Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/_8MTtTyzDA5w0AXZ7lfFc7Zg06U.roa
File: _8MTtTyzDA5w0AXZ7lfFc7Zg06U.roa (raw, json)
Hash identifier: aHsPH5t2Q/UcwDkiSgMcs9vFaAfTDgbzZxZHtZr8qUE=
Subject key identifier: FF:C3:13:B5:3C:B3:0C:0E:70:D0:05:D9:EE:57:C5:73:B6:60:D3:A5
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01874C4B96DD2A3CEFCBE45034C3EEA55F3F
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/_8MTtTyzDA5w0AXZ7lfFc7Zg06U.roa
Signing time: Tue 04 Apr 2023 12:43:54 +0000
ROA not before: Tue 04 Apr 2023 12:43:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.199.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Apr 2023 11:40:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:4b:96:dd:2a:3c:ef:cb:e4:50:34:c3:ee:a5:5f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Apr 4 12:43:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ffc313b53cb30c0e70d005d9ee57c573b660d3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:22:15:34:7f:c0:95:50:74:14:f6:18:dc:
b2:f6:e1:72:9d:fa:d3:fc:04:34:2f:c1:39:ac:a7:
77:f2:38:0c:86:5f:e6:29:ff:24:07:26:86:8c:35:
2e:76:4f:7f:34:06:42:30:1a:b6:29:a3:3f:90:a8:
23:51:5e:e8:a2:82:e0:31:9e:00:e4:4f:3b:4d:24:
7d:bb:5c:bd:5d:f8:3b:bd:56:f8:07:1a:08:43:4e:
64:4a:08:8e:42:ad:1f:80:6d:a8:54:90:73:64:28:
18:c4:92:63:2f:1e:c9:0d:b7:fa:b0:9f:5c:e2:27:
73:c5:cc:5a:49:2f:53:d7:8f:b5:92:50:be:04:1b:
59:8f:7e:b2:e8:8d:8e:95:98:5d:63:84:75:3b:27:
72:84:d8:3d:c5:5e:c6:56:76:4d:f2:32:7c:c9:9c:
93:0b:f0:6d:c4:35:61:e6:ae:d8:3b:77:8c:bc:7d:
f4:37:36:88:70:4f:7f:8d:68:2b:9b:98:fa:08:3a:
cd:23:bd:45:b3:aa:d5:7d:1d:53:ee:ee:2a:2b:9d:
58:a8:f4:1f:e1:aa:af:1f:a3:db:a0:4a:01:6f:3a:
42:ea:a1:a6:39:68:08:56:f4:7c:bf:3f:3d:e1:0c:
ce:29:5b:9f:d9:58:e3:52:b0:ee:34:10:43:ae:06:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C3:13:B5:3C:B3:0C:0E:70:D0:05:D9:EE:57:C5:73:B6:60:D3:A5
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/_8MTtTyzDA5w0AXZ7lfFc7Zg06U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.31.0/24
Signature Algorithm: sha256WithRSAEncryption
90:06:a0:12:12:10:ff:45:d3:cd:79:64:fd:6f:2c:d5:85:74:
b6:84:c2:b9:01:be:c0:9a:fa:9e:43:61:f7:65:5b:e9:e4:4f:
2b:51:40:ae:57:0c:54:3f:9d:eb:d6:73:65:ad:4e:c3:59:90:
c0:f0:8c:b3:d4:0e:03:86:d2:ed:99:44:de:26:5f:7f:a6:9b:
f6:34:c2:ab:75:98:68:f4:f5:52:bc:51:06:c5:a7:78:8a:a4:
96:fa:6d:5d:d3:f1:80:9e:ce:bc:9f:c6:85:eb:ee:e5:fa:1e:
bc:1d:45:56:58:3b:01:29:5b:92:9d:6e:19:a7:25:21:a7:30:
2a:e1:9a:74:c0:7f:25:26:0b:f8:3f:7a:4b:ff:5f:ee:b0:ca:
bf:e8:e2:8b:09:36:19:3d:34:fb:af:fe:af:ee:ef:28:e0:65:
9c:53:33:c3:95:c1:2a:65:6f:09:ba:29:92:e6:81:5c:17:1c:
7a:17:39:65:e2:7e:28:f6:56:a7:c9:92:cb:e8:14:a8:f0:9f:
83:68:f4:9f:a3:c0:67:4b:de:d5:b5:74:53:cc:70:0f:77:a9:
52:e2:69:e0:4e:e7:12:1a:57:8b:20:c8:76:50:34:78:8c:10:
44:5a:fb:90:f0:e3:0e:d0:dc:74:b7:11:92:e9:67:ac:fc:c7:
c2:75:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org