Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/RhlDHW3HvwDfJc2cC0YyzurFaOw.roa
File: RhlDHW3HvwDfJc2cC0YyzurFaOw.roa (raw, json)
Hash identifier: lQ7r48aL0VSR7+LQ110gLY7xfo9pafI3VqLEgKgWpxs=
Subject key identifier: 46:19:43:1D:6D:C7:BF:00:DF:25:CD:9C:0B:46:32:CE:EA:C5:68:EC
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 01856C9CD2832663065420635A2219289310
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/RhlDHW3HvwDfJc2cC0YyzurFaOw.roa
Signing time: Sun 01 Jan 2023 09:14:54 +0000
ROA not before: Sun 01 Jan 2023 09:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200953
IP address blocks: 81.177.185.0/24 maxlen: 24
81.177.193.0/24 maxlen: 24
213.59.140.0/22 maxlen: 22
213.59.140.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:d2:83:26:63:06:54:20:63:5a:22:19:28:93:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 09:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4619431d6dc7bf00df25cd9c0b4632ceeac568ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:c2:cf:01:58:2a:d5:62:3e:ea:50:fe:e2:
ac:4b:ea:15:67:66:4d:32:e3:b4:11:a6:66:08:0b:
7f:4e:39:a9:a2:ff:6b:4b:ee:ab:a7:67:a1:48:1a:
80:93:fe:f0:8b:24:98:d6:76:28:82:92:cb:25:13:
0e:50:57:00:34:1e:87:ea:2e:a1:15:d8:2c:c4:40:
85:97:45:6c:77:8e:58:ec:d8:1c:80:e4:7c:b2:0b:
29:45:54:cd:ac:7a:8a:89:b6:27:ce:87:ac:92:56:
f6:9a:47:cf:9c:05:ba:96:75:b2:ea:91:a6:b8:87:
81:37:f6:0d:59:8c:7b:66:2b:29:46:4c:2d:49:ab:
24:e9:66:fc:6c:ad:2d:39:77:00:11:9f:5b:75:fb:
58:a1:80:b5:d6:8b:2f:5b:91:e0:b0:e1:06:88:bb:
54:c9:04:7a:2e:b1:63:e7:c8:c2:ca:fc:65:3a:8d:
5c:20:42:6b:91:34:52:5f:99:1f:26:83:42:68:72:
5d:11:2f:f6:6f:3b:2a:65:fd:4a:90:87:d9:89:13:
c2:32:55:b8:08:2c:97:dd:5d:a8:16:76:d0:b7:8d:
af:65:d8:bb:78:db:38:81:86:19:d9:e8:b9:a1:27:
86:75:d3:d8:39:f6:d6:8b:9f:90:55:0a:5b:11:f0:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:19:43:1D:6D:C7:BF:00:DF:25:CD:9C:0B:46:32:CE:EA:C5:68:EC
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/RhlDHW3HvwDfJc2cC0YyzurFaOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.177.185.0/24
81.177.193.0/24
213.59.140.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:b8:bb:0c:30:fb:cf:82:b8:27:f1:8c:8a:a0:72:9a:fc:f5:
3e:73:96:ec:e1:84:7e:a3:ec:97:1c:b6:3d:23:5f:a4:66:d9:
fe:be:22:f9:a6:7b:25:5d:69:9f:d8:91:b3:14:2d:49:b1:d3:
f9:fb:54:fb:ba:01:f8:52:79:86:90:3f:d7:82:c3:47:42:64:
d9:d8:60:a6:7d:9e:a3:22:c3:70:6e:fd:4a:bf:79:62:da:37:
f3:9b:55:a1:ea:22:6a:e8:8a:e0:48:f0:13:7c:4d:c2:f7:ff:
fb:47:c3:95:9a:f7:20:b1:c7:32:49:2d:a2:33:df:44:60:24:
11:05:1f:1f:e6:c0:f4:24:9e:9a:87:f2:66:49:38:c8:88:31:
6e:b8:6a:7c:cd:71:11:32:be:b5:8a:d5:78:f3:67:e2:5a:77:
2f:98:d7:62:f9:f4:e5:43:b9:78:7c:c3:d0:2b:8a:70:e2:fd:
86:17:84:b7:00:79:9a:00:44:1b:b8:29:1d:bd:84:ec:fa:49:
88:57:93:68:5e:f8:4e:16:02:e4:f4:a0:f8:e4:32:84:25:5b:
05:58:da:85:04:b7:f4:00:bf:0b:ab:91:ee:bb:35:87:89:fb:
f3:cf:22:e1:5f:58:3e:ca:60:58:07:86:f9:e9:d3:cb:ad:0d:
55:ef:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:49 2024 by rpki-client on console-fra.rpki-client.org