Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7YbfUR-u9RfnKaZtnF1sZgHXaIw.roa
File: 7YbfUR-u9RfnKaZtnF1sZgHXaIw.roa (raw, json)
Hash identifier: 63rvR2XE8PPIVqPOFRzh55jM9nnchIg27uW+HDBCbDc=
Subject key identifier: ED:86:DF:51:1F:AE:F5:17:E7:29:A6:6D:9C:5D:6C:66:01:D7:68:8C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F5F4EF45B4BC99008B28F1A5BE66
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7YbfUR-u9RfnKaZtnF1sZgHXaIw.roa
Signing time: Sun 01 Jan 2023 20:45:22 +0000
ROA not before: Sun 01 Jan 2023 20:45:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31554
IP address blocks: 81.181.78.0/23 maxlen: 23
81.181.76.0/24 maxlen: 24
193.226.92.0/24 maxlen: 24
81.181.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f5:f4:ef:45:b4:bc:99:00:8b:28:f1:a5:be:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed86df511faef517e729a66d9c5d6c6601d7688c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:79:34:86:9c:11:bd:25:ab:a3:dd:40:75:ad:
60:ab:7a:14:83:1e:a2:59:56:aa:b1:ed:57:be:c6:
31:d6:ad:9e:f7:f2:ab:8a:1d:6a:95:e8:83:48:bc:
ad:fa:ff:ae:12:18:3b:d9:60:32:6c:56:a6:1c:b4:
46:83:91:53:d6:f8:9a:ee:83:7a:51:81:e9:30:e4:
cb:43:37:9f:a4:4f:6e:60:cc:27:fb:90:a7:ba:a3:
0f:36:40:de:8c:69:50:45:a3:92:05:46:70:0d:f0:
f5:07:8d:8c:a8:25:e8:29:7c:fb:b8:c4:b8:00:48:
d0:9f:fd:19:da:ff:9a:59:04:5c:36:97:19:05:f8:
e1:94:a6:46:bc:b4:c2:96:9d:3b:55:2c:78:f7:1c:
63:f8:be:be:6b:95:ff:01:67:36:3c:71:6d:ba:53:
59:f9:ad:db:d7:ab:98:43:df:be:eb:96:66:99:dc:
b5:57:14:0d:2b:fa:7f:fb:3a:77:fa:eb:9c:3d:97:
f2:7f:27:cd:26:2e:5d:87:14:ae:0b:c7:b4:c0:88:
2a:e6:fc:84:44:a0:eb:b5:e7:1f:12:ed:c7:74:38:
5f:a9:d4:35:a0:80:86:b8:ee:3c:44:08:cb:a9:b4:
0c:bf:04:7b:2c:06:de:00:30:b1:c7:22:1e:76:40:
5e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:86:DF:51:1F:AE:F5:17:E7:29:A6:6D:9C:5D:6C:66:01:D7:68:8C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/7YbfUR-u9RfnKaZtnF1sZgHXaIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.76.0/24
81.181.78.0/23
81.181.165.0/24
193.226.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:52:a2:df:23:87:4c:8e:9a:a8:a8:93:c9:62:0a:16:d6:a8:
82:87:28:9e:ce:50:80:3e:a4:f9:9e:bd:da:1a:98:7b:43:10:
a2:98:ec:4e:b8:f9:1a:9f:68:89:89:22:07:2b:76:94:c4:c5:
34:8e:57:53:d4:11:01:1c:e5:9a:95:49:f0:42:f7:2f:02:8f:
8c:a7:39:1c:4c:a9:2e:87:99:e6:c6:5b:10:3c:2a:dd:e3:f6:
52:2c:06:1e:cc:a4:5b:99:a0:78:0f:aa:b2:5b:a5:6c:8d:5c:
cf:b9:b7:14:5d:85:0a:67:65:c8:93:6d:4b:08:f5:a6:31:9e:
fc:2a:91:05:c3:00:df:75:d8:fd:78:e7:e6:55:fd:b9:0e:89:
46:3c:6a:e3:4a:3b:b5:d4:e7:ca:ce:b6:3d:ec:16:c1:86:34:
b8:58:61:a0:12:f8:a1:f0:ce:8b:5f:57:9a:08:f6:da:11:1a:
29:9c:2d:c3:3e:87:bf:08:36:54:c0:28:2f:e0:cd:c6:d7:5d:
01:2a:2d:bb:4e:0b:62:b4:56:35:e7:f0:af:a6:29:dc:ce:82:
f9:a2:cb:09:50:7b:0f:99:93:e6:b2:d7:b0:f6:28:13:c0:fc:
b4:51:22:19:df:05:59:00:af:3b:eb:3f:68:7f:fd:08:e1:c4:
f1:27:97:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org