Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/S-Ajibz__s6JY--7LRsV8JsAAXA.roa
File: S-Ajibz__s6JY--7LRsV8JsAAXA.roa (raw, json)
Hash identifier: eT91HcbpVnXolFPfyviv+Lf+hxojp68ytHxtwnbA72w=
Subject key identifier: 4B:E0:23:89:BC:FF:FE:CE:89:63:EF:BB:2D:1B:15:F0:9B:00:01:70
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0185E7BFEEBB273BE93E7A94C86457FB2F9F
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/S-Ajibz__s6JY--7LRsV8JsAAXA.roa
Signing time: Wed 25 Jan 2023 07:06:33 +0000
ROA not before: Wed 25 Jan 2023 07:06:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39383
IP address blocks: 81.181.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e7:bf:ee:bb:27:3b:e9:3e:7a:94:c8:64:57:fb:2f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 25 07:06:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4be02389bcfffece8963efbb2d1b15f09b000170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b8:57:9f:82:c6:51:f0:2d:e5:97:fc:4a:21:
ae:86:3a:ff:d3:98:e1:92:15:0f:b1:53:45:47:1b:
fe:f4:70:6a:6d:10:c3:81:3f:8c:01:ca:6c:fe:3c:
55:51:42:7c:65:d5:8c:53:f4:b3:31:ab:71:af:78:
d5:41:c3:35:49:60:bf:56:f3:7d:6b:39:fb:76:3b:
b6:7f:15:b3:6e:97:40:d6:3d:31:ad:e5:93:17:42:
97:55:25:18:bd:25:cc:41:00:d5:48:d9:c5:95:b6:
94:bd:0a:ac:38:f0:8f:ac:7a:24:d2:9a:8d:95:63:
c2:f2:90:06:b8:8f:22:c3:bb:b4:3a:b5:2d:df:d4:
cd:d3:3c:3d:81:f2:b5:15:dc:e6:30:d9:f8:45:4d:
f8:0b:19:e1:4c:c8:89:c6:e5:fd:0c:e4:58:3b:f4:
e0:40:01:9c:d4:2d:20:5f:9d:58:b5:08:a1:a0:54:
6b:dc:26:44:bc:aa:ed:46:31:48:50:9c:ca:e2:51:
41:b8:57:19:69:2b:2d:78:a9:26:29:c8:ba:ad:4d:
4e:50:b2:f0:b4:c3:0f:5b:de:99:4c:4e:81:77:95:
79:52:fa:5f:47:ea:46:4a:a1:a9:1f:a0:90:85:b6:
36:2e:fe:99:8a:cf:d4:fd:2e:c2:1f:a5:6e:f6:bf:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E0:23:89:BC:FF:FE:CE:89:63:EF:BB:2D:1B:15:F0:9B:00:01:70
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/S-Ajibz__s6JY--7LRsV8JsAAXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.129.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:61:da:43:92:9a:02:06:cb:03:ba:1f:80:bc:05:08:39:c9:
b8:bd:b3:da:dc:12:ff:79:11:c0:dd:4f:28:1c:85:47:a9:02:
fa:a6:c5:d1:93:65:55:e9:63:03:ed:d2:ad:a6:6a:16:59:1e:
5d:34:a2:43:7c:dc:1e:21:d5:69:0e:ca:a0:d0:27:de:a0:1c:
20:0a:2b:55:58:a3:1f:60:e4:4c:5b:4a:7d:bf:c9:d2:5d:ef:
2b:91:e0:bd:8e:51:89:6a:0d:7f:63:52:5a:4c:a6:41:9f:bc:
95:d5:f0:6e:1b:f1:27:ab:ff:7f:2c:de:79:4e:36:1b:c0:11:
e0:09:54:ee:fd:94:6d:98:fc:6d:b9:b9:5c:e8:a5:0c:a5:56:
84:5e:f6:5c:88:2b:31:1d:0c:56:5a:f4:1a:35:66:15:8b:c1:
c0:d1:c2:6e:fb:48:f6:83:b8:f1:10:08:19:7a:41:6d:c3:16:
cd:b8:9a:3c:56:e9:48:e4:af:41:95:39:b6:af:fe:b2:c8:a2:
c8:7c:83:d6:e2:17:55:82:e9:c5:91:6d:70:04:1e:d9:a5:f8:
5a:9c:11:5a:61:d3:79:7d:50:20:e1:b3:da:07:51:25:f1:7f:
53:4a:5c:ff:69:30:b5:4a:95:4c:5d:ac:6f:67:f7:0d:a8:53:
02:f0:2a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org