cd:
5c:82:68:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 18 03:46:24 2023 by rpki-client on console-fra.rpki-client.org