Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/3hFwuDKQQ9pHpGiG_lPTEIHYTsE.roa
File: 3hFwuDKQQ9pHpGiG_lPTEIHYTsE.roa (raw, json)
Hash identifier: GxV5o4VymVJblWQ5loQCLnq3a25l1TZCTWGH0egUJ94=
Subject key identifier: DE:11:70:B8:32:90:43:DA:47:A4:68:86:FE:53:D3:10:81:D8:4E:C1
Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Certificate serial: 018570D516B3D4192A4CC441F236D6EE8AA9
Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/3hFwuDKQQ9pHpGiG_lPTEIHYTsE.roa
Signing time: Mon 02 Jan 2023 04:54:51 +0000
ROA not before: Mon 02 Jan 2023 04:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60507
IP address blocks: 81.94.220.0/23 maxlen: 24
81.94.223.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:16:b3:d4:19:2a:4c:c4:41:f2:36:d6:ee:8a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f
Validity
Not Before: Jan 2 04:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de1170b8329043da47a46886fe53d31081d84ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:51:56:28:20:95:1b:ef:e6:2f:c0:49:e7:
ba:8d:e6:8c:cb:6e:27:b9:77:f8:65:3c:35:a4:04:
4d:c5:2d:9f:a1:b3:a6:05:d2:91:45:e1:08:c9:1a:
de:e4:57:2e:dd:7f:50:0e:a6:15:2c:18:d6:f2:21:
78:5a:70:9f:c1:f7:b0:0d:df:df:a9:96:93:6c:cd:
02:6f:81:04:77:42:d7:65:f9:ae:09:42:3b:56:5f:
e3:29:ad:dd:fc:aa:36:49:73:71:89:38:20:41:be:
b7:63:69:75:76:5b:38:ea:90:64:ff:6d:46:06:d2:
49:73:fd:00:f6:62:69:c1:73:9c:86:06:0b:91:f1:
1e:a3:57:d1:5c:ea:f0:d4:9c:26:81:04:32:96:ae:
d0:19:bd:b5:16:42:a0:54:2a:a2:fd:78:b2:e8:f2:
c6:66:51:6a:d3:eb:62:4b:69:e0:76:0a:4d:fe:a3:
1c:d6:97:30:37:5b:38:b7:8c:aa:36:29:59:b8:a1:
f3:6e:dc:6c:61:c0:75:03:80:60:a3:fc:1b:38:71:
dd:c0:c3:da:31:6d:7b:6c:47:84:29:22:27:c0:c9:
15:e3:ad:4b:56:b7:4a:34:a3:84:56:9d:13:2a:77:
24:bd:98:2e:df:39:6a:ae:ad:c0:1e:3f:64:11:03:
35:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:11:70:B8:32:90:43:DA:47:A4:68:86:FE:53:D3:10:81:D8:4E:C1
X509v3 Authority Key Identifier:
keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/3hFwuDKQQ9pHpGiG_lPTEIHYTsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.94.220.0/23
81.94.223.0/24
Signature Algorithm: sha256WithRSAEncryption
63:89:86:44:70:94:5d:fa:38:ad:77:99:86:0d:57:68:39:ea:
cc:fa:d4:41:fb:c5:00:2d:84:94:68:7d:a6:7a:23:3a:73:d2:
ad:20:d2:d9:78:da:00:9d:5f:52:a2:40:2c:e3:0a:70:ed:60:
eb:01:94:3a:a3:c9:cc:c6:02:34:34:06:3b:f8:33:a7:c3:9e:
42:c6:07:98:9e:0f:db:f0:ef:d0:9b:16:0f:af:64:32:59:b0:
1a:24:bc:d0:65:fd:f2:87:a0:e4:0e:07:33:0e:c2:2f:f8:c5:
bc:08:a7:c6:d1:2f:4d:d4:ba:10:24:e1:7c:08:f0:ed:5e:31:
55:6c:9d:a1:b5:8a:ab:39:5d:e8:92:52:89:b3:b1:d1:20:b1:
55:29:d9:11:e2:b1:cd:be:e5:39:c1:ee:ca:53:a6:fa:15:6d:
9d:94:72:74:05:dc:53:e1:cc:f5:16:0a:d4:75:7a:aa:d9:f1:
d0:95:72:d9:70:53:54:cd:89:9a:b7:f7:eb:23:79:c1:a6:a6:
65:d3:84:4c:4e:f7:00:73:63:de:6d:26:44:a3:ca:aa:92:1b:
53:05:69:37:97:cf:9d:f5:67:ee:97:50:47:de:00:4f:93:d0:
50:ea:00:e3:e6:36:17:e0:c1:d9:4b:ee:db:2e:ed:0c:3e:77:
8d:45:45:89
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVw1Raz1BkqTMRB8jbW7oqpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw
ZGVlMGYwHhcNMjMwMTAyMDQ1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTExNzBiODMyOTA0M2RhNDdhNDY4ODZmZTUzZDMxMDgxZDg0ZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop9RVigglRvv5i/ASee6jeaMy24n
uXf4ZTw1pARNxS2fobOmBdKRReEIyRre5Fcu3X9QDqYVLBjW8iF4WnCfwfewDd/f
qZaTbM0Cb4EEd0LXZfmuCUI7Vl/jKa3d/Ko2SXNxiTggQb63Y2l1dls46pBk/21G
BtJJc/0A9mJpwXOchgYLkfEeo1fRXOrw1JwmgQQylq7QGb21FkKgVCqi/Xiy6PLG
ZlFq0+tiS2ngdgpN/qMc1pcwN1s4t4yqNilZuKHzbtxsYcB1A4Bgo/wbOHHdwMPa
MW17bEeEKSInwMkV461LVrdKNKOEVp0TKnckvZgu3zlqrq3AHj9kEQM19QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFN4RcLgykEPaR6Rohv5T0xCB2E7BMB8GA1UdIwQY
MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt
NmFlYTkwNTdjODAwLzEvM2hGd3VES1FROXBIcEdpR19sUFRFSUhZVHNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw
LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBUV7cAwQA
UV7fMA0GCSqGSIb3DQEBCwUAA4IBAQBjiYZEcJRd+jitd5mGDVdoOerM+tRB+8UA
LYSUaH2meiM6c9KtINLZeNoAnV9SokAs4wpw7WDrAZQ6o8nMxgI0NAY7+DOnw55C
xgeYng/b8O/QmxYPr2QyWbAaJLzQZf3yh6DkDgczDsIv+MW8CKfG0S9N1LoQJOF8
CPDtXjFVbJ2htYqrOV3oklKJs7HRILFVKdkR4rHNvuU5we7KU6b6FW2dlHJ0BdxT
4cz1FgrUdXqq2fHQlXLZcFNUzYmat/frI3nBpqZl04RMTvcAc2PebSZEo8qqkhtT
BWk3l8+d9Wful1BH3gBPk9BQ6gDj5jYX4MHZS+7bLu0MPneNRUWJ
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:01 2024 by rpki-client on console-fra.rpki-client.org