Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/TGrzGrHCzZiVhVIm_e0xNk-Ikl4.roa
File: TGrzGrHCzZiVhVIm_e0xNk-Ikl4.roa (raw, json)
Hash identifier: BplApBo5w1iGHaBR1hzEhxMrViMHGXE8LhXQJJHkIg8=
Subject key identifier: 4C:6A:F3:1A:B1:C2:CD:98:95:85:52:26:FD:ED:31:36:4F:88:92:5E
Certificate issuer: /CN=3ad65216812ed24fd1c719871a59a971dec30a26
Certificate serial: 01856FCBC0B892774DF390782E378FBA945C
Authority key identifier: 3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/TGrzGrHCzZiVhVIm_e0xNk-Ikl4.roa
Signing time: Mon 02 Jan 2023 00:05:01 +0000
ROA not before: Mon 02 Jan 2023 00:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202909
IP address blocks: 81.94.55.0/24 maxlen: 24
37.186.5.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:c0:b8:92:77:4d:f3:90:78:2e:37:8f:ba:94:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad65216812ed24fd1c719871a59a971dec30a26
Validity
Not Before: Jan 2 00:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4c6af31ab1c2cd9895855226fded31364f88925e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:50:65:7c:39:b2:4b:9b:8d:2b:26:dc:2f:
df:49:d4:72:70:5c:37:50:cd:ff:ec:08:0c:9e:14:
a9:21:5c:93:d4:de:68:06:3f:47:4e:29:55:98:1b:
1c:dc:b4:ca:64:ca:03:5b:73:fc:b5:ef:4c:3e:1e:
c9:37:e1:0e:65:2d:68:a6:38:67:b6:79:f7:1d:5b:
ef:c3:54:81:1b:9c:56:97:02:ec:68:41:9d:cd:78:
39:a7:1f:ce:e0:26:9d:6d:08:06:5c:1d:45:50:69:
21:82:ec:09:e2:53:03:c5:b2:96:12:cc:5e:42:dc:
dd:b5:17:7a:ca:0c:33:8c:3b:73:f4:5a:ca:59:27:
f6:dd:89:38:18:6b:fa:97:86:42:95:08:b9:ff:4c:
20:4e:0c:3c:79:6e:7a:94:a5:c7:da:64:e8:51:23:
e3:f5:f6:a1:d8:75:b6:c2:c1:e2:f0:c2:09:a9:87:
05:f6:68:4b:24:6c:06:49:d0:ea:d4:97:5b:e9:73:
54:4e:7c:d5:32:78:df:8b:25:14:a8:b2:d3:c4:de:
55:51:aa:15:4f:12:ed:55:56:be:89:49:b7:3d:d0:
e2:14:82:b4:b7:7d:1a:d8:7c:a2:2d:00:5c:ff:58:
9f:c3:89:35:38:10:05:b4:40:73:c6:13:d4:5a:8d:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6A:F3:1A:B1:C2:CD:98:95:85:52:26:FD:ED:31:36:4F:88:92:5E
X509v3 Authority Key Identifier:
keyid:3A:D6:52:16:81:2E:D2:4F:D1:C7:19:87:1A:59:A9:71:DE:C3:0A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OtZSFoEu0k_RxxmHGlmpcd7DCiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/TGrzGrHCzZiVhVIm_e0xNk-Ikl4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b8cae4-b5af-4380-9817-46538ca5383c/1/OtZSFoEu0k_RxxmHGlmpcd7DCiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.186.5.0/24
81.94.55.0/24
Signature Algorithm: sha256WithRSAEncryption
72:9d:1b:2a:03:da:8f:9b:39:e0:b4:72:e9:18:cd:31:14:3e:
05:88:bf:22:6a:54:38:70:8f:20:53:4a:80:74:27:f6:d7:2c:
c1:74:bb:db:df:17:21:72:cb:96:76:e5:7d:1f:00:27:3d:42:
1e:8d:93:e1:4d:44:0a:cd:56:1b:dd:b3:35:65:b5:57:b3:41:
ef:96:a3:a1:0a:e7:5b:31:e1:09:46:8b:5b:a1:cf:6e:93:d4:
07:cf:c8:22:d4:d5:1d:e5:42:96:d7:2f:2e:3c:3d:66:da:71:
4c:9f:00:c0:2a:0c:1c:a5:3d:f2:0d:9d:09:0e:5d:eb:6f:41:
a3:48:c6:c5:18:78:fb:df:3d:ce:a9:e9:6b:34:eb:bf:56:5c:
45:25:75:ab:7a:66:66:b0:da:02:42:38:84:27:16:f1:57:95:
e9:26:d2:0f:b4:45:1e:00:18:0c:ac:a7:d5:ac:1e:ee:ff:f8:
4c:b7:87:b5:d5:4d:94:27:e6:08:80:89:26:8e:06:b4:3e:89:
d0:a9:12:bf:ae:04:7a:43:63:af:b4:2b:6d:23:a2:e6:d0:5a:
a3:0f:cc:09:5c:62:ef:f6:17:c4:46:0c:12:cf:d6:71:03:5d:
8f:88:89:8f:d9:be:39:7e:62:a3:0e:f9:9e:50:c9:9f:06:01:
97:55:15:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:11 2024 by rpki-client on console-ams.rpki-client.org