Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ke4MHiXFbXiw6Ky41bhM2p-48GI.roa
File: ke4MHiXFbXiw6Ky41bhM2p-48GI.roa (raw, json)
Hash identifier: yOWRxuerKk3XnZgCLNZuYhXVTZ1q04otqBlAy/40P6s=
Subject key identifier: 91:EE:0C:1E:25:C5:6D:78:B0:E8:AC:B8:D5:B8:4C:DA:9F:B8:F0:62
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01857CDEA459DDCDB2EB2BE075B339C9DF24
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ke4MHiXFbXiw6Ky41bhM2p-48GI.roa
Signing time: Wed 04 Jan 2023 13:00:43 +0000
ROA not before: Wed 04 Jan 2023 13:00:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200298
IP address blocks: 81.181.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:de:a4:59:dd:cd:b2:eb:2b:e0:75:b3:39:c9:df:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 4 13:00:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91ee0c1e25c56d78b0e8acb8d5b84cda9fb8f062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:80:0e:84:9c:8c:de:16:f9:8f:7b:36:c1:4c:
0d:d7:7d:91:02:25:e5:90:ae:fb:4a:07:09:4f:00:
7b:b1:29:92:00:25:cd:66:a7:ee:a7:f2:61:4e:02:
9c:eb:15:81:2a:5c:61:9c:e0:91:d0:00:28:eb:78:
ac:55:af:e8:cc:14:78:e9:05:de:d5:7f:1c:73:ee:
0d:0d:d0:f3:5c:f8:93:aa:eb:1b:81:f7:ae:5d:0f:
c9:c5:36:49:0e:17:87:77:2f:b2:bf:11:a0:a3:16:
49:83:e6:2f:32:30:71:96:46:c9:9f:96:9f:95:26:
4b:98:43:5b:21:27:99:78:26:5a:12:e6:e5:f1:31:
9f:cb:81:a0:10:ff:43:2a:e2:15:e2:f4:2b:5b:39:
90:52:6d:6f:fb:69:8d:3d:12:8c:2d:f4:7f:6f:a0:
e1:83:ce:89:c6:3f:a9:29:56:a6:18:67:c7:72:7a:
b6:5e:9e:30:6d:3e:7a:d0:85:ba:8b:22:93:57:c1:
43:28:82:31:c1:44:68:b3:04:25:a1:b0:bb:f6:ad:
92:bb:63:bb:61:7f:b6:46:c7:20:4e:b9:c1:85:6e:
27:03:08:4f:60:60:2b:5e:b5:e2:11:ed:d3:69:e3:
60:dd:88:53:bc:d2:65:96:f9:ab:1a:be:6a:35:6a:
0a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EE:0C:1E:25:C5:6D:78:B0:E8:AC:B8:D5:B8:4C:DA:9F:B8:F0:62
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ke4MHiXFbXiw6Ky41bhM2p-48GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.195.0/24
Signature Algorithm: sha256WithRSAEncryption
af:0c:90:6e:c5:88:42:1d:80:08:17:3b:0d:d7:9b:c6:56:32:
69:a2:83:da:e9:1e:38:b2:73:99:15:ef:47:44:f4:73:49:b3:
b3:d9:33:09:cb:49:e3:4c:52:d9:d6:b7:70:7d:f2:90:c1:cc:
7e:56:28:13:8b:c2:89:df:01:00:f6:ae:77:41:55:63:66:43:
54:b2:41:95:c8:b6:d5:4f:ec:f3:c9:3b:4c:08:dd:aa:02:2b:
07:4f:f2:a2:bd:91:00:fc:5b:c1:e6:f9:3d:12:b0:5f:9c:7c:
32:67:22:06:ce:e6:ef:f7:2c:4f:98:2b:71:67:2c:67:bd:72:
36:4a:4a:fd:69:d2:bc:65:b2:70:21:94:da:2d:5b:43:7b:51:
6b:d9:b2:38:da:de:5c:13:b1:b6:0d:ac:60:26:5d:c8:d7:1f:
86:be:a7:ef:7e:3c:2c:8e:52:97:b2:14:f3:c8:34:de:55:f4:
02:a2:6b:e5:35:40:1a:41:19:a6:08:93:d2:07:18:61:72:ca:
fe:2c:5e:96:ba:f0:52:3e:83:83:79:31:3b:4d:15:3a:b2:4d:
af:09:e2:b5:3b:d5:30:13:94:f7:87:4d:54:83:1e:5d:ac:cf:
40:80:b3:2a:5d:16:d2:d6:31:f4:d9:b7:f8:85:58:a8:1c:bf:
f6:39:4a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org