Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/P3isFqxCDlk82XQzq_oluiKh6Jk.roa
File: P3isFqxCDlk82XQzq_oluiKh6Jk.roa (raw, json)
Hash identifier: ibj+oPPE5SDLlU3J1dbmagKjsrcUMdicbNBpunG6r00=
Subject key identifier: 3F:78:AC:16:AC:42:0E:59:3C:D9:74:33:AB:FA:25:BA:22:A1:E8:99
Certificate issuer: /CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Certificate serial: 01856CC150CE7DB68270C64F7E7A389D0851
Authority key identifier: 2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/P3isFqxCDlk82XQzq_oluiKh6Jk.roa
Signing time: Sun 01 Jan 2023 09:54:46 +0000
ROA not before: Sun 01 Jan 2023 09:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41242
IP address blocks: 81.31.48.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 05 Jun 2023 10:52:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:50:ce:7d:b6:82:70:c6:4f:7e:7a:38:9d:08:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2dc9cb5302d8d13fe91e80f5cbd1fbacbc014827
Validity
Not Before: Jan 1 09:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f78ac16ac420e593cd97433abfa25ba22a1e899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:09:6d:bd:68:77:3d:c4:b1:18:79:fb:53:8d:
26:c5:91:fd:4a:7b:0e:9c:b1:e9:7e:dc:50:e7:e4:
bc:bb:9a:74:30:9a:27:b1:f6:ae:45:72:43:11:c6:
67:72:ec:6b:b2:06:ab:fd:f8:1b:b5:61:1d:cb:5b:
e8:02:c1:8a:ab:5c:cf:9b:62:c8:42:b0:c2:3e:65:
6e:d5:72:13:07:cb:58:d5:b3:33:66:6c:8d:61:d3:
8e:2b:30:2f:90:4b:be:f6:49:0e:f2:b3:8c:ab:51:
9b:93:7d:dd:94:01:9d:9f:51:62:84:be:73:0e:9f:
92:23:62:4e:1f:2b:e6:6b:53:64:c5:75:7a:1a:48:
b2:aa:1c:2a:ee:71:3e:76:fb:61:54:64:d3:fa:33:
f6:3d:38:e0:68:f3:e9:a8:2d:0c:91:8e:02:78:e2:
9f:e9:24:8d:96:53:14:4e:a2:11:31:34:4b:be:84:
77:bf:10:6a:0b:58:1e:f3:96:8b:bd:2c:98:fc:5a:
55:61:7d:99:82:0f:eb:2f:b2:38:5f:53:47:88:2d:
4e:d7:12:b7:73:aa:58:10:92:68:c4:7e:96:7b:61:
f2:fc:68:3b:91:6b:6f:2c:a5:f7:75:87:15:0d:27:
e1:4e:fb:13:b4:06:69:5e:9a:78:c2:a3:d4:3b:63:
16:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:78:AC:16:AC:42:0E:59:3C:D9:74:33:AB:FA:25:BA:22:A1:E8:99
X509v3 Authority Key Identifier:
keyid:2D:C9:CB:53:02:D8:D1:3F:E9:1E:80:F5:CB:D1:FB:AC:BC:01:48:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LcnLUwLY0T_pHoD1y9H7rLwBSCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/P3isFqxCDlk82XQzq_oluiKh6Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/ccc808-14bb-494d-99c8-2f11a651962b/1/LcnLUwLY0T_pHoD1y9H7rLwBSCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.31.48.0/20
Signature Algorithm: sha256WithRSAEncryption
01:12:bf:74:48:f7:f4:c5:a3:60:3f:01:47:27:7e:2f:20:ab:
78:bc:b2:9e:68:7c:4d:99:80:73:56:b6:bd:a0:29:1f:0b:4e:
4f:8c:09:c9:59:a5:d9:85:16:e0:a5:57:fe:18:2c:94:9f:d4:
49:08:5e:b2:c3:a6:66:33:53:95:55:50:8b:c1:c7:eb:5c:8c:
80:9a:6f:12:b0:45:96:09:4b:9f:0a:7d:08:f8:b7:b2:b6:01:
53:64:59:2f:77:01:50:53:d5:da:12:20:10:e2:ed:4a:fe:fa:
c9:7e:f6:b1:3a:b1:19:ca:01:c0:31:f1:6b:5f:d8:23:d0:f4:
e9:80:3f:98:6d:9f:83:b1:12:68:a8:a6:2d:a2:1b:ca:05:8c:
47:f6:28:77:da:a7:24:b3:53:b0:c0:dd:23:79:dd:3a:01:38:
b6:e6:6b:5b:c8:47:b7:e6:b3:3a:23:b4:9c:22:cd:87:2d:ca:
ea:e0:c9:5d:b3:c8:20:88:6e:d3:33:ab:a1:b8:69:be:52:4b:
2f:07:fd:81:00:e4:f7:d1:54:a7:db:7e:f6:ca:3f:63:98:14:
c0:2a:82:b8:4b:5f:c3:34:2d:75:91:79:9f:af:e1:8c:5b:60:
d2:8c:30:6d:2c:27:86:2a:85:fe:d1:ef:6e:87:41:bb:fb:f5:
7a:9b:7e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:32 2024 by rpki-client on console-fra.rpki-client.org