Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oSX8Wx7B6slfS1dO6FC8LyheZIo.roa
File: oSX8Wx7B6slfS1dO6FC8LyheZIo.roa (raw, json)
Hash identifier: 6CsOLIN9247K1eehJ5iKDrloMnellbSUCRun1qQLXMQ=
Subject key identifier: A1:25:FC:5B:1E:C1:EA:C9:5F:4B:57:4E:E8:50:BC:2F:28:5E:64:8A
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 0188579ECCC319D273208C41E0F8762B3DF8
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oSX8Wx7B6slfS1dO6FC8LyheZIo.roa
Signing time: Fri 26 May 2023 10:33:24 +0000
ROA not before: Fri 26 May 2023 10:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 81.31.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:57:9e:cc:c3:19:d2:73:20:8c:41:e0:f8:76:2b:3d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: May 26 10:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a125fc5b1ec1eac95f4b574ee850bc2f285e648a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ce:15:0f:56:e3:b7:c7:ef:22:85:23:85:d9:
7a:8a:63:9f:c8:1d:52:6b:2e:df:a6:ff:aa:31:bd:
a8:bc:bb:04:e0:f8:e0:94:c0:36:42:c3:b0:88:49:
2a:0b:c4:88:ab:09:b4:54:0c:5c:ca:7c:af:fa:1d:
0e:2b:73:ba:a5:de:20:17:17:dc:8b:2f:95:33:91:
90:b1:f1:b3:86:db:33:23:30:76:f4:5e:7e:c9:a8:
70:47:6a:bc:0d:7e:21:13:37:ef:ac:39:7d:1f:d8:
c9:4e:5f:89:c9:47:33:63:46:8a:7a:6c:86:25:a8:
45:4c:f7:1e:6f:f2:67:fa:8c:85:b6:05:9d:31:b6:
c9:50:0d:30:e6:ff:38:aa:19:32:41:74:7a:18:e5:
9f:b6:a4:af:1c:bf:f8:8a:64:80:b8:05:0a:37:af:
cf:c0:5b:d8:88:c6:cb:c3:4a:d3:06:42:b1:22:54:
bc:9b:ee:33:f0:d6:77:31:2a:5d:ae:ef:b3:91:55:
b6:30:a6:c5:1a:d1:0b:9a:44:de:90:87:ab:45:66:
24:fb:6a:cd:fb:44:ec:f5:97:11:83:12:83:02:cd:
dc:26:e6:06:7e:78:9d:54:bc:1f:55:11:38:14:5a:
a3:25:fa:07:ff:c9:a9:33:cd:1d:f7:ac:ab:f2:6c:
d0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:25:FC:5B:1E:C1:EA:C9:5F:4B:57:4E:E8:50:BC:2F:28:5E:64:8A
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/oSX8Wx7B6slfS1dO6FC8LyheZIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
10:5b:5f:8e:0e:10:b6:5e:5b:b3:79:70:11:37:c7:72:db:b2:
95:26:7a:83:23:8b:10:f2:7a:2f:f9:b0:f2:9b:57:c4:67:dc:
19:ba:17:47:88:fa:1a:cb:70:f6:67:6b:97:c6:60:d4:a7:a9:
ca:1f:64:3c:be:ad:8b:c8:1d:88:02:42:15:cd:14:20:ea:f5:
6e:c9:67:1b:f6:b9:14:f3:88:34:ab:7e:dd:3a:a4:76:20:d6:
b6:a2:7f:3b:c6:02:b2:da:33:9f:99:d1:b7:03:34:1c:db:95:
2d:b7:f7:c2:02:bf:a2:6e:af:00:c5:06:3e:3d:a1:6e:82:4a:
2d:a5:70:87:d1:11:f7:e4:15:20:eb:e0:d9:88:2d:ee:8c:5a:
39:eb:c1:ff:89:18:9c:c3:6f:b8:a0:0d:3d:be:69:0a:c8:ed:
e7:54:28:34:c6:98:4c:e6:10:a4:6f:30:0b:1d:73:10:8c:13:
b0:0d:6a:b1:91:d4:86:24:42:69:d9:74:1d:11:c0:0a:e0:62:
18:f5:4a:a0:c8:c8:19:1a:9f:52:f1:64:28:cd:d9:1b:8d:ef:
8b:e6:fd:f7:7d:e3:e8:07:3e:25:69:c7:b5:4d:5f:11:01:0f:
7a:a6:f7:0b:dc:ab:4b:fb:00:c7:f4:6c:f3:9c:44:c1:b1:c0:
53:92:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 4 16:26:35 2023 by rpki-client on console-fra.rpki-client.org