Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/HLvSG1d2V6V99QwK4I56q2_CRvo.roa
File: HLvSG1d2V6V99QwK4I56q2_CRvo.roa (raw, json)
Hash identifier: JtDHbT8t4heCO9gaTP3hTbpLVbZxnVsFvNpC2hScU/E=
Subject key identifier: 1C:BB:D2:1B:57:76:57:A5:7D:F5:0C:0A:E0:8E:7A:AB:6F:C2:46:FA
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E51B38FF8DCE7061BCE6285323262
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/HLvSG1d2V6V99QwK4I56q2_CRvo.roa
Signing time: Mon 02 Jan 2023 07:24:44 +0000
ROA not before: Mon 02 Jan 2023 07:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22439
IP address blocks: 81.199.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 12:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:51:b3:8f:f8:dc:e7:06:1b:ce:62:85:32:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1cbbd21b577657a57df50c0ae08e7aab6fc246fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:00:0d:6d:27:0d:9f:73:e6:8d:47:3d:eb:
98:c4:28:20:6f:0c:de:d5:c2:31:1c:19:13:2f:b4:
de:63:14:e4:95:7a:c7:40:54:de:6d:1d:43:31:c3:
70:74:89:f8:ec:64:ed:de:01:67:cf:8f:63:c6:4c:
9d:8c:0c:f1:08:9a:ba:62:22:ff:f4:f3:c9:d7:0f:
fe:31:19:2c:cd:ee:30:c1:42:ae:58:35:90:65:df:
7e:67:e1:64:79:6f:3f:d5:60:4a:28:c4:92:40:99:
f5:7f:fd:35:8f:6f:6b:14:02:51:55:8d:07:f1:3f:
8d:95:33:49:80:97:13:95:47:60:03:ae:74:73:f4:
d0:65:5a:b8:ad:59:0d:b2:c7:18:00:a9:a0:74:3c:
c3:d8:33:5d:b3:4e:f6:f6:31:b4:b8:19:34:02:c9:
6b:8b:7f:a8:40:af:fd:64:ee:2d:bc:d6:31:17:aa:
fd:01:b0:ed:b9:12:93:e0:dd:be:40:4f:25:2f:22:
5f:88:60:3c:81:da:32:3a:b7:b2:f6:f1:b5:d2:05:
c6:2d:85:99:1d:93:61:31:91:d3:b7:ed:a9:14:a6:
c4:58:f1:90:af:12:e1:f7:43:f5:9d:b7:0b:8f:fa:
45:5d:b8:0d:84:a7:32:a6:0c:c2:08:9e:a4:e4:20:
e5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BB:D2:1B:57:76:57:A5:7D:F5:0C:0A:E0:8E:7A:AB:6F:C2:46:FA
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/HLvSG1d2V6V99QwK4I56q2_CRvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.31.0/24
Signature Algorithm: sha256WithRSAEncryption
68:6e:f8:6a:cc:08:cb:fe:e2:7f:9d:ae:b9:fb:1e:cf:f7:c3:
43:2c:73:e9:d0:f9:b0:4b:c6:7f:f4:0a:bd:25:e1:55:7f:50:
7e:62:96:22:61:66:df:58:2b:97:a9:e9:71:bd:ec:8b:c5:1d:
ca:e7:3a:73:f0:a4:96:b6:b7:02:02:02:ae:f1:77:02:fb:17:
da:09:43:b6:88:3c:9c:19:3e:5b:e6:e9:64:26:ba:d7:dd:db:
9b:cc:1f:bf:c3:ed:d6:43:00:da:e6:69:56:64:0f:dd:9e:e8:
57:25:bc:0e:f5:70:12:d3:eb:a8:82:9a:29:49:a5:35:c8:5a:
6f:b9:c3:f8:fd:d5:c7:20:d5:1e:9e:e1:24:cb:4b:25:2d:0a:
bd:8b:71:dc:83:73:42:1e:8f:9c:8c:81:b9:d7:c4:71:af:43:
fb:26:0f:35:08:5f:42:09:62:b7:4a:4b:4a:87:25:8e:71:f4:
f2:9a:25:a0:78:91:b5:82:b8:e3:8d:80:d2:ad:e5:9c:8c:25:
08:dd:73:1e:1e:a4:3e:dd:72:71:ee:08:3b:a3:80:08:ef:5d:
48:5c:57:4f:55:00:bf:96:4b:72:34:21:74:fa:24:09:d9:14:
a8:fa:c6:1c:ba:55:7c:54:28:c7:32:0f:8e:5d:f0:22:7a:d2:
fd:b7:b9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org