Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DGLjOeEnOVA0mruQExCjmxYaRww.roa
File: DGLjOeEnOVA0mruQExCjmxYaRww.roa (raw, json)
Hash identifier: HHAPWSHYQ9Eu+CqRdMZ16B40YBqYKWB9jvMlbSzkKF4=
Subject key identifier: 0C:62:E3:39:E1:27:39:50:34:9A:BB:90:13:10:A3:9B:16:1A:47:0C
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0191251D549B5FC59E0769E373DB6BA94B98
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DGLjOeEnOVA0mruQExCjmxYaRww.roa
Signing time: Tue 06 Aug 2024 00:36:04 +0000
ROA not before: Tue 06 Aug 2024 00:36:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215287
IP address blocks: 81.199.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Sep 2024 01:33:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:25:1d:54:9b:5f:c5:9e:07:69:e3:73:db:6b:a9:4b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 6 00:36:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c62e339e1273950349abb901310a39b161a470c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:54:7d:70:c8:04:dd:93:15:3e:22:aa:70:
96:e5:05:94:cf:59:63:64:cb:de:ff:0d:d1:fb:3f:
ea:5f:85:02:d1:ad:14:10:8b:4e:d5:a9:fb:be:01:
d3:31:8a:16:27:d8:e0:b3:72:30:e8:e9:9b:40:6d:
fa:28:e0:85:28:29:30:d0:ab:d2:26:78:5d:f7:10:
c6:60:b6:f3:bf:ab:b2:93:ba:23:c2:29:dc:e1:c8:
1b:d8:05:0d:26:72:a9:69:50:4c:0f:db:64:1b:ee:
f7:34:f3:39:08:89:49:b8:80:15:cd:c8:1d:9a:a6:
fe:7f:09:6a:43:d4:49:27:08:4a:85:52:13:ee:fa:
0d:79:49:d0:9e:0c:c1:9c:a2:6d:74:29:27:a1:26:
02:91:49:38:6f:a2:53:f9:1d:0a:95:e5:43:a9:4a:
dc:4f:27:7b:ee:88:ac:7b:ca:ef:19:62:8f:f3:20:
19:40:55:ff:35:af:1c:77:5e:b2:a9:0a:47:0a:fc:
9a:90:b1:39:d4:19:ed:82:9a:59:b5:3f:e5:ed:cf:
36:57:af:44:7e:c1:5a:b7:a7:10:0d:b9:3e:cc:10:
47:2f:c5:dc:42:65:15:4b:e5:03:04:bd:14:ea:6a:
e8:31:05:4b:db:8c:0e:e1:10:6f:12:6a:50:28:9b:
1f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:62:E3:39:E1:27:39:50:34:9A:BB:90:13:10:A3:9B:16:1A:47:0C
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/DGLjOeEnOVA0mruQExCjmxYaRww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:d2:b0:a8:c7:5f:6d:9a:2a:9a:0a:6f:e3:4e:10:d2:d7:00:
70:12:7e:d8:85:22:31:1e:98:bd:80:99:1d:2b:0b:ff:d2:48:
28:5f:36:9a:5a:c3:28:5c:90:38:e9:78:1d:cf:af:3e:18:e6:
06:bc:31:0e:06:ba:25:4e:6b:76:7e:2f:5a:c8:6d:1f:26:d4:
1f:92:ea:4b:2b:36:2e:e5:7d:be:d8:0e:8d:cb:21:b1:4d:f1:
2c:67:a1:e7:89:b8:2e:8f:14:c0:80:0e:df:54:13:41:90:b1:
d6:f2:5e:d3:a8:7e:cd:35:82:05:47:42:9a:89:f5:ba:72:9b:
98:f0:6e:59:09:20:f1:6e:09:f1:92:b7:b0:6f:32:b3:60:5e:
c3:21:67:32:7a:08:6c:8a:e1:05:d2:34:fd:d7:65:69:a0:35:
b2:02:d7:be:93:97:02:fb:de:9f:1f:af:06:43:9f:c7:7d:f3:
76:5c:43:f1:1c:14:e5:fb:91:f6:3f:9f:b6:73:1e:cb:51:13:
ec:5d:d0:49:c4:ba:f1:7a:9a:ae:14:a6:9a:98:bc:d0:86:ce:
84:dd:fb:e6:d5:72:03:bc:6f:4a:20:d4:22:5f:52:27:3c:7d:
90:1d:15:20:8f:5e:0a:7c:00:b1:ab:d4:a6:75:ff:db:08:4f:
e5:8e:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 5 03:20:55 2024 by rpki-client on console-fra.rpki-client.org