Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/m6cULGk4CYz9m3spVwoqWlcmxOQ.roa
File: m6cULGk4CYz9m3spVwoqWlcmxOQ.roa (raw, json)
Hash identifier: NYwYsQFAO5Xhwo0QujvbJvopTqkvIBNyO155/mC/jiM=
Subject key identifier: 9B:A7:14:2C:69:38:09:8C:FD:9B:7B:29:57:0A:2A:5A:57:26:C4:E4
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0189BD2A13ADAA6306098C7B97BFC9FAA618
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/m6cULGk4CYz9m3spVwoqWlcmxOQ.roa
Signing time: Thu 03 Aug 2023 20:49:58 +0000
ROA not before: Thu 03 Aug 2023 20:49:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48716
IP address blocks: 81.31.246.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:2a:13:ad:aa:63:06:09:8c:7b:97:bf:c9:fa:a6:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Aug 3 20:49:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ba7142c6938098cfd9b7b29570a2a5a5726c4e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:2e:b3:87:16:d9:25:0c:88:68:97:1d:e2:
04:03:34:13:75:da:cd:0c:b3:7e:6a:55:4a:14:af:
4f:d5:29:5d:1e:12:0f:a9:8f:db:01:22:bb:37:0b:
3c:f4:2b:f7:8d:83:e1:6b:f8:27:e6:17:7c:e4:75:
df:33:7d:7f:c9:32:c7:84:75:e2:50:40:8a:6a:4a:
d0:32:3d:f9:49:38:32:55:ec:06:02:e9:9e:d6:4a:
cd:e8:90:be:b6:c6:58:78:5e:ab:f2:65:60:72:db:
4b:51:d1:62:ff:76:ad:fc:94:be:3f:13:b7:0f:e1:
2d:6b:62:81:5b:ad:bd:15:d4:be:28:12:7e:2a:0a:
cd:2b:a7:48:e9:14:9a:f9:29:5d:35:2a:ae:50:3a:
11:f7:e8:2c:1a:13:a8:fd:a0:bf:ec:73:14:62:9c:
db:ec:03:5b:b2:16:36:73:40:5d:6f:ab:c8:87:79:
bd:19:6f:25:4b:51:e8:66:bf:51:ec:a4:e5:53:4d:
1e:4d:16:3c:4b:1e:0d:be:3f:8f:e3:49:5a:91:69:
41:6a:6f:95:7f:cc:c3:bf:fd:f7:b6:8e:0d:a3:c3:
46:d2:d9:56:c7:3a:6f:10:f1:f0:0b:c4:3a:81:61:
bc:41:dd:84:41:5b:05:51:df:26:91:f2:83:09:63:
98:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A7:14:2C:69:38:09:8C:FD:9B:7B:29:57:0A:2A:5A:57:26:C4:E4
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/m6cULGk4CYz9m3spVwoqWlcmxOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.246.0/24
Signature Algorithm: sha256WithRSAEncryption
73:0f:00:7b:73:d7:17:f0:b6:3a:f1:6f:85:27:b1:43:df:55:
30:ea:d8:41:d9:e4:33:f9:d4:c3:90:df:31:1f:95:3c:4c:24:
b3:6c:53:4d:e4:66:18:89:c7:c9:6d:93:69:c4:df:b5:d1:2e:
05:46:53:45:cb:06:5b:50:88:74:62:80:14:5a:80:f7:40:45:
f7:2f:28:6f:dd:6b:0a:92:91:ee:05:d3:14:c3:dc:d1:19:a6:
42:6f:a0:b1:93:f8:c3:74:ba:ad:c3:4a:e6:3b:aa:31:fc:8d:
61:f7:fa:fd:e6:07:41:b7:3a:d4:8f:4c:9e:d7:89:0a:d6:77:
f6:bd:f9:fd:58:fd:fa:58:19:d3:fc:41:46:32:2c:ee:fd:ad:
a4:0a:0b:80:ac:cd:30:b1:76:24:0c:6e:15:4a:77:31:6a:0f:
c9:6d:90:bf:a5:84:d2:f0:97:e9:e5:cb:55:21:fb:47:5e:c3:
11:09:7e:72:25:6c:73:0c:53:f0:3f:38:ee:76:ec:b1:61:70:
ef:35:a8:74:d9:5f:de:79:6c:9a:bc:2d:8a:6e:32:8f:61:6d:
9d:b6:4c:36:b1:5f:ed:86:63:5f:db:03:45:a0:22:c0:d0:93:
8f:fc:34:ff:c8:d6:60:13:b4:00:47:fa:5c:19:44:96:20:02:
0b:2f:cd:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:01 2024 by rpki-client on console-ams.rpki-client.org