Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-aTOtJs8vwPOSWKkpF_UOuXppF8.roa
File: 1-aTOtJs8vwPOSWKkpF_UOuXppF8.roa (raw, json)
Hash identifier: 9Y81GFfRzcbdCuvw9krGTHazsST6O+lqtTAmf5TqmB0=
Subject key identifier: F9:A4:CE:B4:9B:3C:BF:03:CE:49:62:A4:A4:5F:D4:3A:E5:E9:A4:5F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F6EC8E4E8E8428A7E5A7DC7B3B3D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-aTOtJs8vwPOSWKkpF_UOuXppF8.roa
Signing time: Sun 01 Jan 2023 20:45:22 +0000
ROA not before: Sun 01 Jan 2023 20:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34353
IP address blocks: 81.181.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f6:ec:8e:4e:8e:84:28:a7:e5:a7:dc:7b:3b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9a4ceb49b3cbf03ce4962a4a45fd43ae5e9a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f4:6d:4a:33:fd:0e:39:d8:84:a5:c8:db:7e:
5f:0f:3f:2b:7e:28:6d:80:e8:10:39:9d:c5:3b:10:
6f:9e:a9:39:70:bf:f9:a8:5b:a2:d7:e9:04:e8:a9:
42:1d:95:57:dd:49:63:f7:85:00:07:36:76:fd:72:
0a:47:3f:59:34:9d:cc:52:6a:a8:51:eb:b0:44:5a:
1e:99:03:75:bd:c9:8a:5a:66:62:b4:b8:84:ab:16:
6f:59:f4:72:dd:ce:25:af:a8:94:97:9c:27:66:80:
33:e9:64:d8:04:0e:cd:29:16:05:f0:03:f0:b0:d7:
74:8c:ac:8b:f8:d8:0b:91:37:29:0c:8c:0a:fe:76:
bb:8f:56:84:80:9b:d4:18:8b:ea:15:f2:18:d3:d3:
47:9d:d3:ea:6a:5f:46:a0:94:c8:c6:47:ab:bd:bd:
6e:30:7d:49:55:3f:0f:03:6d:0e:33:84:fa:56:df:
5d:17:7f:5c:0c:c2:b2:7a:34:a0:09:57:fe:65:e0:
9c:33:63:a2:d3:54:9b:49:38:4c:20:03:ea:36:6d:
64:9a:07:84:06:bc:14:d7:62:d2:95:b9:a4:72:f9:
87:e9:68:73:4a:69:0e:e2:1a:46:10:68:d7:da:66:
48:f9:21:d0:98:03:ad:f1:7a:3c:57:27:7b:23:1a:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:A4:CE:B4:9B:3C:BF:03:CE:49:62:A4:A4:5F:D4:3A:E5:E9:A4:5F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/1-aTOtJs8vwPOSWKkpF_UOuXppF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.13.0/24
Signature Algorithm: sha256WithRSAEncryption
09:6d:f5:0f:b1:b6:7b:cb:d8:f7:21:65:aa:93:5d:e4:94:ab:
1d:3a:ab:a9:d6:ce:5f:17:9b:12:6e:dd:32:85:94:63:1e:be:
40:58:a7:07:5c:eb:0e:c5:08:77:72:16:d6:b2:47:16:22:8b:
84:25:e1:28:00:b4:ac:19:ad:6d:b5:ea:6e:bf:fc:80:f6:20:
eb:05:6a:17:4c:3a:60:ba:1e:91:58:68:56:ce:c6:3c:2c:0a:
17:f3:07:99:46:df:07:b5:52:1f:05:f0:75:52:33:53:d7:29:
86:81:7f:6f:16:8e:eb:ef:9d:7a:98:ad:12:1a:3d:b4:31:30:
6a:b0:f1:78:50:f6:87:ee:45:80:ac:04:af:ef:8b:2a:13:c4:
82:cd:73:d5:e1:5a:ac:24:5d:77:da:e6:d1:09:e2:d9:e7:74:
87:80:ea:31:32:6a:99:22:6b:2d:08:3a:ad:a6:1f:bf:13:19:
9f:e5:c9:9f:65:4e:f3:29:a3:2c:a4:08:21:73:d0:22:ff:fe:
0e:05:39:08:8b:e4:e1:a4:cc:62:48:f6:cd:f0:f4:c6:0b:d8:
3d:ab:c5:cd:00:56:d3:f3:6c:ad:e6:81:ab:75:2a:2b:51:98:
76:95:04:c6:97:51:14:3a:be:76:9e:e4:09:ea:29:fb:67:39:
cd:8e:e7:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org