Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/31iNXuNBKedEYuVmYuOYyoQ1i2U.roa
File: 31iNXuNBKedEYuVmYuOYyoQ1i2U.roa (raw, json)
Hash identifier: I6Jg28rkWUOJCpZ11AFicfJnbxwhsWdfQKj63Aa2D14=
Subject key identifier: DF:58:8D:5E:E3:41:29:E7:44:62:E5:66:62:E3:98:CA:84:35:8B:65
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E56CB18A5A160EA23F62D560266C7
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/31iNXuNBKedEYuVmYuOYyoQ1i2U.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 81.199.27.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:56:cb:18:a5:a1:60:ea:23:f6:2d:56:02:66:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=df588d5ee34129e74462e56662e398ca84358b65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:f9:39:49:29:bd:c9:7d:8c:13:fb:c0:dc:01:
5f:ed:43:07:29:2e:c9:ee:17:90:a3:a5:cb:61:62:
09:10:c9:51:ab:10:ee:7c:5a:49:49:8d:bb:93:3f:
94:41:81:41:15:72:5b:1f:28:cf:06:59:e2:f6:62:
a9:85:14:ca:ea:cf:3c:38:65:f3:32:04:cb:83:b8:
90:90:51:78:c6:76:5e:d0:85:75:30:82:3f:81:94:
00:23:66:4a:b6:86:55:3a:93:fd:be:31:e8:85:49:
2e:a5:15:e1:38:44:db:af:a0:5b:5c:81:cb:01:91:
7e:50:a2:01:69:75:3f:80:4e:40:32:e8:a4:54:10:
d3:6b:8e:60:33:c0:54:22:50:bf:b1:1b:88:70:71:
09:74:4e:9d:4b:75:ab:ba:1b:59:60:76:2d:b8:a5:
04:e1:0f:2a:b5:b0:90:7e:f9:12:34:88:58:be:f3:
61:d4:bf:1b:6d:9a:28:75:18:77:44:28:9f:34:0d:
54:c7:1a:33:3f:ec:0f:08:89:d1:d4:cc:fd:f3:fa:
dd:5b:14:6a:96:b7:63:e4:16:73:49:19:4e:74:57:
22:ce:b5:76:2e:14:d9:67:06:3d:99:67:00:4b:9b:
11:08:b7:d7:ab:eb:13:40:0f:09:e3:9b:b2:60:14:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:58:8D:5E:E3:41:29:E7:44:62:E5:66:62:E3:98:CA:84:35:8B:65
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/31iNXuNBKedEYuVmYuOYyoQ1i2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.27.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:c0:bd:bc:13:1e:88:a8:38:90:29:20:f6:cf:68:24:5a:65:
b2:5d:85:45:03:19:7f:1f:45:3d:74:69:b9:89:04:88:00:5d:
14:f7:e2:f0:b6:dc:b3:5b:91:c7:7a:65:28:e0:ec:f6:76:6f:
9b:a4:c7:44:31:af:8c:77:cc:bd:4c:37:ed:64:6f:67:8a:1d:
10:e4:57:33:59:71:ad:f6:79:e1:b9:ad:4d:44:10:19:6c:da:
cd:47:d0:f3:f3:0a:d7:26:0a:f9:d8:a5:59:7b:57:ec:e3:5f:
6f:80:7d:a7:4d:11:1d:8b:2e:0a:de:ee:da:5d:bd:9a:91:4b:
26:41:1c:51:46:86:4b:79:db:19:f7:bd:f0:03:12:ed:2c:8c:
fc:26:a3:4c:5b:bd:a2:14:64:36:bc:8b:5e:19:1c:de:9b:4a:
19:d3:d0:a3:44:00:69:1a:88:98:5e:0a:c8:b5:43:7f:1c:6d:
3b:b6:da:2d:7b:c3:6e:48:56:c0:77:ab:b8:13:11:71:1a:56:
3d:61:df:fb:af:df:f9:94:cc:33:dc:92:5d:71:a2:36:c7:bd:
57:4c:fa:41:63:fa:5d:aa:4a:0e:25:14:2d:59:84:58:54:07:
18:7f:90:9e:63:ad:90:4c:e2:d1:18:42:b1:5f:37:5a:61:b4:
f6:15:14:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:25 2024 by rpki-client on console-fra.rpki-client.org