Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/t82JPpibt3iQ9cLihF8Uz2sCIgc.roa
File: t82JPpibt3iQ9cLihF8Uz2sCIgc.roa (raw, json)
Hash identifier: 8n6nFR+M8h1tY3eL/yxeLzDBPzjKzcrra9AqzKmZHSQ=
Subject key identifier: B7:CD:89:3E:98:9B:B7:78:90:F5:C2:E2:84:5F:14:CF:6B:02:22:07
Certificate issuer: /CN=1056bcd426fd87cd6f4147e133216d03112b181b
Certificate serial: 018D7D4561B62428DC6E98A3DA5843293870
Authority key identifier: 10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/t82JPpibt3iQ9cLihF8Uz2sCIgc.roa
Signing time: Tue 06 Feb 2024 07:15:15 +0000
ROA not before: Tue 06 Feb 2024 07:15:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 81.31.234.0/23 maxlen: 24
81.31.242.0/23 maxlen: 23
81.31.244.0/22 maxlen: 24
185.84.160.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 09 Feb 2024 20:45:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7d:45:61:b6:24:28:dc:6e:98:a3:da:58:43:29:38:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1056bcd426fd87cd6f4147e133216d03112b181b
Validity
Not Before: Feb 6 07:15:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7cd893e989bb77890f5c2e2845f14cf6b022207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d7:b2:af:87:1b:3d:e1:e6:35:95:df:cc:0b:
0b:2c:4b:3d:05:a8:87:d6:99:fe:21:a4:30:8d:2d:
e8:eb:2d:58:ce:9a:25:ba:4d:45:83:df:47:b5:70:
99:c4:b8:5d:6c:6b:1b:00:72:06:04:54:87:a1:af:
a0:25:64:a6:a7:75:2c:e1:f9:c3:34:a2:86:f3:50:
1a:ea:e5:49:79:b0:53:b9:b4:d3:66:c9:18:87:2a:
86:42:5d:b5:ce:40:81:1d:fe:a6:35:f5:5e:80:cf:
83:40:39:5e:de:86:53:39:d2:dc:8e:44:f0:57:09:
a5:02:b1:4a:4a:39:38:cd:81:54:da:55:b0:17:0b:
74:a5:d8:e6:3b:03:36:99:32:81:69:00:7b:52:63:
96:19:cf:cc:3a:a2:21:dc:72:53:02:29:95:9d:a5:
83:0c:70:34:a7:72:62:a4:ef:81:2a:11:1d:79:e7:
70:ba:ea:7f:1d:72:5b:4a:2f:b1:15:53:7a:26:61:
8c:60:06:f9:5b:52:6e:66:7c:7f:8e:d7:1d:ef:67:
c5:bc:74:43:0d:fa:35:ae:d1:34:63:8d:23:7f:e3:
8c:5c:62:59:b1:39:2b:30:60:14:66:2c:c8:bb:1b:
5b:30:14:1a:07:af:0c:cf:8e:10:0b:a5:02:67:1c:
82:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CD:89:3E:98:9B:B7:78:90:F5:C2:E2:84:5F:14:CF:6B:02:22:07
X509v3 Authority Key Identifier:
keyid:10:56:BC:D4:26:FD:87:CD:6F:41:47:E1:33:21:6D:03:11:2B:18:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFa81Cb9h81vQUfhMyFtAxErGBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/t82JPpibt3iQ9cLihF8Uz2sCIgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e6f4e4-68bb-4496-90c7-aa859e192b16/1/EFa81Cb9h81vQUfhMyFtAxErGBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.234.0/23
81.31.242.0-81.31.247.255
185.84.160.0/23
Signature Algorithm: sha256WithRSAEncryption
dc:ce:6e:1c:35:62:49:27:0e:32:cc:35:76:ab:71:4a:e7:ab:
ba:47:fe:c0:05:c4:e1:e3:48:3b:1d:81:9c:d4:9b:1c:4c:e5:
34:1b:ad:f6:e9:98:43:15:19:8c:32:c5:f8:35:e7:77:f6:a9:
ba:9f:f8:89:7e:cb:9d:d2:83:b0:32:f8:82:5b:30:4b:c7:60:
ca:6c:ea:a1:e4:b4:97:18:97:3f:4c:e3:6a:63:0a:f2:3a:f8:
23:92:b7:0a:36:b7:3b:7c:a4:c9:55:9b:e5:ca:90:80:b4:ad:
c3:79:4e:15:8a:83:2e:ee:6c:43:7c:81:57:88:94:94:db:4c:
10:e1:8e:6f:ba:82:6a:86:eb:e1:c3:4c:30:5d:37:b7:d0:8f:
93:da:94:ad:df:74:31:ae:d5:9a:24:62:9e:54:3a:06:81:c9:
fe:46:26:a8:e0:e9:f5:a1:8c:93:1c:a6:84:5f:d6:6e:a4:7d:
ee:c3:2d:43:70:3f:d1:73:e3:c4:39:40:4b:dd:17:ad:74:42:
c1:83:9a:17:e9:f1:f9:33:b8:10:3b:8b:e0:39:0f:0d:dd:de:
eb:12:2b:c8:5d:2c:85:03:2e:e5:47:89:ae:6d:f1:00:8c:0d:
44:04:cd:bb:fe:09:66:78:bb:48:57:80:02:cb:86:5e:d9:28:
09:d2:49:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 00:01:48 2024 by rpki-client on console-ams.rpki-client.org