Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/6vIM8s9TCw4tuAortQPvH0xVuB0.roa
File: 6vIM8s9TCw4tuAortQPvH0xVuB0.roa (raw, json)
Hash identifier: b7YnFf6a29qQo0dkwgh+5IABXmiknDTVDZXejdYX0ZU=
Subject key identifier: EA:F2:0C:F2:CF:53:0B:0E:2D:B8:0A:2B:B5:03:EF:1F:4C:55:B8:1D
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E4F7C2FB45AFB6518195F1CC30D5E
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/6vIM8s9TCw4tuAortQPvH0xVuB0.roa
Signing time: Mon 02 Jan 2023 07:24:44 +0000
ROA not before: Mon 02 Jan 2023 07:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 81.199.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:4f:7c:2f:b4:5a:fb:65:18:19:5f:1c:c3:0d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eaf20cf2cf530b0e2db80a2bb503ef1f4c55b81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8a:11:2b:be:db:05:07:45:fb:c1:c2:8b:e4:
e3:f5:1d:a7:ab:e8:87:a7:ad:14:59:52:a7:c1:29:
00:8b:05:41:e6:01:87:67:07:59:b2:b9:17:99:70:
c5:93:d9:52:a5:8f:7c:e0:8a:f8:b8:ee:50:24:4f:
b4:f4:d4:6e:9e:ce:62:6c:81:b6:15:a8:44:b0:23:
75:a4:f9:7a:0e:60:1c:5f:88:a8:93:55:61:f9:44:
36:90:7d:0f:91:35:e4:12:c5:10:38:a6:35:b7:05:
32:63:ac:3f:13:f8:26:d2:6a:e0:f4:81:ae:97:88:
d0:58:71:89:95:5a:25:06:d8:5a:ab:41:16:7d:bf:
05:1b:cf:85:e9:ea:6a:65:01:f6:9d:c9:83:1a:74:
26:71:b7:f7:63:e5:d0:51:ff:21:a0:bb:db:52:97:
a2:98:7a:fb:d4:55:99:64:24:e7:ec:63:ff:4b:1e:
cd:fc:2d:af:7c:5a:ec:a7:d6:0c:2e:9e:f9:30:28:
55:ac:d6:73:7f:47:bc:d9:86:a3:75:e0:8f:c1:5a:
b1:d4:fb:1c:ea:93:03:ee:ae:61:3b:29:e6:9a:ea:
a8:9e:03:d1:8a:80:b4:9c:23:7d:9f:14:bf:71:be:
19:1a:d0:00:e0:f0:8d:e6:f9:9e:58:4f:e5:c1:1d:
f8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F2:0C:F2:CF:53:0B:0E:2D:B8:0A:2B:B5:03:EF:1F:4C:55:B8:1D
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/6vIM8s9TCw4tuAortQPvH0xVuB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.28.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:91:c0:f6:ea:83:91:b3:51:3d:0f:e7:1a:c7:50:09:eb:89:
6d:fb:19:32:f1:55:4f:91:f7:6e:a6:66:97:57:f4:1a:76:6d:
35:44:20:72:21:65:da:1b:23:9f:27:7d:5d:79:62:c2:8c:4b:
82:70:52:08:95:09:94:a8:8b:16:58:e7:7f:6b:bf:48:d3:c3:
54:df:fa:6e:af:e0:9d:a4:30:96:8c:b4:27:c5:28:2e:f2:7a:
2c:da:76:35:34:e8:da:dd:54:bf:b7:48:d5:35:dd:ec:04:3f:
70:c6:92:b0:cb:93:08:7a:e3:e0:0c:30:f6:e2:f0:ff:00:40:
b6:2c:c5:dd:fc:1a:5e:a3:24:a1:4d:aa:03:95:f6:60:2c:ec:
09:dd:38:0b:4e:b4:cb:36:56:50:78:12:e0:c9:ae:f2:09:5f:
c0:eb:77:4b:2a:23:d8:2a:f0:e3:ce:16:e7:19:23:16:2f:c1:
6a:78:52:9d:e1:21:9e:4b:74:ec:06:df:10:44:c0:7c:73:78:
82:60:96:40:e0:08:da:1a:44:49:33:76:92:43:1e:d9:93:f5:
11:3e:7c:62:52:2d:65:8c:77:9c:85:ca:e0:61:bc:4c:a0:84:
2b:58:21:35:bc:c9:5f:ef:44:3f:85:3d:90:27:5e:ff:2c:ef:
2b:8d:8f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:25 2024 by rpki-client on console-fra.rpki-client.org