Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/a_6qyN5Y3aJ6x8NUI3W1V_YuKZg.roa
File: a_6qyN5Y3aJ6x8NUI3W1V_YuKZg.roa (raw, json)
Hash identifier: 00Q1fKOO5lLw7QSrMxWTho9iZ+LLsrZWTL3CZsuc5Hg=
Subject key identifier: 6B:FE:AA:C8:DE:58:DD:A2:7A:C7:C3:54:23:75:B5:57:F6:2E:29:98
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018C8CB45885A91043E41EE3815E3BC19B2C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/a_6qyN5Y3aJ6x8NUI3W1V_YuKZg.roa
Signing time: Thu 21 Dec 2023 14:07:58 +0000
ROA not before: Thu 21 Dec 2023 14:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216137
IP address blocks: 81.180.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8c:b4:58:85:a9:10:43:e4:1e:e3:81:5e:3b:c1:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Dec 21 14:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bfeaac8de58dda27ac7c3542375b557f62e2998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:f5:97:1e:5b:64:69:d6:d3:59:4b:d3:8b:
9d:db:5d:44:4b:0e:07:7a:f1:45:0c:a5:0a:7c:27:
d2:f1:80:06:7c:42:26:1c:cc:e0:f5:7d:a0:84:78:
eb:cb:c4:10:d6:2b:92:46:a3:05:6b:d4:ae:d1:8a:
e4:1a:ea:8d:bd:02:f9:83:05:84:68:c8:01:42:f7:
e1:2d:4c:11:9e:71:48:e7:92:b6:99:c3:1a:8c:89:
3d:e6:2f:ee:78:58:c9:05:b0:12:7e:a2:3c:30:6a:
ab:62:1f:9d:62:0f:26:2b:a4:f9:9b:29:e8:75:b2:
c9:b8:f3:02:01:0e:fc:07:e7:f7:c2:54:ae:9c:cc:
51:1e:06:76:da:e5:1b:c6:e1:da:5b:91:c1:16:4f:
54:d4:8f:0a:14:a5:16:03:cd:56:97:66:2c:63:c3:
34:92:5a:ba:c1:63:a7:91:76:1f:5e:2b:fa:41:33:
77:5c:9a:e3:7f:45:09:ae:cc:dd:6e:e8:3b:26:20:
8c:90:20:ae:35:0a:9f:da:7d:f8:69:66:2f:00:af:
18:18:bf:07:14:3f:d6:f5:96:fc:77:58:a6:c7:92:
c7:a6:c7:e2:f6:59:76:5e:b2:5b:ab:f6:0c:f7:c9:
14:b7:cf:d3:f9:e0:47:7a:43:a5:7f:b3:35:2c:0d:
bc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FE:AA:C8:DE:58:DD:A2:7A:C7:C3:54:23:75:B5:57:F6:2E:29:98
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/a_6qyN5Y3aJ6x8NUI3W1V_YuKZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.72.0/22
Signature Algorithm: sha256WithRSAEncryption
46:d7:f0:c3:93:eb:b2:a1:70:dc:2c:fa:4b:e8:37:5d:b0:52:
66:e5:f4:13:e7:42:f2:40:d3:7f:04:a4:3a:a8:af:a8:5f:83:
c9:1a:7a:99:e3:ab:02:bb:c6:c0:18:93:97:1e:9b:d7:b5:56:
5b:7e:cb:2d:4c:94:cb:5f:9b:87:a9:2a:9d:0b:8b:43:b6:ce:
5b:ea:b1:ec:1b:5e:2e:fc:fe:4a:c9:b0:86:dc:6d:01:6f:d8:
e9:bd:71:82:a1:82:85:8a:77:38:d3:ff:1d:15:3e:67:52:a5:
44:84:3e:16:27:02:95:98:76:37:49:2c:e8:7b:39:6a:b8:5e:
ff:04:ce:56:aa:d8:5a:76:b2:40:44:41:2a:2a:5f:22:c4:9b:
73:8d:2e:1f:ad:fd:c1:2e:01:49:96:b8:dc:de:3b:d5:1e:b1:
42:9e:8c:90:86:ab:3b:4c:0b:f1:2f:1a:62:60:1f:b9:29:85:
fc:ab:7a:4f:59:c6:bd:0f:f7:a6:58:e2:75:9f:39:58:a1:26:
39:ce:77:73:ec:bf:a7:39:c2:5e:2a:d6:84:4c:ff:17:f5:f4:
f5:0c:60:41:35:6f:da:9a:9a:18:fe:f8:9a:cd:3c:d4:cf:8d:
d9:25:b8:8a:9e:05:c7:31:0e:b9:b7:80:20:6d:ac:4e:d9:38:
ca:05:90:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org