Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pngteV66GTqMtPx_5egOuPfZltQ.roa
File: pngteV66GTqMtPx_5egOuPfZltQ.roa (raw, json)
Hash identifier: WyJmIfZF0sMy1HJa6Mj8nFGBRthyxikXc17ziLSZLrQ=
Subject key identifier: A6:78:2D:79:5E:BA:19:3A:8C:B4:FC:7F:E5:E8:0E:B8:F7:D9:96:D4
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 01862DF61DABECCE6C1E48D550908446B7EF
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pngteV66GTqMtPx_5egOuPfZltQ.roa
Signing time: Tue 07 Feb 2023 22:19:09 +0000
ROA not before: Tue 07 Feb 2023 22:19:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 81.31.244.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2d:f6:1d:ab:ec:ce:6c:1e:48:d5:50:90:84:46:b7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 7 22:19:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6782d795eba193a8cb4fc7fe5e80eb8f7d996d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:2a:2c:f0:7e:d0:b7:7b:4b:9c:27:8a:da:
75:b5:46:59:dc:79:bb:80:78:c1:10:ee:24:87:99:
f1:40:ad:f1:a5:1c:80:5f:3c:49:f0:38:8a:45:f8:
12:ac:89:fe:43:e5:7e:67:66:f0:98:7a:b3:3b:b5:
71:38:4b:68:c1:97:45:b2:db:53:15:1f:24:c3:0a:
94:a4:f5:a1:23:13:f0:e4:17:41:b6:2c:c5:83:24:
98:ea:49:8a:e6:e1:9a:15:2e:8e:b7:e3:66:65:72:
17:9b:1b:1d:df:a8:b2:6f:24:0e:75:2e:18:27:44:
ec:3e:fc:14:46:f3:ac:b2:28:09:f7:e1:e4:d1:a4:
90:19:cb:9e:e9:f8:1a:2a:be:7a:8c:7e:21:14:57:
a2:4f:14:18:95:64:a8:60:12:ca:54:82:80:ff:0f:
5a:8c:4c:c1:c7:4c:9f:75:c3:1f:71:e0:90:3c:2a:
a9:b9:f8:51:2a:54:fd:c5:bb:75:aa:22:6b:e1:58:
ed:70:ff:23:f6:c2:8f:cf:8e:08:5f:53:77:ad:6d:
2c:17:bb:4e:95:57:c6:40:30:26:9c:48:d8:c8:55:
bd:df:c8:52:bc:c8:67:4c:b4:95:8a:22:6a:0c:ac:
5b:7e:0f:5b:af:e0:71:65:7f:c0:69:f1:25:3a:75:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:78:2D:79:5E:BA:19:3A:8C:B4:FC:7F:E5:E8:0E:B8:F7:D9:96:D4
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/pngteV66GTqMtPx_5egOuPfZltQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.244.0/22
Signature Algorithm: sha256WithRSAEncryption
51:19:8d:69:87:a6:61:9b:41:ef:5e:a2:02:7d:29:63:1b:8b:
8f:3f:3c:36:77:d1:ca:89:0d:1e:08:71:e9:cd:1b:b3:e1:87:
f1:cc:63:02:54:63:e2:6f:ad:68:5e:ad:e3:23:de:f1:6b:f4:
3c:2a:36:34:68:5d:1b:4a:70:58:7f:aa:2e:50:8b:47:eb:db:
22:30:09:e1:f5:78:9d:b9:41:8f:d0:51:60:a0:ac:f5:6c:eb:
d5:5c:0e:34:9f:fc:6f:7f:45:db:00:92:46:c1:26:65:f4:1a:
6d:8f:a7:b4:0f:40:9c:78:25:53:4f:af:c9:e5:84:86:8b:39:
d6:03:98:76:5d:ee:77:03:0d:e4:d1:f2:5d:53:e4:ab:b1:90:
0f:68:63:56:64:ef:13:88:37:ed:e9:84:cf:1c:ab:51:46:4e:
35:9c:3c:02:15:76:f2:2c:38:f1:e5:cd:5c:40:4b:14:a8:0b:
04:73:1c:33:06:a2:8d:7f:91:6e:71:3f:4e:6c:00:18:1a:66:
ff:1a:7e:a6:87:38:15:ee:fd:13:95:41:35:a8:ff:f6:f0:e1:
bf:f4:b8:46:11:83:5e:bc:c0:8b:92:a2:40:7e:cf:47:a4:0c:
9e:08:a1:4b:6b:a1:84:fd:b2:ff:4c:52:b6:6d:ce:6b:1f:45:
4b:7c:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:09 2023 by rpki-client on console-fra.rpki-client.org