Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fBHKyxsKqDkiGBQat3kRc6b0Q2M.roa
File: fBHKyxsKqDkiGBQat3kRc6b0Q2M.roa (raw, json)
Hash identifier: pVOsIKX8Sv1upFEEVE1B4pFLYkR++bd2vKXesEh/GVE=
Subject key identifier: 7C:11:CA:CB:1B:0A:A8:39:22:18:14:1A:B7:79:11:73:A6:F4:43:63
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018B3DA1FAC8B81E63F827FE419097AB78AF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fBHKyxsKqDkiGBQat3kRc6b0Q2M.roa
Signing time: Tue 17 Oct 2023 12:35:07 +0000
ROA not before: Tue 17 Oct 2023 12:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20616
IP address blocks: 81.180.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:a1:fa:c8:b8:1e:63:f8:27:fe:41:90:97:ab:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Oct 17 12:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c11cacb1b0aa8392218141ab7791173a6f44363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:42:f4:92:7f:f9:e1:f7:58:ea:a6:bf:52:
f3:a7:b1:d2:7d:8d:68:f7:3d:e8:29:89:75:38:9d:
34:87:34:dc:5e:70:df:6e:2c:93:d9:e2:76:8c:29:
29:c4:12:73:9d:bc:fd:16:65:ca:d7:92:15:ee:3a:
38:76:b9:28:97:5a:c7:c0:b0:f6:92:3f:ff:9d:72:
f0:af:71:91:61:3c:51:03:5e:ab:32:c8:da:29:21:
49:cf:ec:c1:55:8c:f6:b7:50:72:22:d1:03:fd:6a:
ce:fb:80:83:1e:7b:9e:eb:36:48:ca:57:f4:bc:79:
e6:c4:2d:03:7f:f7:47:07:60:05:89:ef:f1:c3:16:
1b:c3:27:20:0c:2f:5a:2a:40:7a:df:5c:58:a7:e0:
84:29:ae:3b:74:18:77:26:f3:c4:64:5c:42:e0:b4:
58:89:05:ff:1f:41:a1:39:7b:11:53:c8:67:e3:ca:
aa:7b:6a:bc:10:b9:db:9f:2c:1f:d8:e3:e4:de:f8:
ee:83:3c:f5:78:c2:db:5e:b1:a7:d1:f3:b9:f9:f5:
43:a9:97:87:4b:8f:74:1d:b3:f1:b3:b7:31:8b:57:
38:46:27:97:2f:32:b6:ca:ec:a4:84:b6:c1:b6:07:
98:bd:45:cd:f2:14:1c:04:63:30:d9:f5:54:f3:d5:
83:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:11:CA:CB:1B:0A:A8:39:22:18:14:1A:B7:79:11:73:A6:F4:43:63
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/fBHKyxsKqDkiGBQat3kRc6b0Q2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.180.200.0/24
Signature Algorithm: sha256WithRSAEncryption
87:fd:99:12:f2:88:2f:c5:18:f5:1c:e9:e7:ab:65:77:db:1a:
c1:67:91:05:1b:01:7a:b6:9f:af:ca:90:19:d5:e3:42:78:58:
0c:4d:1a:14:d8:39:6a:78:b4:3c:40:01:a7:f5:ca:56:d7:3e:
ee:eb:a2:eb:0d:cf:34:9f:d4:b4:93:44:65:9d:db:11:7b:f6:
8d:cb:ef:10:42:6e:49:31:b3:87:52:6f:b3:e3:97:e4:00:91:
c0:5e:dd:39:fe:17:e8:43:d7:fa:76:6b:02:3c:70:b7:86:93:
db:ba:bf:d7:61:dd:1c:39:9d:3e:d1:58:52:35:f5:56:b9:76:
57:34:77:c6:e9:82:12:91:2b:c3:2e:00:ca:cc:ba:77:5e:ed:
21:41:cf:a8:27:1c:5c:b3:7c:52:85:e5:ef:c4:ac:84:cf:fd:
5d:d4:23:73:82:cb:57:60:96:8c:ce:95:a3:86:2a:e4:ca:71:
14:54:fe:3c:bf:88:12:de:8c:44:1c:5e:fb:21:22:78:16:86:
ae:5d:0b:46:e7:86:e7:e9:d7:48:ff:c5:4e:16:fc:44:b7:6c:
16:d5:2e:3a:6d:5a:07:75:45:38:2c:fc:dd:8b:61:aa:57:ff:
0c:2d:a4:97:4f:1f:6a:7b:f3:d5:16:57:f5:d2:38:01:57:c1:
ef:c1:2a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:05 2024 by rpki-client on console-ams.rpki-client.org