Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/1FMpZ2BG1eRxIaNiXA9RUvdGT60.roa
File: 1FMpZ2BG1eRxIaNiXA9RUvdGT60.roa (raw, json)
Hash identifier: abJh4yfIebaT927LyVdgr4YnDXSgJDGd0cfyDMcA3wM=
Subject key identifier: D4:53:29:67:60:46:D5:E4:71:21:A3:62:5C:0F:51:52:F7:46:4F:AD
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E51FE2F3B0114D969CAA97D5B26CA
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/1FMpZ2BG1eRxIaNiXA9RUvdGT60.roa
Signing time: Mon 02 Jan 2023 07:24:44 +0000
ROA not before: Mon 02 Jan 2023 07:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23352
IP address blocks: 81.199.24.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:51:fe:2f:3b:01:14:d9:69:ca:a9:7d:5b:26:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45329676046d5e47121a3625c0f5152f7464fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e8:c4:f5:9b:6b:4c:57:87:eb:ee:55:d9:b0:
ef:29:2e:14:c5:2b:51:ab:1b:6e:cb:c7:7c:ad:2f:
0d:36:80:6c:29:a8:3a:af:85:5a:85:36:b0:a4:b0:
b6:d8:2d:67:c1:d5:a3:e4:93:0e:f8:81:67:44:2a:
94:03:2d:e3:82:59:3d:25:2f:04:19:1a:1f:eb:bb:
b1:da:f4:c6:f9:37:2c:f3:d3:b4:06:39:75:91:33:
77:4d:13:38:c5:39:96:e6:ea:0f:7b:a6:fe:48:a6:
00:0f:d4:ee:28:85:63:ea:6d:d5:24:4c:00:22:17:
56:21:f6:76:60:37:42:74:e5:dd:38:de:2a:e7:a8:
5a:14:33:39:0b:0c:ea:18:e9:98:c1:68:08:0b:7c:
b1:00:0a:53:27:50:8b:ea:1f:b9:6e:82:af:bc:15:
26:28:90:a7:7a:e2:db:18:d8:48:b5:80:83:2a:29:
d3:35:5c:e5:e0:ec:51:78:28:b6:20:8d:a3:78:06:
30:a7:7c:a3:64:8f:ac:63:93:40:5a:c8:98:25:5e:
a7:5c:29:2b:29:07:9d:d4:56:a6:e0:75:62:c1:c7:
db:0e:3e:80:cc:90:ef:7b:71:35:5b:98:37:a6:65:
70:f2:f7:11:15:5c:df:f1:3a:b7:a4:c6:2e:d3:43:
54:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:29:67:60:46:D5:E4:71:21:A3:62:5C:0F:51:52:F7:46:4F:AD
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/1FMpZ2BG1eRxIaNiXA9RUvdGT60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.24.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:f6:4a:f5:27:43:6e:77:1a:72:a1:60:0d:27:40:15:a9:b3:
7a:a6:24:0c:14:a5:57:c8:56:9e:2f:77:49:69:ae:5f:08:7c:
46:c1:f8:d2:4f:a9:91:b7:2a:6d:3c:76:83:0b:44:fd:03:fd:
00:c1:d6:4a:7d:bf:39:f3:85:bb:a7:45:ed:43:60:6f:31:9d:
5e:1a:0a:8d:8f:ce:f6:19:c4:b8:0b:fd:fe:32:18:3f:21:f6:
f4:8d:9c:c7:6b:ad:2e:3b:44:c1:d4:fd:66:ef:ce:aa:2a:25:
d1:1c:9f:e6:ef:3a:9d:2b:15:b0:ab:f0:0c:16:6e:d0:08:b0:
11:9f:01:67:96:7d:08:75:12:a6:11:e0:68:64:48:b4:42:91:
24:dd:08:78:de:b4:4b:d9:17:a2:fa:40:f9:ee:27:83:fe:d3:
17:6d:22:b2:d6:19:88:cf:d1:09:d0:9f:0e:73:ed:28:88:1b:
ed:f4:8a:5d:ae:39:ef:63:57:1d:b3:3e:07:f4:de:7c:27:5e:
3e:8b:9f:62:a8:8f:7f:80:a1:33:89:c4:b5:88:48:00:d1:db:
d8:45:a5:8e:19:d3:b6:52:a5:42:e0:02:c8:42:55:59:f0:95:
a4:70:33:bd:08:55:a8:b6:80:5a:5e:df:14:ef:24:b6:7e:07:
76:5b:39:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:25 2024 by rpki-client on console-fra.rpki-client.org