Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/gJaTl53iQIq3repfYQ6URwGayeE.roa
File: gJaTl53iQIq3repfYQ6URwGayeE.roa (raw, json)
Hash identifier: zHfWhYehZuHUi47vlPu8xiN5fMXC1RbPr1EVHBTFmps=
Subject key identifier: 80:96:93:97:9D:E2:40:8A:B7:AD:EA:5F:61:0E:94:47:01:9A:C9:E1
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018FE733625C969A5B4069DBA3E0EA944B49
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/gJaTl53iQIq3repfYQ6URwGayeE.roa
Signing time: Wed 05 Jun 2024 07:00:55 +0000
ROA not before: Wed 05 Jun 2024 07:00:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.234.0/23 maxlen: 24
81.31.235.0/24 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 05 Jun 2024 14:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e7:33:62:5c:96:9a:5b:40:69:db:a3:e0:ea:94:4b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jun 5 07:00:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=809693979de2408ab7adea5f610e9447019ac9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:84:14:85:e1:41:e2:08:3b:88:07:7d:05:
87:22:fb:22:1a:23:54:d7:92:98:fb:f1:f1:df:10:
5d:44:26:2c:4b:95:3f:ab:3b:b1:b7:60:8a:8c:0a:
89:18:99:ef:8e:66:64:b3:c0:30:59:75:3a:af:47:
2c:87:b4:3d:68:af:10:24:10:39:c1:0f:7f:58:3d:
36:fe:1a:34:22:7d:aa:e2:cf:d9:d5:e5:98:79:fb:
6c:2b:af:ee:77:30:e6:7e:43:30:0f:19:13:13:8b:
d9:8d:61:5e:1a:9f:ba:d3:b7:19:0c:fa:8f:2f:68:
b0:99:72:5e:28:09:14:de:62:7a:bd:08:46:92:99:
3a:d2:bc:fa:76:c8:27:e6:72:46:ec:e0:5c:b8:da:
19:14:3a:e5:ac:b9:bc:ab:02:ff:f5:cb:e0:66:c6:
b2:69:52:97:d2:f5:e2:ef:cd:e6:a2:b0:2d:3d:b1:
f1:4a:35:47:72:db:f5:9c:14:eb:35:25:92:19:24:
49:ec:33:ad:21:0f:9d:2b:ef:46:fd:f3:80:bf:35:
d1:b4:73:07:fa:1e:9f:f5:9a:2e:55:5c:8d:f3:ea:
a0:68:85:4c:3c:33:d2:f5:79:dc:bc:29:8b:8e:63:
4e:46:2b:23:42:8e:dc:89:2e:2b:48:ae:16:63:68:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:96:93:97:9D:E2:40:8A:B7:AD:EA:5F:61:0E:94:47:01:9A:C9:E1
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/gJaTl53iQIq3repfYQ6URwGayeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/23
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
ee:7a:00:2c:3a:ad:87:75:3c:9a:08:6f:47:2e:53:2a:ca:46:
f7:62:bf:fc:06:40:b2:ad:66:69:71:61:4f:99:2c:dc:83:10:
44:56:7c:f7:73:af:86:ea:cd:af:14:5b:ba:2b:61:f2:af:f1:
f9:52:7a:db:83:0f:bb:82:62:2e:61:62:32:b4:d9:ef:d9:c9:
b9:a3:0f:4e:70:6c:c9:c3:44:0a:88:ec:96:a9:e5:aa:4e:7b:
55:f2:5a:35:14:8e:18:e0:88:c1:04:c9:49:e9:44:ed:14:b2:
c1:3c:3d:eb:8c:ad:86:a9:51:3f:b8:90:af:e6:bd:75:58:fe:
49:f1:73:07:44:5a:bb:a4:24:fa:a7:39:07:a9:59:bb:08:6a:
d3:db:7c:c2:9e:91:c3:ca:a5:65:41:6d:94:d7:bc:e3:5e:8b:
ba:cd:14:41:ab:d0:a9:9d:2d:c5:01:6f:d6:c1:43:45:12:ad:
2d:b1:1a:d9:db:34:f7:a6:5c:4c:cf:f5:92:b1:2b:ad:ec:52:
a8:63:2e:4a:3a:3e:a2:28:e4:80:de:6e:16:2d:ea:b1:c6:00:
05:77:69:52:e4:69:c7:6d:a7:50:51:0f:ad:56:a5:c1:a0:92:
17:6b:c1:1a:f0:fc:81:af:bd:71:4c:6e:a7:22:90:34:45:d1:
c1:05:f8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org