Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/cGlH2fuFunAJCk4CnBS2muNKkAM.roa
File: cGlH2fuFunAJCk4CnBS2muNKkAM.roa (raw, json)
Hash identifier: sZbrfz5uc1lB2YeS8iIljygL7QMgdXU02uZUnShV0U0=
Subject key identifier: 70:69:47:D9:FB:85:BA:70:09:0A:4E:02:9C:14:B6:9A:E3:4A:90:03
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 01877F96CA7B554F5B43C127C5111C2F586C
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/cGlH2fuFunAJCk4CnBS2muNKkAM.roa
Signing time: Fri 14 Apr 2023 11:46:41 +0000
ROA not before: Fri 14 Apr 2023 11:46:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 81.199.26.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:96:ca:7b:55:4f:5b:43:c1:27:c5:11:1c:2f:58:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Apr 14 11:46:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=706947d9fb85ba70090a4e029c14b69ae34a9003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8b:55:88:ec:f8:95:05:f6:4b:ce:93:6f:22:
6b:74:0b:ef:eb:3f:6f:97:82:7d:f4:10:ec:19:88:
76:9e:80:f4:6a:c0:4c:2f:7d:3d:3a:09:11:a0:f7:
91:f9:e4:d7:de:ac:bf:9c:d2:8c:be:db:4d:51:cc:
3a:b5:e1:64:bb:d6:42:c0:d8:90:c7:6e:36:64:6b:
28:57:60:12:da:c1:dc:ed:dc:37:08:a8:55:21:bd:
d9:b5:ba:32:a6:44:36:76:4a:b4:43:ae:39:db:f8:
ab:14:8f:38:4a:3f:fd:a6:82:ad:69:43:cc:7e:43:
53:59:f2:37:85:1a:31:0c:3a:b7:8b:4a:98:55:2b:
38:12:6f:29:57:2c:77:d8:a3:05:bf:f5:f0:c2:eb:
cb:34:3b:70:9d:d6:f9:ea:ba:02:80:1b:62:27:df:
09:f1:de:b9:f0:7e:50:05:d0:c7:cd:d0:15:8d:ba:
e6:c4:d9:92:ee:e4:32:c7:5c:ed:78:23:73:81:91:
1a:dd:b2:8a:f1:89:77:a5:d7:71:b1:47:66:f8:24:
2d:12:0b:12:02:12:a3:ea:08:8c:ba:9d:9c:1c:45:
20:e3:56:de:c0:69:e1:ff:21:b2:d0:39:ba:1c:d5:
81:e7:47:28:a8:fc:56:43:67:8c:02:ef:0c:4e:a3:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:69:47:D9:FB:85:BA:70:09:0A:4E:02:9C:14:B6:9A:E3:4A:90:03
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/cGlH2fuFunAJCk4CnBS2muNKkAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.26.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:72:a2:6e:77:d9:02:70:81:99:eb:d8:54:83:fb:99:a1:c6:
3d:03:cd:e1:3d:f9:ec:7e:77:8f:79:48:56:5b:4e:9b:d3:13:
31:b2:99:f2:9f:24:2f:fa:bc:53:79:66:a2:a6:e7:d8:20:f5:
5a:01:46:2a:91:9a:72:90:c5:21:40:83:10:a7:ac:e1:b2:f0:
83:e1:f7:84:77:d4:9e:f7:b1:ed:1b:d5:ae:24:e5:33:9c:fb:
22:12:2a:4b:5c:08:13:f2:c0:97:9c:ce:11:43:61:63:2b:94:
2b:c3:18:49:dd:56:a9:a3:82:f1:d3:5a:40:f8:57:f6:00:26:
f7:78:d5:2d:12:69:83:fb:56:60:0f:20:bf:d7:3f:40:f4:80:
c5:89:55:f3:bc:36:0c:20:13:f7:a0:c5:4a:72:71:59:a7:6e:
4b:f1:e6:40:23:cb:0b:13:36:ce:2a:a8:51:d3:37:09:d5:7c:
49:d9:1d:15:3b:18:18:48:7b:8a:82:bc:95:06:44:bc:38:4e:
d9:8e:14:12:ee:ee:15:f3:3c:f8:17:d7:6b:03:45:f5:d9:df:
d6:e9:1b:d1:c5:40:4d:b8:69:b9:dc:2e:69:3b:ff:0f:35:52:
17:92:d9:68:5e:dd:ca:6f:77:17:13:ff:a9:2e:ad:8c:b9:35:
ca:0d:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org