Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/IW1MbfR_aCWKaCZGAF7o-AYVYJA.roa
File: IW1MbfR_aCWKaCZGAF7o-AYVYJA.roa (raw, json)
Hash identifier: cmsi94fhiUTwafpQ787StKUjjFt3ILucneXJzh3nj/k=
Subject key identifier: 21:6D:4C:6D:F4:7F:68:25:8A:68:26:46:00:5E:E8:F8:06:15:60:90
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E5551AC665A10713EA525F65CDD08
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/IW1MbfR_aCWKaCZGAF7o-AYVYJA.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 81.199.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:55:51:ac:66:5a:10:71:3e:a5:25:f6:5c:dd:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=216d4c6df47f68258a682646005ee8f806156090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:60:6a:31:10:1e:52:79:2d:f9:70:0d:e5:
4f:09:4e:da:e8:6c:7e:69:4a:10:0b:51:8a:81:da:
18:83:76:89:dc:32:13:65:4b:04:7c:28:a7:f4:2e:
ff:b9:17:64:22:7c:37:82:be:25:ca:47:76:ab:1e:
8c:82:f2:68:e0:93:6e:12:e4:d5:b4:b7:05:78:10:
d0:4f:dc:db:ee:c8:7d:ce:92:b3:d6:0c:22:70:12:
e4:25:11:96:d0:fa:ff:e8:c4:7b:2a:05:28:b9:77:
5d:dd:cc:f9:3b:b9:62:e4:57:a2:fd:45:c1:d1:7c:
fe:04:e5:d4:b2:61:9c:ec:b1:a0:cd:63:0d:a7:1a:
07:06:5c:2f:60:75:10:9a:47:65:8b:af:b6:93:a9:
cb:7a:45:d9:60:02:e6:9c:6e:cf:59:ea:08:1d:d4:
fd:a2:9f:b5:4d:71:f4:f4:2d:09:fb:0b:fd:74:3e:
a6:8e:3e:be:9a:69:63:07:6e:9b:06:15:6e:77:a9:
77:b5:5f:ce:cc:a6:26:80:04:a2:f6:7f:13:0c:3a:
81:ac:f7:ed:db:7e:a6:69:74:f2:b4:39:90:03:8b:
47:d6:8b:9b:1d:56:a9:96:3c:d7:ab:16:10:a5:2a:
3b:cc:07:6d:86:81:ab:bd:37:12:a5:55:8e:63:45:
92:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:6D:4C:6D:F4:7F:68:25:8A:68:26:46:00:5E:E8:F8:06:15:60:90
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/IW1MbfR_aCWKaCZGAF7o-AYVYJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.30.0/24
Signature Algorithm: sha256WithRSAEncryption
92:e0:cd:74:da:43:df:4c:fb:89:30:be:d8:99:b3:65:b7:9f:
8d:5e:3f:a1:b8:6d:b9:36:5c:89:ca:65:06:a8:5f:49:71:19:
36:c3:9b:65:95:d1:2a:f2:8f:64:46:8c:8c:9d:64:6c:da:04:
b6:1a:e2:8b:44:c9:db:64:a5:00:1a:a8:d7:ed:c9:cf:b5:07:
fa:be:60:7d:9c:c3:2a:fd:9b:13:a3:89:24:98:03:5d:d6:b5:
eb:3d:e6:e8:4e:3c:1e:d6:3f:cf:34:5b:28:c2:b1:d4:78:6f:
cb:ff:f1:bf:d3:a1:58:b6:2b:70:a3:97:a5:58:6e:67:c1:6c:
5c:4c:dc:25:17:c2:b1:ba:e0:42:3d:c5:f9:98:ba:5f:07:9f:
04:b1:cc:4d:88:de:e5:4e:f3:a5:9d:5e:5c:ec:1b:55:08:f3:
31:3f:e3:27:9d:dd:ba:40:69:77:e0:59:88:30:c2:47:fd:78:
b1:07:3a:6d:7b:9b:95:0c:d2:9c:4f:2f:90:ac:c7:eb:21:53:
1c:fa:54:f3:f6:11:48:95:1b:45:05:f6:0f:52:56:0f:2d:53:
fe:78:cc:b6:52:03:87:c3:02:e2:4b:81:a0:a2:0e:c2:1d:58:
66:2d:61:31:26:4f:da:13:c1:90:33:8a:5c:d3:10:04:5b:0b:
81:c5:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:31 2023 by rpki-client on console-ams.rpki-client.org