Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa
File: yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa (raw, json)
Hash identifier: KlO4sVTikfy/8+Lf/KFVkyY2paQwp0moTEUyiKCrSNg=
Subject key identifier: CA:BE:52:90:44:24:68:AA:03:49:95:3D:BB:30:F3:A8:EF:4B:2B:94
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F15043385560780877BB6201D2E6EED
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa
Signing time: Sun 01 Jan 2023 20:45:26 +0000
ROA not before: Sun 01 Jan 2023 20:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59590
IP address blocks: 81.181.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:15:04:33:85:56:07:80:87:7b:b6:20:1d:2e:6e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cabe5290442468aa0349953dbb30f3a8ef4b2b94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:85:ed:25:cf:66:5d:58:3d:aa:75:a8:3f:22:
28:9d:c2:39:de:c7:54:d3:0b:70:10:86:01:71:52:
f9:4c:15:a1:97:4d:8b:75:db:42:06:16:fc:2f:a8:
b4:65:3c:27:8d:99:1c:9b:f1:65:c1:ba:e3:46:0d:
0a:7b:30:71:d7:44:bc:ba:87:d0:00:0e:47:69:38:
4a:d7:47:18:4e:68:7b:d2:26:f0:11:57:85:a3:77:
5d:65:b1:61:73:da:16:e9:7f:5f:a2:c6:35:87:30:
62:b4:45:ca:bc:6d:1d:72:b2:98:c4:c9:e9:33:87:
40:d7:58:97:0d:5f:41:43:ae:84:5a:c3:45:4c:ae:
c0:1e:55:f8:cb:2d:6e:38:78:58:b8:64:ef:32:50:
82:24:1f:70:81:ea:ac:5b:2b:4f:31:19:77:10:88:
ac:84:2b:6a:c3:48:03:be:e9:c4:de:27:51:85:78:
c5:ee:b4:7d:35:06:c9:0f:a9:f8:2d:2f:9f:3e:02:
62:33:f2:ca:39:1f:4f:42:9d:4d:c5:2a:52:e4:1e:
60:47:d0:40:95:dd:a1:9c:42:ac:2f:d8:f1:96:d4:
e3:63:88:2f:92:13:ab:50:cf:4b:39:d6:9a:48:79:
8d:d7:88:e7:f0:48:a2:c1:ce:63:80:67:c9:41:bd:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:BE:52:90:44:24:68:AA:03:49:95:3D:BB:30:F3:A8:EF:4B:2B:94
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/yr5SkEQkaKoDSZU9uzDzqO9LK5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.181.8.0/24
Signature Algorithm: sha256WithRSAEncryption
04:1b:5b:6e:a0:8c:2d:4a:ba:ba:81:20:67:06:c1:5e:31:e7:
ba:e2:75:ee:bc:21:dd:d2:0d:52:bc:1c:4f:9b:47:1d:0c:a9:
75:41:ec:f0:88:15:4f:ce:c1:bd:2d:ef:f6:01:e2:a7:4d:68:
25:57:a3:f9:ef:23:9d:45:74:b8:0d:01:6d:75:0d:4e:bd:30:
09:f6:e4:0f:e6:36:be:f2:76:2d:f2:f6:62:85:f4:48:b8:5f:
c9:9d:59:28:69:15:11:a1:11:ca:78:8a:8e:54:a5:93:bf:f9:
77:2b:e3:ca:d0:e7:49:b4:39:23:97:87:06:d2:d7:f6:8b:32:
a6:61:c0:58:01:7c:cb:b2:0a:7f:0a:de:f8:17:d6:d9:ae:83:
6d:1c:c6:3c:3d:62:41:07:ce:e9:ba:5b:71:dd:ca:04:31:b0:
4c:a4:f5:db:34:75:c1:c8:42:a4:2f:45:e0:9c:b7:db:a0:3a:
0c:38:63:65:22:f4:6f:cf:70:98:3b:53:f2:60:a6:3b:76:7c:
7c:ad:b6:c6:f6:fc:03:78:7b:4e:50:23:ac:b2:7b:06:8d:52:
d6:68:38:23:c3:f6:0b:18:62:95:e0:7b:fd:9f:07:32:89:3d:
c7:e8:5c:f7:f9:47:8f:ac:51:c7:76:c6:1c:69:6a:d6:fa:36:
b5:19:cd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:49 2024 by rpki-client on console-ams.rpki-client.org