Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/iPAOPSKJ3Daeo6tRHzBhEcdj3as.roa
File: iPAOPSKJ3Daeo6tRHzBhEcdj3as.roa (raw, json)
Hash identifier: 9ZwcdSvAmvejBWvl7w4Vs5MQ3BeqrLlh10EmSWBNJOA=
Subject key identifier: 88:F0:0E:3D:22:89:DC:36:9E:A3:AB:51:1F:30:61:11:C7:63:DD:AB
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018CC3B6DC65A609E2DB02C7DE384EBBD8CA
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/iPAOPSKJ3Daeo6tRHzBhEcdj3as.roa
Signing time: Mon 01 Jan 2024 06:29:50 +0000
ROA not before: Mon 01 Jan 2024 06:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 09:18:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:dc:65:a6:09:e2:db:02:c7:de:38:4e:bb:d8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Jan 1 06:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88f00e3d2289dc369ea3ab511f306111c763ddab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:76:14:f5:ab:4c:b6:9d:90:db:ed:9f:41:cd:
0f:63:15:ec:7d:b1:6a:48:3d:cc:b5:b0:3c:73:6b:
04:c0:ff:1b:f5:fc:e5:8b:32:67:de:eb:16:e8:04:
d8:f2:b0:7d:20:ee:5b:e2:75:8d:c2:c5:1e:30:7c:
57:17:f0:64:e9:d3:45:f8:78:7f:fe:d5:17:70:3b:
cd:76:53:eb:50:bb:96:d5:57:e2:63:29:41:95:49:
ef:ed:bf:87:d6:e3:5b:97:9c:22:ff:99:e8:4d:85:
f8:07:1f:98:3f:bc:d8:dc:ec:dc:87:00:b3:3f:dc:
f6:9e:14:8c:99:15:97:47:d6:99:d0:5e:bb:0d:01:
93:38:50:e3:a8:2e:d8:e2:7f:0f:51:fa:46:d9:1d:
7d:65:0f:a0:65:8c:d9:66:15:5f:cc:82:1d:d0:d9:
20:7c:c9:7b:18:9f:28:9f:fe:bf:93:8a:06:f2:8d:
9e:2e:bc:d8:c2:cd:97:e0:a2:2f:c4:bd:0d:b2:94:
69:47:9a:4e:65:fd:f1:1a:44:f5:ac:04:5c:7b:e8:
f2:90:82:0e:65:a9:c4:92:68:1c:30:56:36:e7:28:
f9:be:2b:74:f5:5f:1e:70:45:af:96:a2:bc:0e:3d:
e7:49:3f:9d:52:f5:7a:d0:f5:d2:13:99:b4:2d:86:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:F0:0E:3D:22:89:DC:36:9E:A3:AB:51:1F:30:61:11:C7:63:DD:AB
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/iPAOPSKJ3Daeo6tRHzBhEcdj3as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1d:72:fb:92:b4:a6:d4:d0:bc:3b:15:9f:40:6f:49:cf:37:
81:d5:e0:a7:f2:21:1c:d5:d3:11:fb:26:7a:4b:a7:b2:4a:e8:
35:89:7f:44:75:f1:87:95:7c:40:3b:90:15:38:17:1f:43:e8:
75:99:e9:75:b9:44:06:e7:1b:51:2d:3e:f2:39:dc:34:be:98:
28:88:a5:e4:86:53:30:b8:1d:57:90:6b:46:96:bd:77:dc:78:
4f:56:05:f2:ea:74:64:ed:07:fc:50:d1:e7:d0:6a:2e:a9:12:
88:4e:81:64:39:ae:b7:aa:68:9c:7b:36:9e:3b:e7:7b:fd:d1:
84:8c:03:6f:ed:e8:33:5f:cf:30:f3:b4:37:5d:66:eb:0b:f4:
7e:0f:24:25:43:48:ce:f1:25:d5:33:08:08:61:ea:f5:6f:cc:
9d:10:eb:94:22:75:21:9d:b8:32:32:25:1e:d1:52:10:d0:6a:
7f:06:b5:54:d8:0c:b8:39:17:a9:92:38:7d:1e:e4:7a:48:cb:
63:0c:66:2e:89:49:c2:3a:6a:f7:83:cc:65:95:cc:ec:8a:f3:
fb:14:8d:f8:ea:9c:92:2b:fa:ef:22:15:28:59:5e:26:08:ca:
0a:f3:6e:7f:2b:a2:b8:5a:d5:b1:fa:4d:d9:21:11:5f:db:9f:
b6:bb:17:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 14:25:17 2024 by rpki-client on console-fra.rpki-client.org