Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/KJX4Lexsj0Lum2Xu143JOrrhlYM.roa
File: KJX4Lexsj0Lum2Xu143JOrrhlYM.roa (raw, json)
Hash identifier: 0KI7WwF40fByloCEpzUCipj8IfF2pt4OPUQR+yCog1s=
Subject key identifier: 28:95:F8:2D:EC:6C:8F:42:EE:9B:65:EE:D7:8D:C9:3A:BA:E1:95:83
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 018C58F6A193D0383A498B2971AD00ABDAF5
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/KJX4Lexsj0Lum2Xu143JOrrhlYM.roa
Signing time: Mon 11 Dec 2023 13:00:07 +0000
ROA not before: Mon 11 Dec 2023 13:00:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.199.29.0/24 maxlen: 24
81.199.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:58:f6:a1:93:d0:38:3a:49:8b:29:71:ad:00:ab:da:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Dec 11 13:00:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2895f82dec6c8f42ee9b65eed78dc93abae19583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:35:49:b4:8c:32:b5:6a:fc:d6:b3:27:43:34:
c0:de:df:4f:0b:f3:bf:ee:6f:21:85:59:a5:b0:ea:
59:76:c6:6d:fc:c6:4c:90:88:0d:ad:b5:9a:e0:8e:
d3:85:3b:cc:be:25:eb:e7:65:7a:6e:df:51:3b:f1:
8b:2f:61:17:13:05:f1:7f:30:46:c0:0b:aa:ea:a8:
ba:0f:29:28:64:f7:3d:9a:4b:95:59:4d:34:fa:6f:
cb:ae:fc:51:48:c7:b1:d5:03:12:0e:fd:23:66:7c:
e2:f6:77:be:de:93:fb:f9:ed:cb:6a:e0:a3:44:a9:
80:0d:8e:6e:24:11:10:75:14:56:f9:91:f2:d6:50:
30:4a:9d:a3:c7:43:d8:6f:62:f2:ff:d2:dd:44:52:
8c:7b:aa:5a:46:de:3a:25:45:5c:6e:4d:43:f4:fd:
f3:0c:5c:bc:51:2c:1c:30:07:3d:86:05:cf:c0:f6:
3c:ec:e3:ab:d0:90:0a:1a:45:38:93:47:10:43:c8:
64:eb:7f:4a:10:d2:3d:57:42:85:3c:a9:02:56:58:
63:f2:cd:1e:c6:e1:e9:8f:3c:2c:65:21:37:3a:fa:
bd:96:96:1c:d1:38:9c:15:7d:98:ca:69:e0:66:84:
eb:91:b5:bd:db:d4:97:ac:f1:f9:aa:ab:7e:a3:f9:
ad:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:95:F8:2D:EC:6C:8F:42:EE:9B:65:EE:D7:8D:C9:3A:BA:E1:95:83
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/KJX4Lexsj0Lum2Xu143JOrrhlYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.26.0/24
81.199.29.0/24
Signature Algorithm: sha256WithRSAEncryption
27:71:89:5f:cc:32:93:b2:de:49:f3:da:af:e3:31:a4:1f:c5:
24:42:2d:9a:14:c1:cf:6f:86:cb:ba:c3:2e:62:ff:f7:55:97:
d0:1b:00:ca:be:3d:89:7b:58:72:ad:5c:76:13:ea:c3:1a:dd:
fb:14:be:92:93:44:2d:44:39:09:65:85:66:58:63:7e:7c:a0:
05:f5:70:a0:47:57:cc:84:2c:a6:0f:87:d2:07:bc:b3:7c:6c:
b9:1b:79:cf:2f:71:fc:5b:41:19:7b:59:d0:ed:60:2a:f5:b6:
08:bd:28:a0:3e:b1:19:6e:22:82:df:ae:3c:1b:5f:67:d0:41:
04:5e:8b:3d:8b:9d:61:6a:35:6b:b0:a3:4d:e3:c3:d8:e6:04:
63:7e:fa:74:b5:a1:4a:8b:2b:e7:c7:f6:c3:16:f7:ec:e0:d7:
ca:16:2a:6f:83:ee:e1:69:4f:d0:af:dd:bc:e9:fb:0d:44:29:
0a:18:20:ad:cf:61:68:12:00:51:23:78:86:5c:a6:fb:c5:18:
c8:f1:3b:92:e0:85:ec:11:ea:e2:e4:77:3b:98:3e:b7:d4:c7:
79:52:56:bb:b5:81:32:bc:9f:e9:26:6e:9c:8c:20:09:b3:79:
68:d0:83:b4:57:61:3b:61:b5:bb:b7:68:1a:78:78:be:60:b2:
64:7a:0a:fe
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxY9qGT0Dg6SYspca0Aq9r1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjMxMjExMTMwMDA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODk1ZjgyZGVjNmM4ZjQyZWU5YjY1ZWVkNzhkYzkzYWJhZTE5NTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDVJtIwytWr81rMnQzTA3t9PC/O/
7m8hhVmlsOpZdsZt/MZMkIgNrbWa4I7ThTvMviXr52V6bt9RO/GLL2EXEwXxfzBG
wAuq6qi6DykoZPc9mkuVWU00+m/LrvxRSMex1QMSDv0jZnzi9ne+3pP7+e3LauCj
RKmADY5uJBEQdRRW+ZHy1lAwSp2jx0PYb2Ly/9LdRFKMe6paRt46JUVcbk1D9P3z
DFy8USwcMAc9hgXPwPY87OOr0JAKGkU4k0cQQ8hk639KENI9V0KFPKkCVlhj8s0e
xuHpjzwsZSE3Ovq9lpYc0TicFX2YymngZoTrkbW929SXrPH5qqt+o/mtxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCiV+C3sbI9C7ptl7teNyTq64ZWDMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvS0pYNExleHNqMEx1bTJYdTE0M0pPcnJobFlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUccaAwQA
UccdMA0GCSqGSIb3DQEBCwUAA4IBAQAncYlfzDKTst5J89qv4zGkH8UkQi2aFMHP
b4bLusMuYv/3VZfQGwDKvj2Je1hyrVx2E+rDGt37FL6Sk0QtRDkJZYVmWGN+fKAF
9XCgR1fMhCymD4fSB7yzfGy5G3nPL3H8W0EZe1nQ7WAq9bYIvSigPrEZbiKC3648
G19n0EEEXos9i51hajVrsKNN48PY5gRjfvp0taFKiyvnx/bDFvfs4NfKFipvg+7h
aU/Qr9286fsNRCkKGCCtz2FoEgBRI3iGXKb7xRjI8TuS4IXsEeri5Hc7mD631Md5
Ula7tYEyvJ/pJm6cjCAJs3lo0IO0V2E7YbW7t2gaeHi+YLJkegr+
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:40 2024 by rpki-client on console-ams.rpki-client.org