Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5uWuF6ZnQpMs2EkUqjNX6Q5hViI.roa
File: 5uWuF6ZnQpMs2EkUqjNX6Q5hViI.roa (raw, json)
Hash identifier: jPCYa9pAk1OaNOwmjycYGuHVWlAwfSt1gVRPFNe4Gtg=
Subject key identifier: E6:E5:AE:17:A6:67:42:93:2C:D8:49:14:AA:33:57:E9:0E:61:56:22
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14E9F8AFE9B46086AF012ABEB6A1D6
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5uWuF6ZnQpMs2EkUqjNX6Q5hViI.roa
Signing time: Sun 01 Jan 2023 20:45:19 +0000
ROA not before: Sun 01 Jan 2023 20:45:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9199
IP address blocks: 81.180.64.0/22 maxlen: 24
81.180.70.0/23 maxlen: 24
81.180.68.0/23 maxlen: 24
81.180.76.0/22 maxlen: 24
81.180.72.0/22 maxlen: 24
81.180.84.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:e9:f8:af:e9:b4:60:86:af:01:2a:be:b6:a1:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6e5ae17a66742932cd84914aa3357e90e615622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:a6:27:e4:bd:79:b1:ae:61:30:ce:53:e6:
67:e1:9d:33:f1:49:33:cb:c3:3c:16:ed:6b:10:26:
d5:a7:7c:7f:7b:e3:e5:50:e5:de:bd:3a:f4:b7:e4:
03:f8:01:ad:4e:dd:61:60:40:60:97:62:17:38:3b:
0e:b2:b8:26:bb:b0:72:b0:c9:74:a1:da:34:bb:22:
4a:43:b6:89:55:72:65:a8:1f:9f:9e:1a:ff:7c:3a:
be:c8:53:71:1d:24:96:67:80:9c:ff:c6:5a:30:82:
2d:da:7f:9f:2b:8c:50:bd:93:7d:e8:1f:8f:2e:ea:
50:77:6c:2d:40:d0:0c:01:92:68:2e:5a:20:55:e1:
ab:2a:47:54:12:7e:49:10:91:6c:21:f2:00:14:db:
bf:76:85:74:bd:92:3e:90:e7:06:24:e0:a3:5e:9d:
79:e6:49:cb:f0:73:a9:42:89:98:3c:5e:f3:43:e0:
ec:54:17:1b:4b:6a:db:5f:72:f2:35:90:cb:5a:2e:
d0:91:d9:0d:7c:05:31:46:5f:93:96:5a:91:63:2a:
b5:ad:42:bc:84:08:30:96:a4:86:03:ea:e7:0b:3f:
6a:35:00:71:fe:84:ef:c5:a2:ed:bd:8d:1e:fe:2a:
3a:2d:f3:86:44:3c:ba:e9:66:15:5a:6d:ad:1e:8d:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E5:AE:17:A6:67:42:93:2C:D8:49:14:AA:33:57:E9:0E:61:56:22
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/5uWuF6ZnQpMs2EkUqjNX6Q5hViI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.64.0/20
81.180.84.0/23
Signature Algorithm: sha256WithRSAEncryption
84:be:cd:0d:a4:75:74:6a:36:4f:a0:b2:65:78:c9:b8:16:1e:
ed:f3:71:e0:24:a4:da:45:95:f7:c9:ee:a3:eb:2d:a8:c7:ab:
5e:d6:ac:7d:6a:6e:7e:d3:b9:66:71:73:82:43:bf:03:d0:bb:
b5:63:9b:6c:a5:97:9e:19:d2:5d:f9:4a:7f:ce:fd:7c:c8:d6:
42:59:07:9a:60:1f:70:b1:c3:7e:bf:13:cd:49:22:67:a9:7e:
a9:f6:1e:5c:ea:05:ce:c5:68:1f:1c:5c:f1:0a:14:f1:25:3b:
8c:26:09:eb:05:35:de:09:d7:38:7e:fe:a9:44:76:36:5b:c1:
86:a2:f9:85:0a:11:5c:dc:fc:d0:3a:93:24:9e:c7:1f:72:3e:
5c:4d:3f:89:d1:96:cc:06:88:e5:e1:50:d1:fd:e3:cf:00:02:
98:0c:98:19:70:f9:c3:54:6c:49:25:67:78:1d:0b:0e:a2:7f:
b4:c4:5d:e6:44:d6:2e:17:ca:92:6b:1f:b7:d3:7d:1c:07:e8:
f7:1e:66:c3:53:2a:1f:f4:aa:99:e5:f0:44:5d:83:36:c6:2f:
66:78:3a:21:54:99:6e:16:a4:b2:85:b3:e6:fe:f3:7e:26:15:
e7:07:ed:85:19:da:15:6b:db:fe:48:32:dd:dc:09:9a:fe:4f:
38:18:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:27 2023 by rpki-client on console-fra.rpki-client.org