Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3Lvcx3qJfexLJwSHCcCm88JhCZY.roa
File: 3Lvcx3qJfexLJwSHCcCm88JhCZY.roa (raw, json)
Hash identifier: ABzTlrFy48OxaLroDrkHgd1exsCBgROOAxlcbCk95R0=
Subject key identifier: DC:BB:DC:C7:7A:89:7D:EC:4B:27:04:87:09:C0:A6:F3:C2:61:09:96
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F1511DD5EE881FFF6AE65E8768FFC11
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3Lvcx3qJfexLJwSHCcCm88JhCZY.roa
Signing time: Sun 01 Jan 2023 20:45:29 +0000
ROA not before: Sun 01 Jan 2023 20:45:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211611
IP address blocks: 81.181.198.0/23 maxlen: 23
81.181.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:11:dd:5e:e8:81:ff:f6:ae:65:e8:76:8f:fc:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dcbbdcc77a897dec4b27048709c0a6f3c2610996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:ca:27:7e:f1:9f:08:9d:af:3a:e9:8f:5e:
5d:ad:c5:77:35:12:15:44:6c:37:e5:7e:0d:60:c6:
1c:e0:0c:c5:53:52:f3:43:a1:cc:f1:fa:52:df:15:
d5:c8:b6:2a:cb:05:53:96:65:98:a1:5f:0a:f1:e8:
13:48:17:b8:b6:f7:f4:36:fe:44:0d:6d:ec:43:a4:
ce:c3:bb:c1:da:5e:af:4f:ba:8e:38:5d:5a:9e:37:
60:37:d4:e8:be:92:b2:8b:37:3f:1e:c7:cd:d1:23:
c0:57:71:0a:c9:7c:a8:c1:9d:2e:cb:61:f6:23:3c:
ea:87:8a:d6:45:6c:08:c7:bd:84:82:9e:cf:70:c6:
fe:f3:a6:64:2f:51:91:21:f6:d7:e3:9d:cb:fc:51:
05:66:d8:81:d6:0e:78:4f:5f:6d:fb:8e:10:c8:4f:
e2:89:36:1a:52:74:32:56:47:dc:65:e7:49:31:ec:
d9:3b:c1:55:3a:ae:85:bd:3d:51:10:9b:e5:06:be:
76:cd:69:8b:fb:1d:ff:d3:14:8d:38:8b:de:5c:b6:
65:e7:ca:f7:26:9c:fb:43:53:18:c8:3c:ca:c8:24:
26:03:c3:ba:a9:95:19:61:d5:71:34:16:2c:87:70:
d1:d8:c7:35:d9:b9:bc:42:bd:06:b8:9d:1a:14:8c:
94:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:BB:DC:C7:7A:89:7D:EC:4B:27:04:87:09:C0:A6:F3:C2:61:09:96
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/3Lvcx3qJfexLJwSHCcCm88JhCZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.87.0/24
81.181.198.0/23
Signature Algorithm: sha256WithRSAEncryption
52:77:c5:a7:8f:20:49:5c:9a:e1:f3:81:28:e0:2b:fe:50:5f:
1a:0f:d5:24:63:da:24:1d:a0:e8:05:e8:90:c2:53:7b:ca:26:
d2:e8:47:fe:e1:8b:ea:da:8e:ed:d0:7a:e8:39:94:7f:51:51:
28:33:e7:ab:7b:ac:d6:61:dc:2b:af:3a:92:af:e7:4d:de:84:
58:30:12:5e:ae:23:75:80:44:f3:67:b7:ef:3c:79:22:b6:c1:
b9:c8:75:b3:c3:49:7f:96:34:95:d5:0e:71:83:3c:75:6a:84:
c5:3c:c5:17:40:33:f4:eb:8b:f4:77:8f:30:f4:51:f1:3f:c5:
43:77:60:90:87:2c:ea:a8:59:8b:cf:fa:3f:e6:55:ab:47:db:
46:5f:fc:97:b7:c5:50:63:34:bb:c6:16:0e:04:8c:e0:64:20:
42:2d:af:ed:d7:80:e0:4f:8f:15:eb:3a:ff:28:45:17:55:27:
92:12:4b:94:f8:29:d3:1c:f0:75:03:f8:77:68:f7:99:9f:87:
f8:a4:30:0a:ae:3d:68:4c:b9:f8:9f:d8:4f:01:d4:ef:9e:52:
91:6d:ab:ff:0b:43:3b:96:5e:ca:4c:3a:b1:32:0d:b8:29:62:
33:5a:82:d0:6a:3d:12:fd:f3:09:35:bd:fa:bc:89:4d:11:92:
10:f4:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org